TENABLE BLOG
Microsoft's September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)
KEV CRITICAL Patch Tuesday Windows Server Exchange Server EoP
Strategic summary
The largest Patch Tuesday release with 964 CVEs, including 104 critical vulnerabilities, addresses privilege escalation in Windows Update Stack and authentication bypass in Exchange Server, requiring immediate evaluation and prioritization.
Relevance for you
The largest Patch Tuesday release with 964 CVEs, including 104 critical vulnerabilities, addresses privilege escalation in Windows Update Stack and authentication bypass in Exchange Server, requiring immediate evaluation and prioritization.
Mentioned CVEs
Risk score
100
- cvss base
- 78.00
- kev bonus
- 20.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 113.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational