September Patch Tuesday Haul Includes 973 CVEs
Sophos, Wednesday, September 16th, 2026
Sophos breaks down an unusually large September Patch Tuesday covering 973 CVEs.
Sophos analyzes the September 2026 Patch Tuesday release, which addresses 973 CVEs across Microsoft products.
The post sorts the fixes by severity, product family and exploitation likelihood to help teams prioritize deployment.
It calls out the critical and actively targeted issues that warrant immediate attention rather than the normal patch cycle. Sophos also provides the statistical context showing how this month compares with recent releases.