September 2026 Microsoft Patch Tuesday

Executive Summary

Microsoft released patches for record 973 vulnerabilities, 113 critical, largest Patch Tuesday to date. Two vulnerabilities were exploited in the wild; none were publicly disclosed before the release. Key fixes include Windows privilege escalation and critical remote code execution flaws in Skype for Business, MSMQ, and RRAS.


Intelligence Metadata - Source Publisher: SANS Internet Storm Center - Published Date: 2026-09-08T19:20:30+00:00 - Category: threat-intel

Original Description: This month, Microsoft released patches for a record-breaking 973 vulnerabilities, including 113 rated critical. It is by far the largest Patch Tuesday to date, well ahead of the previous high of 664 set in July 2026. Two vulnerabilities are listed as exploited in the wild, while none were publicly disclosed before Patch Tuesday. Notable fixes include Windows privilege escalation and critical RCEs in Skype for Business, MSMQ and RRAS.

"Know, first, who you are, and then adorn yourself accordingly."

— Epictetus
Source: SANS Internet Storm Center