September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-10T19:23:27Z01e14215af93b2e7fb633d0428d810d0facdc6a1449f31837fc4cd63e5364187
CVEMicrosoft security updatesPatch Tuesdaycritical vulnerabilitiesexploited vulnerabilitiesvulnerability managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two zero-days exploited in the wild. The available feed entry does not identify the affected products or CVE identifiers, so immediate vendor patch review and prioritization of exploited vulnerabilities are warranted.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
01e14215af93b2e7fb633d0428d810d0facdc6a1449f31837fc4cd63e5364187
Enrichment time
2026-09-10T19:23:27Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs · Baitaphish