September 2026 Patch Tuesday: 971 Fixes and 20 Wormable Flaws

Microsoft shipped its largest Patch Tuesday on record, fixing 971 vulnerabilities including 112 rated Critical. Two zero-days are already exploited in the wild, and ZDI classified at least 20 flaws as wormable.

• 971 vulnerabilities fixed, 112 rated Critical
• Two zero-days exploited in the wild
• At least 20 flaws classified as wormable by ZDI
• Fix for CVE-2026-85046 took 27 days to reach Chrome Stable