// Microsoft 365CRITICAL
Microsoft's September 2026 Patch Tuesday addressed a record 966 vulnerabilities across Windows, Office, and Azure. Two vulnerabilities were already being actively exploited in the wild before patches shipped. Approximately 20 flaws are classified as wormable, with critical impact on DHCP, MSMQ, NFS, and VPN (SSTP) services; a particularly dangerous unauthenticated remote code execution vulnerability in Windows DNS Server was compared to the 2020 SigRed vulnerability. Organizations should prioritize patches for internet-facing DNS servers and network infrastructure components immediately.
- Microsoft Patches Record 966 Bugs, 20 Wormable [2026](opens in a new tab)
- Microsoft corrige 18 vulnerabilidades en sus productos de IA y n(opens in a new tab)
// Get alerts for Microsoft 365