Skip to content
OpenAdvisories

Patch days / September 2026

Microsoft Patch Tuesday — September 2026

Tuesday, 8 September 2026

Vulnerabilities
965
Critical
43
High
681
Zero-days
2
Public exploit
5

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 43

18 more in the full list below.

Public exploit code 4

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

All vulnerabilities 965

Critical43 Show
High681 Show
Medium239 Show
Low2 Show