Microsoft Breaks Another Patch Tuesday Record

2026-09-09 | original

read original get YubiKey 5 NFC Security Key → more articles

Why This Matters

Microsoft's September 2026 Patch Tuesday fixes a record 966 vulnerabilities, including 105 critical flaws and two zero-days already under active attack. The count continues a steep climb from 400 in August and 570 last month, signaling an escalating patching burden for IT teams and consumers alike. Volumes this large make triage and timely deployment harder, raising the risk that exploited bugs linger unpatched.

Key Takeaways

Record 966 fixes, with 105 rated critical, 81 of them remote code execution.
Two zero-days are already being exploited, making rapid patching urgent.
Monthly patch counts are surging: 400 in August, 570 last month, now 966.

Worth a Look

YubiKey 5 NFC Security Key — When zero-days are being exploited in the wild, hardened login matters as much as patching. The YubiKey 5 NFC adds a physical second factor for Microsoft accounts, Windows sign-in, and countless other services, and it works over USB-A or by tapping a phone with NFC. It's a small, durable keychain-sized way to make stolen credentials far less useful to attackers.

See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.

Microsoft's September 2026 Patch Tuesday is its largest ever, fixing a record 966 vulnerabilities, including 105 rated critical and two zero-days already being exploited in attacks. BleepingComputer reports: This Patch Tuesday addresses 105 "Critical" vulnerabilities, 81 of which are remote code execution, 20 are elevation of privileges, 2 are information disclosure, and 1 security feature bypass. The approximate number of bugs in each vulnerability category is listed below:

- 438 Elevation of Privilege Vulnerabilities - 19 Security Feature Bypass Vulnerabilities - 258 Remote Code Execution Vulnerabilities - 173 Information Disclosure Vulnerabilities - 56 Denial of Service Vulnerabilities - 16 Spoofing Vulnerabilities Last month, Microsoft's Patch Tuesday updates fixed 570 security flaws, following 400 vulnerabilities patched in August.