Attackers are actively exploiting two of the vulnerabilities and another 58 are more likely to be exploited, according to Microsoft.

Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities.

Patch Tuesday September 2026: Microsoft fixed 974 CVEs, including two vulnerabilities exploited as zero-days (CVE-2026-85880 and CVE-2026-81963)