59/59 sources · synced 22:49 UTC Customize Public mode
Patch Tuesday · Tuesday 8 September 2026

September 2026: is it safe to deploy?

What Microsoft fixed, how urgent it is, and whether anything broke, per Windows version, from Microsoft's release tables, release health, MSRC, CISA, and what the community reports.

← Aug 2026
Deploy now

September 2026 fixes exploited vulnerabilities. Deploy it.

Microsoft fixed 998 CVEs, 132 critical and 2 exploited; 2 known issues are still open; out-of-band fixes followed on 14 Sep. The cards below show what to deploy for each Windows version and why.

Exploited fixed
2
In CISA KEV
2
Open known issues
2
Out-of-band
8

What to deploy, per Windows version

Mark each Windows version deployed or not for you to track this month
998Microsoft CVEs 132Critical 2Exploited in the wild
0Publicly disclosed
149Revised since release

Exploited and disclosed

All CVEs

Known issues from this month's updates

Windows release health

What people are saying

News and community
Out-of-band releases12

Most affected components

Windows Biometric Service 64
SQL Server 61
Microsoft Office Word 37
Windows DHCP Server 36
Microsoft Office Excel 32

Recent releases

Microsoft CVEs per release · critical in solid
663 Jul3 exploited 456 Aug1 exploited 998 Sep2 exploited
ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft. Microsoft, Windows, Microsoft 365, Azure, and related names are trademarks of the Microsoft group of companies. Data comes from public sources listed on Sources; every item links to its original page. Dates and statuses can change after they are read. Built by Evotec. This is the public demo. It can also run on your own server, with your Microsoft 365 tenant and device data kept inside your network; Evotec can help you deploy and extend it.