Microsoft released security updates on September 8, 2026, as part of the monthly Patch Tuesday cycle. The company addressed a total of 974 vulnerabilities across its product lines, including Windows 11, Office, Azure, SQL Server, Exchange Server, and SharePoint Server. This figure represents a year-over-year increase of 1,032.6 percent.
The updates cover 723 vulnerabilities specifically within Windows systems, with 611 of those affecting Windows 11 versions 24H2 and 25H2. Key components receiving patches include Windows Update, Windows Hello, biometric services, and the Windows graphics kernel.
A critical vulnerability, tracked as CVE-2026-81963, has been identified as being actively exploited by attackers. Located in the Windows Update Stack, the flaw stems from improper link parsing before file access, which allows authorized local attackers to escalate privileges.
Jeremy Chapman, Director of Microsoft 365, noted that delaying quality updates allows attackers to use artificial intelligence to exploit known gaps. Consequently, Microsoft has reduced its recommended window for installing quality updates to less than 3 days to minimize the period of risk exposure.
