AI-Assisted Discovery Helps Microsoft Patch Over 1,000 Vulnerabilities in a Month

Microsoft's September patch fixed over 950 vulnerabilities, including 113 critical ones, bringing the year-to-date total to about 2,750—more than double the previous record of 1,250 in 2020. Two zero-days (CVE-2026-81963 and CVE-2026-85880) are already exploited for privilege escalation in Windows.

• September patch fixed over 950 vulnerabilities, including 113 critical
• Year-to-date total about 2,750, up from 1,250 in 2020
• Two zero-days already exploited for privilege escalation
• 258 issues are remote code execution, 438 privilege escalation