# Microsoft Releases Record 974 Patches, Including 2 Zero-Days

Digest AI · Generative AI & Models · published 2026-09-10T19:29:15Z

Canonical: https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days

## Summary

Microsoft released a record 974 patches across its products, including two previously exploited zero-day vulnerabilities. The first, CVE-2026-85880, allows local attackers to escalate privileges on Windows systems. The second, CVE-2026-81963, enables local attackers to elevate privileges in Windows Update components. Microsoft has not patched these vulnerabilities in four years. Additionally, 20 of the 974 vulnerabilities are considered potentially wormable, meaning they can be exploited remotely without user interaction. These patches are part of Microsoft's September Patch Tuesday, which also includes fixes for Office, SQL, Developer Tools, SharePoint, Azure, and other systems. The rise in the number of vulnerabilities being patched does not mean more threats are being found; rather, AI-assisted discovery is making the haystack larger but not finding more needles. Organizations need to prioritize which vulnerabilities are relevant and pose a threat.

## Key points

- Microsoft released 974 security patches
- Two zero-day vulnerabilities were exploited
- 20 vulnerabilities are considered potentially wormable

## Why it matters

This highlights the ongoing challenge of patching vulnerabilities and the importance of prioritizing security updates based on their potential impact.

## Sources

1. [Microsoft's monthly patch has 974 security fixes, including 2 exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities - almost all of them found by AI systems](https://securityweek.com/microsoft-patches-record-974-vulnerabilities-including-two-exploited-zero-days) (securityweek.com, 2026-09-10)
2. [Why this month's Microsoft patch release is a doozy](https://arstechnica.com/security/2026/09/microsoft-patches-a-record-972-vulnerabilities-112-of-them-critical) (Ars Technica AI, 2026-09-08)

Part of the developing story: [AI Unlocks Massive Software Vulnerability Surge](https://digestai.news/thread/microsoft-releases-record-974-patches-including-2-zero-days) (2 stories)

## Cite

Digest AI, "Microsoft Releases Record 974 Patches, Including 2 Zero-Days", 10 September 2026, https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/microsoft-releases-record-974-patches-including-2-zero-days.json