CVE Tools
Sign in
Back to feed
Exploited in the wild Windows zero-day Office Microsoft rce

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Cisco Talos·By Cisco Talos··17 min read

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical."

Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:

CVE-2026-81963">CVE-2026-81963 affects Windows Update Stack. CVE-2026-81963">CVE-2026-81963 is a elevation of privilege vulnerability associated with Improper Link Resolution Before File Access ('Link Following') and Improper Access Control and has a CVSS base score of 7.8.…

Continue reading on Cisco Talos

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure