Microsoft issues record-breaking security patches for Windows

Microsoft Patch Tuesday cybersecurity vulnerabilities zero-day exploits AI-assisted security Windows updates

Microsoft has issued a record-breaking number of security patches during its September 2026 Patch Tuesday, addressing between 966 and 974 vulnerabilities across its software suite. This massive deployment marks the largest single patch batch in the company’s history, significantly outpacing previous monthly totals.

Among the addressed flaws, 105 are classified as critical. Notably, two zero-day vulnerabilities (CVE-2026-81963 and CVE-2026-85880) were identified as having been actively exploited by attackers prior to the release of the fixes. The surge in identified vulnerabilities is largely attributed to the implementation of MDASH (Microsoft Security multi-model agentic scanning harness), an AI-driven system that uses automated agents to scan code and simulate attack scenarios.

While the updates aim to bolster security, the deployment has caused several functional issues for users. Reported bugs include failures in Remote Desktop Services (RDP), issues with Linux virtual machine file sharing, and audio failures for certain USB devices on Windows 11 versions 24H2, 25H2, and 26H1. In response to the high volume of threats, Microsoft has updated its guidance, recommending that users complete security updates within three days.

Entities

AMD · MDASH · Microsoft · Windows · Zero Day Initiative

Claims

What the coverage asserts, and how many sources carry each claim.

[● 5 SOURCES] Two zero-day vulnerabilities, CVE-2026-81963 and CVE-2026-85880, were actively exploited by attackers before being patched. android-mt.ouest-france.fr · smartmania.cz · borncity.com · www.lifehacker.jp · www.world-today-news.com
[● 2 SOURCES] The KB5124008 update has caused functional issues, including audio failures for USB devices and Remote Desktop Service errors. www.appinn.com · winfuture.de
[● 2 SOURCES] The surge in vulnerability discovery is attributed to the use of MDASH, an AI-driven multi-model agentic scanning harness. android-mt.ouest-france.fr · www.world-today-news.com
[● 7 SOURCES] Microsoft released a record-breaking batch of security patches in September 2026, addressing between 966 and 974 vulnerabilities. android-mt.ouest-france.fr · www.appinn.com · www.it-boltwise.de · smartmania.cz · borncity.com · +2 more
[○ 1 SOURCE] Microsoft has updated its deployment recommendations, suggesting users install security updates within three days. www.appinn.com
[● 3 SOURCES] Of the vulnerabilities addressed in the September cycle, 105 were classified as critical. www.it-boltwise.de · borncity.com · smartmania.cz