Microsoft's September 2026 Patch Tuesday is one of the largest on record, fixing 974 vulnerabilities across Windows, Office, Exchange, SharePoint and SQL Server.
- What it is: The monthly Microsoft security update, covering 723 Windows fixes, 111 Office fixes, 62 SQL Server fixes, 22 developer tool fixes, 16 SharePoint Server fixes and nine Exchange Server fixes.
- Who is affected: Any business running Windows PCs, Windows Server, or on-premises Exchange or SharePoint.
- What the risk is: 113 of the fixes are rated Critical, and two are already being exploited in the wild (see our separate security alert on those two flaws).
- What action is needed: Apply this month's updates promptly and restart affected machines to complete installation.
Separately, Microsoft 365 experienced a widespread authentication-related outage in early September affecting Teams, SharePoint Online and Exchange Online. This has since been resolved. If you are still seeing issues with Outlook or Teams, we recommend contacting your IT support.
Source: BleepingComputer