THREATOPS

THREAT OPS › Threat News › Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft fixes record 964 flaws, including 2 exploited zero-days

medmalwarebytes_blogPublished 2026-09-09

<p class="wp-block-paragraph">Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. </p>

<p class="wp-block-paragraph">Microsoft lists <a href="https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep" rel="noreferrer noopener nofollow" target="_blank">974 CVEs</a> i

MITRE ATT&CK techniques

SharepointT1213.002
DNS ServerT1583.002
VulnerabilitiesT1588.006
Cloud ServicesT1021.007
CredentialsT1589.001
DNS ServerT1584.002

Indicators of compromise

CVE-2026-81963cve
CVE-2026-85880cve
https://www.cve.org/CVERecord?id=CVE-2026-81963url
https://www.cve.org/CVERecord?id=CVE-2026-85880url

Original source: https://www.malwarebytes.com/blog/news/2026/09/microsoft-fixes-record-964-flaws-including-2-exploited-zero-days