Microsoft closes 974 security vulnerabilities in September 2026

On September 14, 2026, Microsoft released a comprehensive security update as part of its monthly Patch Tuesday, closing a total of 974 security vulnerabilities. Among these vulnerabilities, more than 100 are classified as critical. These updates are particularly important as they minimize potential attack surfaces for cybercriminals and enhance system security.

Especially alarming is that two of the closed security vulnerabilities are already being actively exploited by attackers. These zero-day vulnerabilities were not publicly known before the release of the patches, underscoring the urgency of the updates. Administrators are therefore urged to apply the relevant updates immediately to protect their systems.

Details on the Security Updates

The security updates affect a variety of Microsoft products, including Windows, Office, and various server solutions. The critical vulnerabilities allow attackers to gain unauthorized access to systems and potentially install malicious software. Microsoft has provided detailed information on the affected products and specific vulnerabilities in its security bulletin.

The updates are significant not only for businesses but also for private users who use Microsoft software. Microsoft's swift response to the discovered vulnerabilities demonstrates the company's commitment to continuously improving the security of its products. Administrators should prioritize the updates to ensure the security of their networks.

In addition to the critical vulnerabilities, Microsoft has also closed a number of less severe security gaps. These include potential risks that, while not classified as critical, can still pose a threat to system security. The comprehensive update aims to ensure a high level of security for all users.

Recommended Approach for Administrators

Microsoft recommends that administrators apply the updates in order of their criticality. First, patches for the vulnerabilities classified as critical should be prioritized, followed by the less severe security gaps. This ensures that the most serious threats are addressed first and that systems are protected as quickly as possible.

The release of the September patches is part of Microsoft's ongoing commitment to ensuring the security of its products. Regular Patch Tuesdays are an important component of the company's security strategy to respond quickly to newly discovered vulnerabilities. Users and administrators should regularly stay informed about the latest security updates and ensure that their systems are always up to date.

The closure of 974 security vulnerabilities in September 2026 is a significant step towards improving cybersecurity. Given the increasing threats from cyberattacks, it is essential for all users of Microsoft products to install the provided security updates promptly. Only then can the risk of data loss and system compromises be minimized.