Microsoft fixes record 964 flaws, including 2 exploited zero-days
ID: dff1d401-30da-5894-8ab0-ace90afc6ee0
STIX ID: report--dff1d401-30da-5894-8ab0-ace90afc6ee0
Feed Name: Malwarebytes Blog
Threat Score
Microsoft’s September 2026 Patch Tuesday addresses 964 customer-impacting CVEs (104 Critical, 860 Important), including two actively exploited local elevation-of-privilege zero-days (CVE-2026-81963, CVE-2026-85880) and high-severity remote-code-execution vulnerabilities affecting DNS Server, Remote Desktop Services and other core products; organizations are advised to apply updates and reboot as required to mitigate privilege escalation and RCE risks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.