September 2026 Patch Tuesday set a Microsoft record with 973 CVEs addressed, while only two vulnerabilities were known exploited and none were publicly disclosed. The update roundup also highlighted Office end-of-support migration issues, Apple’s macOS 27 Golden Gate release with a zero-day fix, and Windows 11 26H2 arriving alongside other important Microsoft fixes and upcoming support cutoffs. #CVE-2026-85880 #CVE-2026-81963 #KB5002907 #CVE-2026-86950 #Windows11 26H2 #Office2016 #Office2019 #macOS27 #GoldenGate
Keypoints
- Microsoft addressed 973 CVEs in September 2026, setting a new Patch Tuesday record.
- Only CVE-2026-85880 and CVE-2026-81963 were reported as known exploited.
- KB5002907 caused Office 2016 and Office 2019 removal and deactivation issues, forcing Microsoft to pause the update.
- Apple released macOS 27 Golden Gate and patched CVE-2026-86950, a zero-day exploit.
- Windows 11 26H2 arrived, while Microsoft also warned of upcoming support cutoffs for several Windows and Exchange versions.
Read More: https://www.helpnetsecurity.com/2026/10/09/october-2026-patch-tuesday-forecast/