1d:I[70616,["/_next/static/chunks/0kcf5dt6yxdox.js","/_next/static/chunks/1su5n1uv1ti4s.js","/_next/static/chunks/0gvke1wv6udfg.js","/_next/static/chunks/1dfrle3jgmlzh.js","/_next/static/chunks/162lgvduyr-fa.js","/_next/static/chunks/2gcnnopam8e9w.js","/_next/static/chunks/2g60iab5a1pkg.js"],"Breadcrumb"] 1e:I[90762,["/_next/static/chunks/0kcf5dt6yxdox.js","/_next/static/chunks/1su5n1uv1ti4s.js","/_next/static/chunks/0gvke1wv6udfg.js","/_next/static/chunks/1dfrle3jgmlzh.js","/_next/static/chunks/162lgvduyr-fa.js","/_next/static/chunks/2gcnnopam8e9w.js","/_next/static/chunks/2g60iab5a1pkg.js"],"ArticleGrid"] 1f:T1b28,

Microsoft shipped fixes for 966 vulnerabilities in its September 2026 Patch Tuesday, the largest single release the company has ever put out and enough to carry its running total for the year to roughly 2,750 — more than double the previous annual record of about 1,250 set in 2020, according to InfoQ's tally. Two of the flaws were already being exploited.

Key takeaways

BleepingComputer's breakdown counts 438 elevation-of-privilege bugs, 258 remote code execution flaws, 173 information disclosure issues and 105 rated Critical by Microsoft.
The two exploited zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows ALPC, are both local privilege escalation bugs carrying a CVSS score of 7.8.
Microsoft has been running an AI-powered vulnerability discovery system internally, and security practitioners say the constraint has moved from finding bugs to evaluating, testing and deploying the fixes.

What actually shipped in September

Vendor tallies differ slightly because they draw the boundary around the release in different places — Tenable counted 964 CVEs and 104 Critical entries, while SecurityWeek put the broader figure at 974. The shape is consistent regardless of which line you take: privilege escalation dominates, remote code execution makes up roughly a quarter of the batch, and just over a hundred items carry Microsoft's Critical rating.

The two bugs under active attack are the ones with a clock on them. CVE-2026-81963 is a link-following flaw in the Windows Update Stack that lets an authorised attacker escalate to SYSTEM; it was reported by researcher Romain Deperne alongside the Microsoft Threat Intelligence Center. CVE-2026-85880 is a heap-based buffer overflow in Windows Advanced Local Procedure Call with the same outcome, credited to Volexity's Mark Kelly and to David Galazin and Jeremy Hedges at Proofpoint.

Neither is a remote entry point on its own. Both are the second half of an intrusion chain, which is exactly why they show up in real campaigns: an attacker who already has a foothold uses them to take the box.

Why the numbers keep climbing

Microsoft has confirmed it uses an AI-powered system to hunt for flaws across its own products, and the volume curve tracks that adoption. It is not an isolated case. Security journalist Brian Krebs has noted that Microsoft is far from the only large vendor shipping outsized patch bundles this year, with several companies crediting large language model tooling for the jump in findings.

Writing for Ars Technica, Dan Goodin placed the surge against an open letter in which OpenAI, Anthropic, AWS, Google, Microsoft and others warned that AI-enabled cyber attacks would become substantially more widespread and sophisticated. The industry response has been to point the same capability at its own code first — a defensible strategy that happens to generate a very large invoice for everybody downstream.

The pattern is already visible in offensive tooling as well, where autonomous testing agents have started surfacing findings that survived years of conventional review. Our earlier report on an AI pentester that located a three-year-old admin token in 25 minutes describes the same dynamic from the attacker's side of the table.

The complaint from the people who deploy it

None of the practitioners quoted in InfoQ's report disputed that finding more bugs is good. Their objection was about throughput at the other end of the pipeline.

Jack Bicer, director of vulnerability research at Action1, argued that the difficulty at this scale is not working through the list but knowing what deserves attention first, with IT teams forced to separate the items that demand same-day action from those that can ride the normal deployment cycle. Marva Bailer, founding CEO at Qualaix, put the operational cost more plainly:

Finding the problem is one step. Organizations still have to understand their exposure, test the patch, determine what else it might affect and then deploy it across potentially thousands of devices and interconnected systems.

Bailer also flagged the squeeze that matters most: AI shortens the gap between a flaw existing and a flaw being known, which compresses the window teams have to test and roll out a fix before someone weaponises it. Tyler Reguly, security R&D associate director at Fortra, was blunter still, suggesting that while Microsoft is playing catch-up on its own backlog the raw counts have stopped carrying much signal at all.

What changes for IT and security teams

The practical shift is that patch management is becoming a prioritisation problem rather than a coverage problem. Nobody is deploying 966 fixes in a maintenance window, so the work moves upstream: mapping which of those CVEs touch systems that are actually exposed, and building enough test automation to validate a batch without hand-checking each one.

That favours organisations with accurate asset inventories and automated rollout pipelines, and penalises everyone running patch cycles on spreadsheets. If the vendor curve holds — and Microsoft has given no indication it plans to slow discovery down — October will not be smaller.

FAQ

How many vulnerabilities did Microsoft patch in September 2026?

BleepingComputer counted 966 flaws fixed on Patch Tuesday, while Tenable logged 964 CVEs and SecurityWeek counted 974 across the wider release. The differences come from where each tracker draws the boundary around the release, not from a dispute about the underlying advisories.

Which September 2026 vulnerabilities are being actively exploited?

Two: CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows ALPC. Both are local elevation-of-privilege flaws rated CVSS 7.8 that let an attacker who already has access on a machine escalate to SYSTEM, so they should be prioritised ahead of higher-scoring but unexploited items.

Is AI responsible for the record patch volume?

Partly. Microsoft has confirmed it runs an AI-powered vulnerability discovery system, and other vendors have credited similar tooling for their own increases. Attribution for any individual CVE is not published, so the honest answer is that AI-assisted research is a major contributor rather than the sole cause.

a:["$","div",null,{"className":"mx-auto max-w-7xl px-4 py-8 sm:px-6","children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"BreadcrumbList\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https://ainewsway.com\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"#ai-security\",\"item\":\"https://ainewsway.com/tag/ai-security\"}]}"}}],["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"ItemList\",\"@id\":\"https://ainewsway.com/tag/ai-security#itemlist\",\"name\":\"#ai-security Articles\",\"numberOfItems\":1,\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"url\":\"https://ainewsway.com/articles/microsofts-record-966-flaw-patch-month-moves-the-bottleneck-to-defenders-mu3n38nz\",\"name\":\"Microsoft's Record 966-Flaw Patch Month Moves the Bottleneck to Defenders\"}]}"}}],["$","$L1d",null,{"items":[{"label":"# ai-security"}]}],["$","h1",null,{"className":"mb-8 text-3xl font-bold text-zinc-900 dark:text-zinc-100","children":["#","ai-security"]}],[["$","$L1e",null,{"articles":[{"id":"ca0f5c0e-17cf-462e-8d8b-b2b6461e3689","slug":"microsofts-record-966-flaw-patch-month-moves-the-bottleneck-to-defenders-mu3n38nz","title":"Microsoft's Record 966-Flaw Patch Month Moves the Bottleneck to Defenders","subtitle":"AI-assisted discovery is filling the pipeline faster than IT teams can evaluate, test and deploy what comes out of it","content":"$1f","excerpt":"Microsoft fixed 966 vulnerabilities in September, pushing its 2026 total near 2,750. Security teams say triage, not discovery, is now the hard part.","coverImage":"https://cdn.ainewsway.com/uploads/2026/09/e14c7360-8f05-46a9-892b-17b23c6d58f3.webp","coverImageCaption":"Microsoft's September 2026 update pushed nearly a thousand fixes to security teams at once, turning patch triage into the limiting factor.","authorId":"6773f67d-d7fa-4b19-8f38-384f10ac761b","status":"PUBLISHED","publishedAt":"2026-09-16T05:08:06.846Z","viewCount":0,"likeCount":0,"readingTime":5,"isFeatured":false,"isBreakingNews":false,"metaTitle":"Microsoft Patches 966 Flaws as AI Discovery Scales Up","metaDescription":"Microsoft's September 2026 Patch Tuesday fixed 966 vulnerabilities and 2 exploited zero-days. Why AI-assisted discovery is straining defenders.","metaKeywords":["Patch Tuesday September 2026","Microsoft vulnerabilities","AI vulnerability discovery","CVE-2026-85880","CVE-2026-81963","patch management","zero-day exploit"],"ogImage":null,"aiSummary":"Microsoft's September 2026 Patch Tuesday fixed 966 vulnerabilities, including two actively exploited zero-days, making it the company's largest single release. Roughly 2,750 fixes have shipped in 2026, more than double the previous annual record. Microsoft has been running an AI-powered vulnerability discovery system, and other vendors report similar surges. Security practitioners say the constraint has shifted from finding flaws to prioritising, testing and deploying patches across large estates within a shrinking exploitation window.","aiTags":[],"sentiment":null,"articleType":"ANALYSIS","videoEmbed":null,"videoType":null,"seoScore":85,"isAutoGenerated":true,"isBackfill":false,"pipelineStage":null,"copyrightScore":null,"similarityScore":null,"matchedSourceId":null,"createdAt":"2026-09-16T05:07:41.088Z","updatedAt":"2026-09-16T09:13:18.355Z","contentUpdatedAt":"2026-09-16T09:13:18.354Z","deletedAt":null,"author":{"id":"6773f67d-d7fa-4b19-8f38-384f10ac761b","name":"Seung Jung","username":"Seung Jung","avatar":null},"categories":[{"id":"32f2303b-b593-473f-bf9c-6a99acbe6ce1","name":"Developer Tools","slug":"developer-tools"}],"tags":[{"id":"ca8e24a6-cbd4-4bba-a596-bf5bbdafb5aa","name":"Microsoft","slug":"microsoft"},{"id":"b33b2800-95a4-4cc2-9cea-4a3b5111dca3","name":"Cybersecurity","slug":"cybersecurity"},{"id":"e44c525e-3e5e-41ee-9bfb-66ebc599bc00","name":"Patch Tuesday","slug":"patch-tuesday"},{"id":"9328242d-872c-4c23-9263-70c440f7a5c7","name":"Vulnerability Management","slug":"vulnerability-management"},{"id":"449efa26-05cd-4f8e-9dea-209b655d3d01","name":"AI Security","slug":"ai-security"}],"translations":[{"id":"93b7e1f0-0d1d-47dc-bb9e-f59d8f6e8a10","language":"es","title":"El récord de 966 fallos parcheados por Microsoft traslada el cuello de botella a los defensores","subtitle":"El descubrimiento asistido por IA llena la cola más rápido de lo que los equipos de TI pueden evaluar, probar y desplegar","excerpt":"Microsoft corrigió 966 vulnerabilidades en septiembre y su total de 2026 roza las 2.750. Los equipos de seguridad dicen que lo difícil ya no es descubrir, sino priorizar.","metaTitle":"Microsoft parchea 966 fallos con ayuda de la IA","metaDescription":"El Patch Tuesday de septiembre de 2026 corrigió 966 vulnerabilidades y 2 días cero explotados. La IA acelera el hallazgo y ahoga a los defensores."},{"id":"9e9a84d8-ff16-4c84-84f1-f0aa090a3607","language":"ja","title":"Microsoft、月間966件の記録的パッチ　ボトルネックは防御側へ移った","subtitle":"AIによる脆弱性発見が、IT部門が評価しテストして展開できる速度を超えてキューを埋めている","excerpt":"Microsoftが9月に966件の脆弱性を修正し、2026年の累計は約2,750件に迫った。セキュリティ担当者は、難所はもはや発見ではなく仕分けだと語る。","metaTitle":"Microsoftが966件修正、AI発見が生んだ記録","metaDescription":"2026年9月の月例パッチでMicrosoftは966件の脆弱性と悪用中のゼロデイ2件を修正した。AIによる発見が防御側を圧迫している理由を読み解く。"},{"id":"3e83f1d9-7a19-4927-8fa9-eaf5b1d9827b","language":"ko","title":"Microsoft, 한 달 966건 패치 신기록… 병목은 이제 방어자 쪽으로 넘어왔다","subtitle":"AI 기반 취약점 탐지가 IT 팀이 평가하고 테스트해 배포할 수 있는 속도보다 빠르게 대기열을 채우고 있다","excerpt":"Microsoft가 9월에 취약점 966건을 수정해 올해 누적이 2,750건에 육박했다. 보안 팀들은 이제 어려운 건 탐지가 아니라 분류라고 말한다.","metaTitle":"Microsoft 966건 패치, AI 탐지가 만든 신기록","metaDescription":"2026년 9월 Microsoft 패치 화요일에 취약점 966건과 악용 중인 제로데이 2건이 수정됐다. AI 기반 탐지가 방어자를 압박하는 이유를 짚는다."},{"id":"af141865-745c-4e10-880f-660325acfcbe","language":"zh","title":"Microsoft單月修補966個漏洞創紀錄，瓶頸轉移到防禦端","subtitle":"AI輔助的漏洞探勘填滿佇列的速度，已經超過IT團隊評估、測試與部署的能力","excerpt":"Microsoft九月修復966個漏洞，2026年累計逼近2,750個。資安團隊直言，現在難的不是發現，而是分流排序。","metaTitle":"Microsoft修補966漏洞，AI探勘推高紀錄","metaDescription":"Microsoft 2026年9月例行修補修復966個漏洞與2個遭利用的零時差漏洞。解析AI輔助漏洞探勘為何正在壓垮防禦端。"}],"celebrities":[{"id":"b4b2327a-471f-4dbc-a85f-a9c29f3ddd82","nameKo":"마이크로소프트","nameEn":"Microsoft","slug":"microsoft","profileImage":null}]}]}],"$L20"]]}]

#ai-security

Microsoft's Record 966-Flaw Patch Month Moves the Bottleneck to Defenders

Subscribe to Newsletter

#ai-security

Microsoft's Record 966-Flaw Patch Month Moves the Bottleneck to Defenders