{"version":1,"type":"story","url":"https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days","json":"https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days.json","markdown":"https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days.md","slug":"microsoft-releases-record-974-patches-including-2-zero-days","headline":"Microsoft Releases Record 974 Patches, Including 2 Zero-Days","summary":"Microsoft released a record 974 patches across its products, including two previously exploited zero-day vulnerabilities. The first, CVE-2026-85880, allows local attackers to escalate privileges on Windows systems. The second, CVE-2026-81963, enables local attackers to elevate privileges in Windows Update components. Microsoft has not patched these vulnerabilities in four years. Additionally, 20 of the 974 vulnerabilities are considered potentially wormable, meaning they can be exploited remotely without user interaction. These patches are part of Microsoft's September Patch Tuesday, which also includes fixes for Office, SQL, Developer Tools, SharePoint, Azure, and other systems. The rise in the number of vulnerabilities being patched does not mean more threats are being found; rather, AI-assisted discovery is making the haystack larger but not finding more needles. Organizations need to prioritize which vulnerabilities are relevant and pose a threat.","keyPoints":["Microsoft released 974 security patches","Two zero-day vulnerabilities were exploited","20 vulnerabilities are considered potentially wormable"],"whyItMatters":"This highlights the ongoing challenge of patching vulnerabilities and the importance of prioritizing security updates based on their potential impact.","category":{"slug":"models","name":"Generative AI & Models","url":"https://digestai.news/category/models"},"entities":{"companies":["Microsoft"],"models":[],"people":["Satnam Narang","Dustin Childs","Tyler Reguly"]},"firstPublishedAt":"2026-09-10T19:29:15Z","updatedAt":"2026-09-10T19:29:15Z","sourceCount":2,"hasPrimarySource":false,"sources":[{"outlet":"securityweek.com","title":"Microsoft's monthly patch has 974 security fixes, including 2 exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities - almost all of them found by AI systems","url":"https://securityweek.com/microsoft-patches-record-974-vulnerabilities-including-two-exploited-zero-days","publishedAt":"2026-09-10T19:29:15Z","type":"press","primary":false,"lead":true},{"outlet":"Ars Technica AI","title":"Why this month's Microsoft patch release is a doozy","url":"https://arstechnica.com/security/2026/09/microsoft-patches-a-record-972-vulnerabilities-112-of-them-critical","publishedAt":"2026-09-08T21:11:46Z","type":"press","primary":false,"lead":false}],"sourceNotes":null,"discussions":[{"site":"Reddit","url":"https://www.reddit.com/r/singularity/comments/1wct82j/microsofts_monthly_patch_has_974_security_fixes/","points":null}],"thread":{"title":"AI Unlocks Massive Software Vulnerability Surge","url":"https://digestai.news/thread/microsoft-releases-record-974-patches-including-2-zero-days","storyCount":2},"cite":{"text":"Digest AI, \"Microsoft Releases Record 974 Patches, Including 2 Zero-Days\", 10 September 2026, https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days","publisher":"Digest AI","title":"Microsoft Releases Record 974 Patches, Including 2 Zero-Days","datePublished":"2026-09-10T19:29:15Z","url":"https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}