Microsoft released updates addressing more than 1,400 security vulnerabilities across Windows and other software, far exceeding September's previous record of about 1,000 fixes. One flaw, CVE-2026-96951, a Windows Shell security feature bypass, is already being exploited in the wild, while another, CVE-2026-108398 in the .NET Framework, was publicly disclosed before patching though not yet seen exploited. At least 78 of the fixes are rated critical, mostly allowing remote code execution.
krebsonsecurity.com
· 2026-10-13
Microsoft's latest Patch Tuesday addressed close to 1,000 vulnerabilities, but the scale of the update introduced new problems for some users. The company has since issued out-of-band emergency patches to correct issues caused by the original round of fixes.
darkreading.com
· 2026-09-15
Microsoft has released an emergency out-of-band update to correct problems introduced by its September Patch Tuesday release, which fixed nearly 1,000 vulnerabilities but broke folder sharing on Hyper-V Linux virtual machines, disrupted Remote Desktop Services sessions, and caused issues with some USB audio devices. The new fix covers Windows 11 versions 26H1, 25H2, and 24H2, along with Windows Server 2025, 2022, and 2012 R2, plus LTSC editions of Windows 10.
theverge.com
· 2026-09-15
Microsoft's latest Patch Tuesday update addresses 966 vulnerabilities, the largest batch it has ever released in a single month, including 105 critical-rated bugs. Two of the flaws are zero-days already being actively exploited by attackers. This follows 570 fixes in August and 400 the month before, showing a sharp month-over-month escalation.
it.slashdot.org
· 2026-09-09
Microsoft released patches for 974 vulnerabilities across Windows and other products, its largest single update batch ever, surpassing July's record of 570 fixes. The release includes two actively exploited zero-day flaws that let attackers escalate privileges, plus 113 critical-rated bugs including a dangerous DNS weakness and a Windows Shell remote code execution flaw scoring 9.8 out of 10 in severity.
krebsonsecurity.com
· 2026-09-08
Microsoft released its September security update addressing roughly 972 vulnerabilities, including 112 rated critical, surpassing the previous record of 570 set just two months ago. The company has now fixed 2,760 vulnerabilities in 2024 alone, more than double last year's total and on pace to exceed the combined totals of the past three years.
arstechnica.com
· 2026-09-08
Microsoft has issued the KB5122878 update for Windows 10 Enterprise LTSC and machines enrolled in the Extended Security Updates program, bumping systems to build 19045.7725 (or 19044.7725 for LTSC 2021). The update bundles this month's Patch Tuesday security fixes plus smaller changes covering Secure Boot certificate rollout, a time-zone correction for Morocco, and diagnostic and compatibility tweaks.
bleepingcomputer.com
· 2026-09-08
Microsoft's latest Patch Tuesday release addresses 966 vulnerabilities, its largest batch ever, including 105 rated Critical and two zero-days already being exploited in the wild. The count excludes 204 additional flaws Microsoft patched earlier in the month across products like Azure AI Language, Copilot Studio, and Entra ID.
bleepingcomputer.com
· 2026-09-08
Microsoft is set to release its largest patch Tuesday yet, fixing more than 650 security vulnerabilities in Windows, according to sources. This follows a summer of escalating patch counts—around 200 in June, 570 in July, and nearly 400 in August—driven by AI models from Anthropic and OpenAI that are uncovering software flaws far faster than before.
theverge.com
· 2026-09-08
Microsoft has confirmed that the August 2026 .NET Framework cumulative update causes some WPF-based applications to throw a System.IO.FileFormatException when printing or exporting to PDF/XPS with fonts like Calibri. The bug affects current Windows 10 and 11 releases as well as Windows Server versions from 2012 through 2025, and Microsoft is still working on a permanent fix.
bleepingcomputer.com
· 2026-08-24
GoKawiil