Microsoft Plugs Nearly 1,000 Security Holes – Krebs on Security

Microsoft has released its largest patch bundle to date, addressing 974 vulnerabilities across Windows and other products, with two zero-day flaws—CVE-2026-81963 and CVE-2026-85880—currently being actively exploited for privilege escalation. This monthly update includes 113 critical issues, notably a high-severity remote code execution flaw in the Windows Shell identified as CVE-2026-69829 (CVSS 9.8) and a DNS weakness affecting Windows Server 2012 and later versions labeled CVE-2026-69730. The surge in disclosed bugs, attributed partly to AI-assisted discovery, is prompting experts to warn enterprises about the growing operational burden of testing and deploying such extensive fix sets within standard maintenance windows.