Free tools Windows power users keep installed
One-click scans. No signup required.
Microsoft’s September 8, 2026, Patch Tuesday release addressed two reported, actively exploited Windows privilege-escalation vulnerabilities: CVE-2026-81963 in Windows Update Stack and CVE-2026-85880 in Windows Advanced Local Procedure Call (ALPC). Both could let an authorized attacker already able to act locally gain SYSTEM privileges. They are not described as vulnerabilities that provide initial remote access.
The two vulnerabilities at a glance
| CVE | Windows component | Reported weakness | Reported impact and status |
|---|---|---|---|
| CVE-2026-81963 | Windows Update Stack | Improper link resolution before file access (“link following”) | Actively exploited local elevation of privilege; could lead to SYSTEM privileges |
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) | Heap-based buffer overflow | Actively exploited local elevation of privilege; could lead to SYSTEM privileges |
The vulnerability descriptions and exploitation status were reported in BleepingComputer’s September 8, 2026, Patch Tuesday coverage, which reproduces Microsoft’s descriptions. That report says Microsoft had not shared details about how either flaw was exploited in attacks.
What each flaw does
CVE-2026-81963: Windows Update Stack
Microsoft’s reproduced description says: “Improper link resolution before file access (‘link following’) in Windows Update Stack allows an authorized attacker to elevate privileges locally.” In other words, the reported issue concerns how the component resolves a link before accessing a file. The description establishes local privilege escalation, not a remote entry point. The report credits Romain Deperne and the Microsoft Threat Intelligence Centre (MSTIC).
CVE-2026-85880: Windows ALPC
Microsoft’s reproduced description says: “Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.” ALPC is short for Advanced Local Procedure Call. As with the Update Stack flaw, the report describes exploitation by an authorized attacker acting locally and a possible rise to SYSTEM privileges; it does not publish a detailed attack chain.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
What “zero-day” means here
“Zero-day” is used differently across security reporting. In its Microsoft Defender Vulnerability Management documentation, Microsoft Learn describes a zero-day in that product context as a vulnerability without an official patch or security update. That general definition does not mean these two vulnerabilities remained unpatched after Microsoft’s September release. The report describes them as zero-days and says the September Patch Tuesday release addressed them.
Microsoft Learn’s documentation also explains that the Defender portal can surface vulnerability recommendations and remove a zero-day tag after a patch is released. This is general product behavior, not evidence that a particular workaround or paid product is necessary for these CVEs: Mitigate zero-day vulnerabilities in Microsoft Defender Vulnerability Management.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
How to check which update applies
The available report does not establish affected Windows versions, KB identifiers, build numbers, or specific mitigation entries for these advisories. Avoid relying on an unverified KB number or assuming every Windows installation is affected. Check Microsoft’s CVE-2026-81963 advisory and CVE-2026-85880 advisory in the Security Update Guide for the current affected-product information, then install the update listed for your supported Windows version. Microsoft Learn describes the Defender portal as another place to review vulnerability details and available recommendations or workarounds, when provided.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How large was the September release?
BleepingComputer reported that the September 2026 release addressed 966 flaws, including 105 rated Critical. These are figures from that publication’s September 8 report, not counts independently confirmed here against Microsoft’s underlying release data.
Quick Recap
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
