Microsoft releases its September 2026 Patch Tuesday security updates, fixing 966 reported vulnerabilities across its software portfolio. The updates include two zero-day flaws that are described as being actively exploited at the time of release. Tech coverage notes that 2026 is already a record year for common vulnerabilities and exposures (CVEs), and that this single monthly update contributes a large share of fixes.
Both outlets characterize the update as unusually large in scope, with TechRadar describing it as fixing “nearly a thousand” flaws and Bleeping Computer putting the figure at 966. While the sources align on the overall count and the presence of two actively exploited zero-days, they differ slightly in phrasing rather than substance. Neither outlet provides detailed technical descriptions of the vulnerabilities in the provided excerpts, focusing instead on the overall scale of the patch release and the status of the zero-days.
