Microsoft fixes 974 CVEs in September 2026 Patch Tuesday

Microsoft's September 2026 Patch Tuesday addressed 974 CVEs, including two exploited zero-days: CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in ALPC. The release included 438 elevation-of-privilege issues, 257 remote code execution flaws and 20 wormable-class vulnerabilities.

• 974 CVEs fixed in September 2026 Patch Tuesday
• Two exploited zero-days: CVE-2026-81963 and CVE-2026-85880
• 438 elevation-of-privilege and 257 RCE vulnerabilities
• 20 wormable-class flaws in the release