Microsoft's Record 974-Vulnerability Patch Update Includes Actively Exploited Flaws
Microsoft addressed a record-breaking 974 vulnerabilities in its latest Patch Tuesday release. Two of these flaws are confirmed to be actively exploited in real-world attacks.
TL;DR
- Microsoft patched 974 vulnerabilities, the highest number ever in a single update.
- Includes two zero-day flaws actively exploited in the wild.
- Windows received the bulk of fixes—723 vulnerabilities.
- Over 110 flaws were rated as critical severity.
- Organizations should prioritize patching to mitigate active threats.
In an unprecedented move, Microsoft released patches for 974 vulnerabilities during its September Patch Tuesday update—the largest single-month total in the company’s history. Among these fixes are two zero-day vulnerabilities that have already been exploited by threat actors in live attacks.
The massive volume of updates spans across multiple Microsoft product lines, with the majority impacting Windows systems. Security teams are advised to act swiftly to deploy these patches, especially for the flaws under active exploitation.
Breakdown of Vulnerabilities
- 723 flaws were found in Windows operating systems.
- 111 vulnerabilities affected Office and Office 2016 applications.
- 62 issues were identified in SQL products.
- 22 flaws impacted various Developer Tools used in enterprise environments.
Security Implications
- More than 110 vulnerabilities are rated as 'critical,' meaning they could be exploited remotely without user interaction.
- Two of the patched flaws are confirmed to be under active attack, increasing urgency for deployment.
- Organizations using unpatched versions of Windows or Office are at heightened risk of compromise.
- IT teams should review Microsoft’s guidance to prioritize high-risk systems and endpoints.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.