Patch Tuesday - September 2026

highrapid7Published 2026-09-08

Microsoft is publishing 974 own-product vulnerabilities on <a href="https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep">September 2026 Patch Tuesday</a>, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microso

Attributed threat actors

Earth LuscaG1006

MITRE ATT&CK techniques

Windows Management InstrumentationT1047
SharepointT1213.002
JavaScriptT1059.007
DNS ServerT1583.002
VulnerabilitiesT1588.006
PowerShellT1059.001
Inter-Process CommunicationT1559
DNS ServerT1584.002
Remote Desktop ProtocolT1021.001
Malicious LinkT1204.001
Malicious LinkAML.T0011.003

Indicators of compromise

CVE-2026-85880cve
CVE-2026-81963cve
CVE-2026-85046cve
CVE-2026-85045cve
CVE-2026-80097cve
CVE-2026-58611cve
CVE-2026-70352cve
CVE-2026-62895cve
CVE-2026-69857cve
CVE-2026-77909cve
CVE-2026-81349cve
CVE-2026-83941cve
CVE-2026-84003cve
CVE-2026-83711cve
CVE-2026-83948cve
CVE-2026-62906cve
CVE-2026-62916cve
CVE-2026-69854cve
CVE-2026-84323cve
CVE-2026-84324cve
CVE-2026-84325cve
CVE-2026-84326cve
CVE-2026-84327cve
CVE-2026-84328cve
CVE-2026-84329cve
CVE-2026-84331cve
CVE-2026-84332cve
CVE-2026-84334cve
CVE-2026-84335cve
CVE-2026-84347cve
CVE-2026-84348cve
CVE-2026-84349cve
CVE-2026-84350cve
CVE-2026-84351cve
CVE-2026-84353cve
CVE-2026-84354cve
CVE-2026-84355cve
CVE-2026-84356cve
CVE-2026-84357cve
CVE-2026-84358cve

Original source: https://www.rapid7.com/blog/post/em-patch-tuesday-september-2026