Microsoft Plugs Nearly 1,000 Security Holes
Summary: Microsoft released updates addressing at least 974 security vulnerabilities across Windows and other software, its largest single patch batch and a jump from the previous record of 570 set in July. The batch includes two actively exploited zero-day flaws (CVE-2026-81963 and CVE-2026-85880) that allow privilege elevation, and 113 bugs rated critical, bringing the 2026 total to more than 2,600.
Why it matters: Two of the flaws fixed this month are already being exploited in the wild, and one critical Windows Shell bug (CVE-2026-69829) carries a CVSS score of 9.8 and needs no privileges or user interaction - so the testing-and-deployment backlog this volume creates is exposure, not just workload.