Microsoft's September Patch Tuesday fixed a record ~972 vulnerabilities, 112 rated critical
Following·Day 2·first covered 8 Sep 2026·2 sources
Microsoft Patches Record 972 Vulnerabilities, 112 Critical, in September
The gist
Three consecutive record patch months signal a sustained and steep rise in disclosed vulnerabilities. Item 5618 notes that AI-assisted attacks could eventually cause substantial damage, adding a forward-looking dimension to the volume trend.
The full picture
Microsoft's September 2026 Patch Tuesday fixed a record 972 vulnerabilities, including 112 rated critical. The monthly count has risen sharply across consecutive months: Microsoft set prior records in July (~570 vulnerabilities) and August (~620). Google and other companies have also published record vulnerability counts recently. Dustin Childs of the Zero Day Initiative described the trend as the new normal.
How it developed
Sources
Ars Technica AI
The Neuron
The daily email
Want this in your inbox?
I send one email each morning with the stories that moved. If you would rather just read here, that works too.
Subscribe free