Microsoft September 2026 Patch Tuesday security updates (966 flaws)
Security Patch Release
Summary
Hide ▲
Show ▼
Microsoft released its September 2026 Patch Tuesday updates for a record 966 flaws, including two actively exploited zero-days that can enable local SYSTEM privilege escalation on affected systems.
Related Happenings
Windows 10 KB5120249 cumulative update (August 2026 Patch Tuesday)
Security Patch Release
H score26
First: 11.08.2026 21:26
Last: 11.08.2026 21:26
Sources 1
About this happening:
Microsoft released Windows 10 KB5120249 for versions 22H2 and 21H2, making it a mandatory Patch Tuesday update for supported systems. The release fixes security...
Windows 10 KB5120249 cumulative update (August 2026 Patch Tuesday)
Security Patch ReleaseAbout this happening: Microsoft released Windows 10 KB5120249 for versions 22H2 and 21H2, making it a mandatory Patch Tuesday update for supported systems. The release fixes security...
Microsoft Windows 10 KB5099539 extended security update
Security Patch Release
H score16
First: 14.07.2026 21:49
Last: 14.07.2026 21:49
Sources 1
About this happening:
Microsoft released Windows 10 KB5099539, a security update bundle for Windows 10 ESU that rolls in July 2026 Patch Tuesday fixes for 570 vulnerabilities. The p...
Microsoft Windows 10 KB5099539 extended security update
Security Patch ReleaseAbout this happening: Microsoft released Windows 10 KB5099539, a security update bundle for Windows 10 ESU that rolls in July 2026 Patch Tuesday fixes for 570 vulnerabilities. The p...
Microsoft YellowKey patch release (CVE-2026-45585)
Security Patch Release
H score20
First: 11.06.2026 20:43
Last: 11.06.2026 20:43
Sources 1
About this happening:
Microsoft's Patch Tuesday updates this week patched YellowKey (CVE-2026-45585), closing a Windows BitLocker bypass that could expose protected volumes. The vendor rele...
Microsoft YellowKey patch release (CVE-2026-45585)
Security Patch ReleaseAbout this happening: Microsoft's Patch Tuesday updates this week patched YellowKey (CVE-2026-45585), closing a Windows BitLocker bypass that could expose protected volumes. The vendor rele...
Microsoft June 2026 Patch Tuesday record 206-vulnerability update
Security Patch Release
H score55
First: 10.06.2026 12:38
Last: 10.06.2026 12:38
Sources 1
About this happening:
Microsoft shipped a record 206-vulnerability update for its software portfolio, including three publicly disclosed flaws. The release spans Critical and Important...
Microsoft June 2026 Patch Tuesday record 206-vulnerability update
Security Patch ReleaseAbout this happening: Microsoft shipped a record 206-vulnerability update for its software portfolio, including three publicly disclosed flaws. The release spans Critical and Important...
Microsoft June 2026 Patch Tuesday GreenPlasma and YellowKey fixes
Security Patch Release
H score15
First: 10.06.2026 02:11
Last: 10.06.2026 02:11
Sources 1
About this happening:
Microsoft released June 2026 Patch Tuesday updates that fixed the GreenPlasma and YellowKey flaws, closing two previously disclosed issues in the Windows ecosystem...
Microsoft June 2026 Patch Tuesday GreenPlasma and YellowKey fixes
Security Patch ReleaseAbout this happening: Microsoft released June 2026 Patch Tuesday updates that fixed the GreenPlasma and YellowKey flaws, closing two previously disclosed issues in the Windows ecosystem...
Timeline
-
08.09.2026 21:18 3 articles · 15h ago
Microsoft releases September 2026 Patch Tuesday for 966 flaws
Initial DisclosureMicrosoft released September 2026 Patch Tuesday security updates for a record 966 flaws, marking its largest security update ever and including 105 Critical vulnerabilities across multiple product families.
Show sources
- Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days — www.bleepingcomputer.com — 08.09.2026 21:18
- Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days — www.bleepingcomputer.com — 08.09.2026 21:18
- Microsoft Plugs Nearly 1,000 Security Holes — krebsonsecurity.com — 09.09.2026 00:44
-
08.09.2026 21:18 3 articles · 15h ago
Microsoft patches two actively exploited Windows zero-days that enable SYSTEM privileges
Technical Analysis UpdateMicrosoft patched CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows Advanced Local Procedure Call (ALPC). Both flaws were actively exploited and can let an authorized attacker elevate privileges locally to SYSTEM, but no exploitation details were shared.
Show sources
- Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days — www.bleepingcomputer.com — 08.09.2026 21:18
- Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days — www.securityweek.com — 08.09.2026 22:20
- Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days — thehackernews.com — 09.09.2026 07:41