Vulnerabilities
Microsoft Patch Tuesday 2026: 972 CVEs, 113 Critical, 2 Exploited Zero‑Days
Microsoft released its September 2026 Patch Tuesday update, addressing 972 vulnerabilities, including 113 critical and two zero‑days that had already been exploited in the wild. The update covers Windows and Office components, requiring immediate patching to mitigate active threats. Defenders should prioritize applying the patches, verify installation, and monitor for exploitation activity.
What Happened
Microsoft rolled out security updates for 972 CVEs, including 113 critical and two zero‑days that had been actively exploited.
Impact
Systems running Windows 10/11, Windows Server 2016/2019/2022, and Microsoft Office 365 are affected. Attackers used the zero‑days to gain remote code execution on unpatched endpoints.
Immediate Actions
- Download and install the September 2026 cumulative updates from the Microsoft Update Catalog or WSUS.
- Verify that the updates are applied by checking the KB numbers listed in the release notes.
- Run vulnerability scanners to confirm remediation of the 972 CVEs.
- Enable automatic updates or schedule a patch window to ensure timely application.
- Monitor logs for exploitation attempts targeting the zero‑days (e.g., CVE‑2026‑xxxx).
Long‑Term Mitigation
Implement least‑privilege and network segmentation to limit lateral movement, keep endpoint detection and response solutions up to date, and maintain a robust patch management policy that includes zero‑day monitoring.
Related vulnerabilities
Microsoft Patch Tuesday 2026: 972 CVEs, 2 Exploited Zero‑Days, 113 Critical Vulnerabilities
Microsoft released updates for 972 CVEs on September 2026 Patch Tuesday, including two actively exploited zero‑days and 113 critical flaws. Defenders must prioritize patching Windows, Office, and Exchange, verify deployment, and monitor for exploitation attempts.
Read briefing
Microsoft Patch Tuesday: 972 CVEs, 2 Exploited Zero-Days, 113 Critical Vulnerabilities
Microsoft released security updates for 972 CVEs in September 2026 Patch Tuesday, including two zero-days that were actively exploited and 113 critical flaws. Defenders should prioritize patching affected systems, validate deployment, and monitor for exploitation indicators.
Read briefing
Microsoft Patch Tuesday 2026: 972 CVEs, 113 Critical, 2 Exploited Zero‑Days
Microsoft released security updates for 972 CVEs in September 2026, including 113 critical issues and two zero‑days that were actively exploited. Defenders must prioritize patching affected systems, validate deployment, and monitor for exploitation indicators.
Read briefing
Microsoft Patch Tuesday 2026: 972 CVEs, 113 Critical, 2 Exploited Zero‑Days
Microsoft released updates for 972 vulnerabilities in September 2026, including 113 critical flaws and two zero‑days that were actively exploited. Defenders must prioritize patching, verify deployment, and monitor for exploitation indicators.
Read briefing