Microsoft Patches Record 974 Flaws, Two Zero-Days Exploited

Microsoft's September Patch Tuesday fixes a record 974 security flaws, including two zero-days already under active attack. The zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in the Advanced Local Procedure Call component, allow privilege escalation on compromised Windows machines.