Tuesday, September 08, 2026

Microsoft September 2026 Security Updates

 

The Microsoft September 2026 security updates have been released and consist of 997 updates relating Microsoft, Chromium and non-Microsoft products.


Of the Microsoft CVEs released, 114 are rated Critical, 5 as low and the rest are rated Important in severity. 


At the time of release, seven are listed as being under active attack. As Indicated Dustin Childs below-linked post, 20 different patches could all be classified as wormable. "In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else."

The security updates apply to the following products, features and roles: Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender.

Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at September 2026 Security Updates - Release Notes - Security Update Guide - Microsoft.

Recommended Reading:  See Dustin Childs complete review and analysis in Zero Day Initiative -- The September 2026 Security Update Review.

Additional Update Notes:

 

References




Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

No comments: