Microsoft September 2026 Patch Tuesday: Record 966 Flaws Fixed, Two Zero-Days Patched

On September 8, 2026, Microsoft released its monthly Patch Tuesday security updates, addressing a record-breaking 966 vulnerabilities — the highest number documented for a single Patch Tuesday cycle. The update bundle includes fixes for critical security flaws across the Windows operating system, Microsoft Office suite, and various enterprise platforms. Notably, two zero-day vulnerabilities are confirmed to be actively exploited in the wild. Microsoft has not disclosed the CVE identifiers or detailed exploitation mechanics prior to full advisory release, but has urged immediate patching. The company recommends applying updates through Windows Update, WSUS, or Intune for enterprise environments. Security teams are advised to prioritize the zero-day patches given the confirmed active exploitation. The previous record for most patches in a single cycle was lower, making this release historically significant. BleepingComputer reported on the release, citing Microsoft's official Patch Tuesday announcement.