Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
Summary
Microsoft's September 2026 Patch Tuesday has released updates addressing a record 966 vulnerabilities. Among these are two zero-day vulnerabilities that are already being actively exploited in the wild.
IFF Assessment
The disclosure of actively exploited zero-day vulnerabilities represents a significant threat to systems, as attackers can leverage them before patches are widely deployed.
Severity
Given that these are zero-days and actively exploited, the potential for widespread impact and ease of exploitation is high, suggesting a critical severity.
Defender Context
Defenders need to prioritize the patching of these two zero-day vulnerabilities as a matter of extreme urgency. Organizations should also be vigilant for any signs of exploitation and ensure their endpoint detection and response (EDR) solutions are updated and configured to detect indicators of compromise related to these flaws.