September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-15T19:23:29Z•53909b69dd3caca6e8a45a8abf1f63598aa5630add5a2661743c6cda3e2fcac0
Microsoft security updatesPatch Tuesdayactively exploited vulnerabilitiescritical vulnerabilitiesvulnerability managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two zero-days actively exploited in the wild. The item emphasizes urgent vendor patching and prioritization of actively exploited vulnerabilities, though the supplied RSS metadata does not identify the affected products or CVE identifiers.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
53909b69dd3caca6e8a45a8abf1f63598aa5630add5a2661743c6cda3e2fcac0
Enrichment time
2026-09-15T19:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.