🛡️ **BREAKING: Microsoft September 2026 Patch Tuesday — ~970 Vulnerabilities Including 2 Exploited Zero-Days Require Immediate Deployment**
Published Tuesday, September 08, 2026 at 11:24 PM PT BLUF: Microsoft released nearly 1,000 security fixes on September Patch Tuesday, including two actively exploited zero-day vulnerabilities and 113 critical-severity flaws. Deployment is urgent; some bugs are wormable and already under attack. Details on specific CVEs and affected products remain limited. DETAILS: Microsoft released 964–972 CVEs (sources vary slightly; lowest confirmed count 964) in September 2026 Patch Tuesday — another monthly record. Microsoft has deployed AI-assisted vulnerability discovery since mid-2026, accelerating patch volume. Two zero-day vulnerabilities are confirmed exploited (CrowdStrike reporting); specific CVE numbers and technical details not yet available in sourced material. 113 critical-severity vulnerabilities included in this release per CrowdStrike analysis. At least some vulnerabilities are described as “possibly wormable” — capable of network propagation without user interaction — elevating worm/ransomware risk. Timing: Patches released on standard Patch Tuesday schedule; exploitation activity already active. IMPACT: ...