Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft's September Patch Tuesday fixes a record 964 CVEs, including two actively exploited Windows privilege-escalation zero-days, CVE-2026-81963 and CVE-2026-85880.
86
Product
Windows ALPC
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 8, 2026
- Last mentionedSep 9, 2026
Timeline
4 articles · newest firstSeptember 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)
Microsoft's September 2026 Patch Tuesday fixes a record 973 vulnerabilities, including 113 critical and two Windows privilege-escalation flaws already exploited in the wild.
78
Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
Microsoft's September 2026 Patch Tuesday fixes a record 966 flaws, including two Windows zero-days actively exploited to gain SYSTEM privileges.
82
Microsoft Patch Tuesday Update September 2026 – 974 Vulnerabilities Fixed, Including 2 Zero-Days
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities across Windows and Office, including two actively exploited Windows privilege-escalation zero-days.
88
Related CVEs
by mentions- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-83941<1%8.8Missing Authorization in Microsoft Entra ID Enables Privilege Escalation
- CVE-2026-66302<1%9.8Critical unauthenticated file-path RCE in Microsoft Skype for Business
- CVE-2026-69524<1%8.1Use-After-Free Remote Code Execution in Microsoft Active Directory Domain Services
- CVE-2026-73014<1%7.8Missing-Authorization Local Privilege Escalation in Microsoft Data Sharing Service Client
- CVE-2026-84001<1%7.5Out-of-bounds Read in Windows Kerberos KDC Enables Network Denial of Service
- CVE-2026-693291%7.5Unauthenticated out-of-bounds read DoS in Microsoft Windows BranchCache
- CVE-2026-72978<1%7.5Unauthenticated DoS in Microsoft Active Directory Federation Services (AD FS)
- CVE-2026-69401<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows AVCTP Component
Appears with
- Microsoftvendor · 4
- Windowsproduct · 4
- Windows Update Stackproduct · 4
- Exchange Serverproduct · 1
- Skype for Business Serverproduct · 1
- CISAvendor · 1
- SQL Serverproduct · 1
- Wordproduct · 1
- Volexityvendor · 1
- Azureproduct · 1
- Windows Message Queuingproduct · 1
- Microsoftorganization · 1
- Microsoft Threat Intelligence Centreorganization · 1
- Proofpointvendor · 1
- SANSvendor · 1
- Windows Routing and Remote Access Serviceproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.