← Back to Feed
Patch Tuesday Sets Another Record With 974 CVEs
September 8, 2026 · Dark Reading · Severity: HIGH
Microsoft September 2026 Patch Tuesday set another record with 974 CVEs addressed across Windows, Office, Exchange, and other products. Of these, two vulnerabilities are confirmed as actively exploited in the wild, with CISA adding them to the Known Exploited Vulnerabilities catalog.
Key Takeaways
- Active exploitation detected — patch immediately to prevent compromise
- Affected systems should be identified and prioritized for remediation
- Monitor for additional indicators of compromise as investigations evolve