Microsoft's September 2026 Patch Tuesday fixed a record 972 vulnerabilities, 112 of them critical, according to reporting on September 9.
The September total follows consecutive records of roughly 570 in July and 620 in August, with Google and other companies also recently posting record vulnerability counts. Dustin Childs of the Zero Day Initiative called the trend 'the new normal', while Ars Technica noted that damage from AI-assisted attacks 'could eventually be substantial'.