Microsoft's September Patch Tuesday update marks a new record, with 974 vulnerabilities patched across its product line. Among these, two have confirmed active exploitation, meaning attackers are already using them in the wild. Microsoft also identified 58 additional flaws that it considers more likely to be exploited, based on its threat intelligence.
The unusually high patch count reflects the expanding attack surface of modern software, though the practical risk varies by vulnerability. Administrators are advised to prioritize the two actively exploited issues and the 58 high-likelihood flaws first, as these pose the most immediate threat to systems.
This record-setting release continues a trend of growing patch volumes, a pattern observed across multiple vendors in recent years. For security teams, it highlights the importance of automated patching and regular vulnerability assessment to stay ahead of potential attacks.