September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-13T07:23:27Z•27170e9fd188a86098d7a21c4c2880b40fb54804e70865aab78d18d0a46a52a4
critical-vulnerabilitiesexploited-vulnerabilitymicrosoft-security-updatespatch-tuesdayseptember-2026vulnerability-managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two exploited zero-day vulnerabilities. The item highlights an unusually significant patch release and likely elevated urgency for enterprise remediation, but does not identify the affected products or CVE identifiers in the supplied document.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
27170e9fd188a86098d7a21c4c2880b40fb54804e70865aab78d18d0a46a52a4
Enrichment time
2026-09-13T07:23:27Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs · Baitaphish