Microsoft Patch Tuesday – September 2026
Patch Summary
- Total Patches: 1,240
- Critical: 120
- Important: 925
- Moderate: 125
- Low: 70
Zero-Day Vulnerabilities
| CVE | Title | CVSS | Severity | Status |
|---|---|---|---|---|
| CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | 7.8 | Important | Actively Exploited |
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 | Important | Actively Exploited |
Priority Guidance for MSPs
Immediate Action Required:
- Deploy patches for both zero-day vulnerabilities (CVE-2026-81963, CVE-2026-85880) due to active exploitation
- Prioritize all 120 Critical patches in your update cycle
Standard Deployment:
- Schedule 925 Important patches within standard maintenance windows
- Remaining Moderate and Low patches can follow regular cadence
Key Risk: Both active zero-days target privilege escalation pathways (Windows Update Stack and ALPC), requiring urgent remediation across all Windows systems.