Act
active
Microsoft September 2026 Patch Tuesday: 974 Flaws, Two Exploited Zero-Days
- Engineer — Act: Two actively exploited Windows zero-days in a record 974-flaw drop demands accelerated patching — apply September 2026 Patch Tuesday updates immediately for Windows, and prioritize the 110+ critical-rated fixes across SQL Server and Office within your standard critical window.
- SOC/IR — Plan: The two exploited Windows zero-days will generate attacker activity before organizations patch — prepare to hunt for exploitation evidence on unpatched Windows endpoints once specific CVEs and TTPs are published from this release.
- Leader — Plan: A record 974-vulnerability Patch Tuesday with two actively exploited Windows zero-days is likely to surface in board or customer conversations; confirm your team has an accelerated patch window for critical Windows systems and prepare a brief for leadership on the scope of exposure.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.