Microsoft rushes emergency Windows 11 patch after update breaks features

The September 8 Patch Tuesday update was intended to secure systems against 966 vulnerabilities, including two actively exploited zero-day flaws. CVE-2026-81963 and CVE-2026-85880, which targeted the Windows Update Stack and Advanced Local Procedure Call (ALPC) respectively, both allowed attackers to escalate privileges to System level. While those critical holes were plugged, the update introduced significant collateral damage for many users.

Reports surfaced quickly detailing failures in Remote Desktop Services, Hyper-V-based Linux virtual machines, and specific USB audio configurations. The new emergency patch serves as a cumulative fix, meaning users can install it directly without needing to have applied the problematic version from the previous week. Despite this, Microsoft acknowledges that some USB Audio Class 1.0 devices remain unsupported, with a separate solution still in development. The surge in these high-volume security patches follows a broader industry trend where AI-assisted tools are increasingly identifying software vulnerabilities at a rapid pace.