Why this month's Microsoft patch release is a doozy

Ars Technica reports that Microsoft's September patch release addresses roughly 972 vulnerabilities — a new record — with 112 rated critical. Zero Day Initiative researcher Dustin Childs counts 997 when including Chromium fixes ported into Edge. Two months ago Microsoft patched a then-record 570; last month about 620. Year-to-date fixes already total 2,760, more than double last year, on pace to exceed 2023–2025 combined.

This is not an isolated Microsoft story. Google and others have also published record vulnerability counts recently. Two weeks ago OpenAI, Anthropic, AWS, Google, Microsoft, and about 100 organizations warned in an open letter of a narrowing patch window ahead of an expected surge in AI-enabled exploitation. The industry is shipping patches at unprecedented volume while conceding that defenders may still lose the race.

Childs calls the spike the "new normal" and notes that a correlating spike in active exploits has not appeared — yet. That lag is the strategic risk: discovery capacity is rising faster than observed weaponization, which is exactly the window attackers wait to close.

Signal Desk's read: treat this Patch Tuesday as an operations stress test, not a victory lap. Congratulating Microsoft's security teams for throughput is fair; pretending volume equals control is not. When wormable bugs are numerous enough that a seasoned researcher stops counting past 20, the monthly release has become a triage crisis for every enterprise that still treats patch cycles as a calendar ritual.

The CVE mix is the practical threat surface. Two zero-days — CVE-2026-81963 in the Windows update service and CVE-2026-85880 in Windows Advanced Local Procedure — lack public detail on who is exploiting them or how broadly. Exchange CVE-2026-55007 lets a remote unauthenticated attacker reach code execution via a malicious Visio email attachment. SharePoint carries roughly 17 distinct remote-code-execution issues. SQL Server alone contributes on the order of 60 privilege-escalation bugs this month, including one triggered through SQL Copilot. Authenticator privilege escalation and a 9.8-rated Remote Desktop Services RCE round out a release that hits identity, mail, collaboration, data, and remote access in one bundle.

AI-assisted discovery is winning the argument on output even while critics debate false positives and motives. Mozilla's May claim of 271 Mythos-found vulnerabilities with almost no false positives is the kind of datapoint vendors will cite. The counter-skepticism — that companies are using AI to justify AI spend — does not erase the patch queue. The likelier read is dual-use asymmetry: the same tools that help vendors find bugs will help attackers prioritize and weaponize them once exploit tooling matures.

Expect the "new normal" to break first at mid-market shops that cannot absorb 100-plus criticals a month. Large banks and cloud providers will automate; everyone else will accumulate unpatched critical debt. That debt is the inventory for the AI-enabled tsunami the open letter warned about.

Counting Microsoft monthly fixes is inherently fuzzy — some bugs were previously addressed or sit in non-Microsoft products — which is why Childs' ZDI tallies matter as an independent baseline. The broader industry framing has shifted from whether AI helps find bugs to whether patching and change-management can keep pace.