Microsoft's September Patch Tuesday fixes a record 974 flaws, two already exploited and 20 wormable. What to patch first, and why AI is behind it.

Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities.

Patch Tuesday September 2026: Microsoft fixed 974 CVEs, including two vulnerabilities exploited as zero-days (CVE-2026-85880 and CVE-2026-81963)