Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

crowdstrike.com | blog | #zero-day | #vulnerability-management | #microsoft | #defender | #crowdstrike | #patch-tuesday | #office

Summary

CrowdStrike on Microsoft's record September 2026 Patch Tuesday: 972 CVEs, double August, two exploited zero-days, 113 Criticals and 12 zero-click Office bugs; plus a Defender PoC, ShieldCrash.
Published
Collected

original ↗

Related coverage

  1. August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs (crowdstrike.com)
  2. ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patch (github.com)
  3. FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploit (github.com)
  4. CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypass (github.com)
  5. CrowdStrike Accelerates Real-Time Data Classification with On-Device AI (crowdstrike.com)
  6. CrowdStrike Announces Agentic Identity Provider (crowdstrike.com)

back