Microsoft releases massive security update addressing nearly 1,000 vulnerabilities

Microsoft has released a massive security update addressing nearly 1,000 vulnerabilities across its product ecosystem. Reports indicate that between 972 and 997 security flaws were resolved, including those in third-party software. Of these, 114 vulnerabilities have been classified as critical.

Two specific zero-day vulnerabilities (CVE-2026-85880 and CVE-2026-81963) are already being exploited in the wild. One flaw affects the update function in certain versions of Windows 11, while the other impacts Windows 10 and various server editions. While direct internet attacks are not possible without an initial malicious program being present on the machine, successful exploitation could allow attackers to gain near-total control over the affected system.

In addition to these security fixes, Microsoft is introducing new AI models for the workplace, speech recognition tools, and expanded Extended Security Updates for older Windows systems. The company is also focusing on the Microsoft Sentinel security platform to provide more automated integration for enterprises.