Microsoft: 964 Patches in One Month: We Were Living With All These Bugs, and How Many Are Still Left Out There?

​

Damn, September 2026's Patch Tuesday completely blew my mind… Microsoft just dropped a record-breaking 964 vulnerability fixes in a single month. That's a crazy 70% jump from the previous record back in July, and we're already way past 2,700 patches just this year. Absolutely nuts.

Among all that chaos, three critical flaws scored a terrifying 9.8 CVSS rating, letting unauthorized hackers execute code over the network. We're talking about CVE-2026-69730, a use-after-free bug in Windows DNS Server, CVE-2026-69829, a heap-based buffer overflow in Windows Shell, and CVE-2026-72979, another use-after-free issue in Windows DHCP Server.

And if you're wondering, no, this isn't just about Windows. It touches everything across the board, including operating systems (Windows), cloud services, developer tools, and productivity software. Honestly, it's not even just a Microsoft headache. Big vendors like Oracle are getting slammed with the same thing right now, mostly because AI-assisted vulnerability hunting is unearthing old code flaws faster than anyone can keep up with.

​Join us at r/stopbadbots and help protect the people who build the internet.

TL;DR: Microsoft just patched a record 964 bugs in a single month—including three 9.8 severity RCEs in DNS, DHCP, and Shell—covering OS, cloud, dev tools, and productivity apps. With AI finding flaws faster than ever, we've been living with all these hidden vulnerabilities, which makes you wonder how many are still out there.