Ars Technica is retelling the release; the source material does not include the original source.
In its September update, Microsoft fixed about 972 vulnerabilities. Of those, 112 are rated critical.
Two months earlier, Microsoft fixed 570 vulnerabilities. A month earlier, the company fixed about 620.
The exact count in a monthly update can vary because some bugs were already fixed or affected non-Microsoft products.
Claim check:
- According to Ars Technica, Microsoft fixed about 972 vulnerabilities in its September update, 112 of them critical. (confirmed only by the carrying publication: evidence; «Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.»)
- Two months earlier, Microsoft fixed 570 vulnerabilities, and a month earlier it fixed about 620. (confirmed only by the carrying publication: evidence; «It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them.»)
- The exact number of fixes in a monthly Microsoft update cannot be counted precisely because some bugs were fixed earlier or affected non-Microsoft products. (confirmed only by the carrying publication: evidence; «Counting the precise number of vulnerabilities fixed in a monthly patch release for Microsoft is never an exact science. In some cases, the bugs were previously addressed or affected non-Microsoft products.»)
Publications:
- https://arstechnica.com/security/2026/09/microsoft-patches-a-record-972-vulnerabilities-112-of-them-critical
- https://openai.com/collective-cyberdefense
score 84.7 · kind release · revision 1 · stories st-1x73t4