September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-10T07:23:27Za042ab1f02f06c06b43d1079c947c574566c52402d9c9a2b2732d9a3bbd0c500
active-exploitationcritical-vulnerabilitiesmicrosoftpatch-tuesdaysecurity-updatesvulnerability-managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two exploited zero-day vulnerabilities. The item highlights active exploitation risk and the need for prompt security updates, but does not identify specific CVE IDs in the supplied metadata.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
a042ab1f02f06c06b43d1079c947c574566c52402d9c9a2b2732d9a3bbd0c500
Enrichment time
2026-09-10T07:23:27Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.