September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-13T19:23:27Z•55b3d0017b3721e53a437e4acedffbd08be43bd52930eff42b72092757484b74
CVEMicrosoft security updatesPatch TuesdaySeptember 2026critical vulnerabilitiesexploited vulnerabilitiesvulnerability managementzero-day

What happened

CrowdStrike's September 2026 security bulletin reports 972 CVEs, including 113 rated critical and two zero-day vulnerabilities exploited in the wild. The document is an RSS listing and does not identify the affected products or CVE identifiers.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
55b3d0017b3721e53a437e4acedffbd08be43bd52930eff42b72092757484b74
Enrichment time
2026-09-13T19:23:27Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.