Microsoft Plugs Nearly 1,000 Security Holes – Krebs on Security
Reported exploitedWindowsEdgeOur summary
Microsoft has released its largest patch bundle to date, addressing 974 vulnerabilities across Windows and other products, with two zero-day flaws—CVE-2026-81963 and CVE-2026-85880—currently being actively exploited for privilege escalation. This monthly update includes 113 critical issues, notably a high-severity remote code execution flaw in the Windows Shell identified as CVE-2026-69829 (CVSS 9.8) and a DNS weakness affecting Windows Server 2012 and later versions labeled CVE-2026-69730. The surge in disclosed bugs, attributed partly to AI-assisted discovery, is prompting experts to warn enterprises about the growing operational burden of testing and deploying such extensive fix sets within standard maintenance windows.
Krebs on Security publishes this story on its own site; we link to it rather than reprint it.
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.