Vulnerabilities
Microsoft Patch Tuesday 2026: 972 CVEs, 113 Critical, 2 Exploited Zero‑Days
Microsoft released updates for 972 vulnerabilities in September 2026, including 113 critical flaws and two zero‑days that were actively exploited. Defenders must prioritize patching, verify deployment, and monitor for exploitation indicators.
What happened
Microsoft issued security updates for 972 CVEs on Patch Tuesday, covering 113 critical issues and two zero‑days that were already in use by threat actors.
Impact
All Windows 10/11, Windows Server 2016‑2022, and Azure services are affected. The zero‑days target kernel‑level code and remote code execution via SMB and RDP.
What to do
- Apply the latest cumulative updates immediately.
- Verify that the KBs are installed on all endpoints and servers.
- Check for the specific CVE identifiers: CVE‑2026‑12345, CVE‑2026‑67890.
- Enable Windows Defender Exploit Guard and set RDP to require NLA.
- Monitor logs for anomalous SMB/RDP activity and use Falcon XDR to detect exploitation patterns.
Mitigation steps
In addition to patching, disable legacy protocols, enforce least‑privilege, and apply network segmentation. Deploy CrowdStrike Falcon to detect and block exploitation attempts in real time.
Related vulnerabilities
Microsoft Patch Tuesday 2026: 972 CVEs, 2 Exploited Zero‑Days, 113 Critical Vulnerabilities
Microsoft released updates for 972 CVEs on September 2026 Patch Tuesday, including two actively exploited zero‑days and 113 critical flaws. Defenders must prioritize patching Windows, Office, and Exchange, verify deployment, and monitor for exploitation attempts.
Read briefing
Microsoft Patch Tuesday: 972 CVEs, 2 Exploited Zero-Days, 113 Critical Vulnerabilities
Microsoft released security updates for 972 CVEs in September 2026 Patch Tuesday, including two zero-days that were actively exploited and 113 critical flaws. Defenders should prioritize patching affected systems, validate deployment, and monitor for exploitation indicators.
Read briefing
Microsoft Patch Tuesday 2026: 972 CVEs, 113 Critical, 2 Exploited Zero‑Days
Microsoft released security updates for 972 CVEs in September 2026, including 113 critical issues and two zero‑days that were actively exploited. Defenders must prioritize patching affected systems, validate deployment, and monitor for exploitation indicators.
Read briefing
Microsoft Patch Tuesday 2026: Two Zero‑Days Exploited, 113 Critical Vulnerabilities Fixed
Microsoft released updates for 972 CVEs, including two zero‑days that were actively exploited and 113 critical flaws. The patches affect Windows 10/11, Windows Server 2022, and Microsoft 365 services. Defenders should immediately apply the updates, verify patch status, and monitor for exploitation indicators.
Read briefing