Skip to content
archiveexploit · 08 Sep 2026 · 19:14 UTC

Microsoft Patch Tuesday Hits Record 974 CVEs, Two Exploited

EXPLKEVCVE-2026-85880source · CISA
KEVActive exploitation (KEV)

CISA KEV means this flaw has been seen exploited in real attacks — not predicted, observed. Treat it as urgent regardless of its score.

What to do
  • On CISA KEV — actively exploited. Patch immediately.

last 60 dispatches · spectrum

Microsoft's Patch Tuesday September 2026 rollout has broken previous records, with the company addressing 974 CVEs across its product lineup in a single release. Two of these vulnerabilities were already being exploited in the wild before fixes became available, prompting quick action from federal cybersecurity authorities. The sheer volume of this month's Patch Tuesday September 2026 release dwarfs recent months. Windows accounted for 723 of the fixed flaws, while the Office suite received patches for 222 issues, 111 of which affected Office 2016 specifically. …

CVE · detail
grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected