September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-11T07:23:26Zb2e161d71b9640b0bbf279e85713a3b4577c69972eb2c56d410bd40e462c08c0
Microsoft security updatesPatch TuesdaySeptember 2026critical vulnerabilitiesexploited in the wildvulnerability managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two zero-day vulnerabilities exploited in the wild. The feed item is a high-level vulnerability and active-exploitation alert; specific CVE identifiers and affected products are not provided in the supplied document.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
b2e161d71b9640b0bbf279e85713a3b4577c69972eb2c56d410bd40e462c08c0
Enrichment time
2026-09-11T07:23:26Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs · Baitaphish