Microsoft breaks Patch Tuesday record with 974-CVE deluge

Microsoft's Patch Tuesday release addressed 974 CVEs, a record, including two exploited bugs, CVE-2026-81963 and CVE-2026-85880, confirmed by CISA. Federal agencies must patch by September 22. Adobe issued 10 bulletins covering 172 CVEs, including a zero-day in Magento and a critical Adobe Commerce bug.