---
id: 7552
title: "September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs"
source_domain: crowdstrike.com
source_url: "https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2026/"
published_at: "2026-09-08T00:00:00Z"
tags: ["zero-day", "vulnerability-management", "microsoft", "defender", "crowdstrike", "patch-tuesday", "office"]
phying_url: "https://phying.com/item/7552"
lang: en
---

# September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

## Summary

CrowdStrike on Microsoft's record September 2026 Patch Tuesday: 972 CVEs, double August, two exploited zero-days, 113 Criticals and 12 zero-click Office bugs; plus a Defender PoC, ShieldCrash.

## Intelligence Metadata

- **Sources:** crowdstrike.com
- **Published:** 2026-09-08T00:00:00Z
- **Original:** https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2026/
- **Phying News:** https://phying.com/item/7552