Microsoft Releases Record-Breaking Security Patch Batch for September 2026
Compare the reporting
Discrepancy in the total number of vulnerabilities reported.
Open the listed sources to review each publisher’s original wording.
Story essentials
Microsoft Corp.
Global
September 8, 2026
Show 1 more
This page is produced by collecting and structuring multiple public reports. Sections based only on reporting or testimony affect the displayed assessment, and the page is updated when new information is identified.
About this article
COMPAMIR Editorial Team
The COMPAMIR editorial team brings together public reporting and links to the original coverage. We update the page as new information emerges.
Read our editorial policy- Earlier version 29/9/2026, 4:21:24 AM
Microsoft released updates for 974 security vulnerabilities, the largest single patch batch in its history. The update includes two actively exploited zero-day flaws (CVE-2026-81963 and CVE-2026-85880). 113 vulnerabilities are rated as critical, including a DNS weakness and a Windows Shell remote code execution flaw. Security experts highlight the growing challenge for organizations to test and deploy such high volumes of patches.
- Earlier version 19/9/2026, 3:20:53 AM
Read next
Prioritized by shared people, places, and events.
Critical security vulnerabilities in PHP discovered
Two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) allow remote code execution. All PHP versions from the last 20 years are affected. Millions of exploit attempts have been observed globally.
Related book
The Art of Invisibility
Author: Kevin Mitnick
This book provides deep insights into the vulnerabilities of modern digital systems and the cat-and-mouse game between attackers and defenders, which is essential for understanding why large-scale patching is critical yet challenging.
As an Amazon Associate, COMPAMIR earns from qualifying purchases.