# Security updates released in September 2026 - Web page: https://patchblox.com/security/patch-radar/2026/09 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 59 | 926 | 10 | 10 | | macOS | 4 | 188 | 3 | 3 | | Linux | 7,339 | 7,542 | 26 | 26 | ## Patch Tuesday, September 8, 2026 1,004 CVEs, 113 Critical, 2 exploited, 0 publicly disclosed, in 57 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 700 | 2 | 2 | | Windows 10 | 649 | 1 | 1 | | Windows 11 | 646 | 1 | 1 | | Microsoft Office | 95 | 0 | 0 | | SQL Server | 62 | 0 | 0 | | SharePoint Server | 16 | 0 | 0 | | Skype for Business and Lync | 10 | 0 | 0 | | Exchange Server | 9 | 0 | 0 | | .NET and Visual Studio | 7 | 0 | 0 | | Dynamics 365 | 1 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5122871](https://patchblox.com/security/data/fix/microsoft/kb5122871.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | Sep 8, 2026 | Patch now | 687 | 1 | CVE-2026-81963 | | [KB5122882](https://patchblox.com/security/data/fix/microsoft/kb5122882.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Sep 8, 2026 | Patch now | 648 | 1 | CVE-2026-85880 | | [KB5124008](https://patchblox.com/security/data/fix/microsoft/kb5124008.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Sep 8, 2026 | Patch now | 638 | 1 | CVE-2026-81963 | | [KB5124012](https://patchblox.com/security/data/fix/microsoft/kb5124012.md) | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems | Sep 8, 2026 | Patch now | 637 | 1 | CVE-2026-81963 | | [KB5122876](https://patchblox.com/security/data/fix/microsoft/kb5122876.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Sep 8, 2026 | Patch now | 623 | 1 | CVE-2026-85880 | | [KB5122880](https://patchblox.com/security/data/fix/microsoft/kb5122880.md) | Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems | Sep 8, 2026 | Patch now | 611 | 1 | CVE-2026-81963 | | [KB5122878](https://patchblox.com/security/data/fix/microsoft/kb5122878.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Sep 8, 2026 | Patch now | 575 | 1 | CVE-2026-85880 | | [KB5123099](https://patchblox.com/security/data/fix/microsoft/kb5123099.md) | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 and 4 more | Sep 8, 2026 | Patch now | 562 | 1 | CVE-2026-85880 | | [KB5123066](https://patchblox.com/security/data/fix/microsoft/kb5123066.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Sep 8, 2026 | Patch now | 425 | 1 | CVE-2026-85880 | | [KB5123065](https://patchblox.com/security/data/fix/microsoft/kb5123065.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Sep 8, 2026 | Patch now | 400 | 1 | CVE-2026-85880 | | [KB5122769](https://patchblox.com/security/data/fix/microsoft/kb5122769.md) | Microsoft SQL Server 2025 for x64-based Systems (CU8) | Sep 8, 2026 | Urgent | 56 | 0 | CVE-2026-67643 | | [KB5122770](https://patchblox.com/security/data/fix/microsoft/kb5122770.md) | Microsoft SQL Server 2025 for x64-based Systems (GDR) | Sep 8, 2026 | Urgent | 56 | 0 | CVE-2026-67643 | | [KB5122768](https://patchblox.com/security/data/fix/microsoft/kb5122768.md) | Microsoft SQL Server 2022 for x64-based Systems (CU 26) | Sep 8, 2026 | Urgent | 52 | 0 | CVE-2026-67643 | | [KB5122771](https://patchblox.com/security/data/fix/microsoft/kb5122771.md) | Microsoft SQL Server 2022 for x64-based Systems (GDR) | Sep 8, 2026 | Urgent | 52 | 0 | CVE-2026-67643 | | [KB5122772](https://patchblox.com/security/data/fix/microsoft/kb5122772.md) | Microsoft SQL Server 2019 for x64-based Systems (CU 32) | Sep 8, 2026 | Urgent | 52 | 0 | CVE-2026-67631 | | [KB5122773](https://patchblox.com/security/data/fix/microsoft/kb5122773.md) | Microsoft SQL Server 2019 for x64-based Systems (GDR) | Sep 8, 2026 | Urgent | 52 | 0 | CVE-2026-67631 | | [KB5122774](https://patchblox.com/security/data/fix/microsoft/kb5122774.md) | Microsoft SQL Server 2017 for x64-based Systems (CU 31) | Sep 8, 2026 | Urgent | 45 | 0 | CVE-2026-67631 | | [KB5122775](https://patchblox.com/security/data/fix/microsoft/kb5122775.md) | Microsoft SQL Server 2017 for x64-based Systems (GDR) | Sep 8, 2026 | Urgent | 45 | 0 | CVE-2026-67631 | | [KB5123287](https://patchblox.com/security/data/fix/microsoft/kb5123287.md) | Skype for Business Server 2019 CU8, Skype for Business Server Subscription Edition CU1 | Sep 8, 2026 | Urgent | 10 | 0 | CVE-2026-66302 | | [KB5123300](https://patchblox.com/security/data/fix/microsoft/kb5123300.md) | Skype for Business Server 2019 CU8, Skype for Business Server Subscription Edition CU1 | Sep 8, 2026 | Urgent | 10 | 0 | CVE-2026-66302 | | [KB5123301](https://patchblox.com/security/data/fix/microsoft/kb5123301.md) | Skype for Business Server 2015 CU13 | Sep 8, 2026 | Urgent | 10 | 0 | CVE-2026-66302 | | [KB5002923](https://patchblox.com/security/data/fix/microsoft/kb5002923.md) | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | Sep 8, 2026 | Urgent | 30 | 0 | CVE-2026-78509 | | [KB5002920](https://patchblox.com/security/data/fix/microsoft/kb5002920.md) | Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) | Sep 8, 2026 | Urgent | 6 | 0 | CVE-2026-69797 | | [KB5002916](https://patchblox.com/security/data/fix/microsoft/kb5002916.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition) and 1 more | Sep 8, 2026 | Urgent | 18 | 0 | CVE-2026-81955 | | [KB5002919](https://patchblox.com/security/data/fix/microsoft/kb5002919.md) | Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition) | Sep 8, 2026 | Urgent | 3 | 0 | CVE-2026-78519 | | [KB5002904](https://patchblox.com/security/data/fix/microsoft/kb5002904.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Sep 8, 2026 | Urgent | 30 | 0 | CVE-2026-81959 | | [KB5002914](https://patchblox.com/security/data/fix/microsoft/kb5002914.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Sep 8, 2026 | Urgent | 30 | 0 | CVE-2026-81959 | | [KB5122874](https://patchblox.com/security/data/fix/microsoft/kb5122874.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Sep 8, 2026 | Urgent | 1 | 0 | CVE-2026-81955 | | [KB5129194](https://patchblox.com/security/data/fix/microsoft/kb5129194.md) | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems | Sep 14, 2026 | Urgent | 2 | 0 | CVE-2026-85921 | | [KB5129195](https://patchblox.com/security/data/fix/microsoft/kb5129195.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Sep 14, 2026 | Urgent | 1 | 0 | CVE-2026-62721 | | [KB5002644](https://patchblox.com/security/data/fix/microsoft/kb5002644.md) | Microsoft Publisher 2016 (32-bit edition), Microsoft Publisher 2016 (64-bit edition) | Sep 8, 2026 | High | 2 | 0 | CVE-2026-81385 | | [KB5121608](https://patchblox.com/security/data/fix/microsoft/kb5121608.md) | Microsoft Exchange Server Subscription Edition RTM | Sep 8, 2026 | High | 9 | 0 | CVE-2026-69378 | | [KB5121609](https://patchblox.com/security/data/fix/microsoft/kb5121609.md) | Microsoft Exchange Server 2019 Cumulative Update 15 | Sep 8, 2026 | High | 9 | 0 | CVE-2026-69378 | | [KB5121610](https://patchblox.com/security/data/fix/microsoft/kb5121610.md) | Microsoft Exchange Server 2019 Cumulative Update 14 | Sep 8, 2026 | High | 9 | 0 | CVE-2026-69378 | | [KB5121611](https://patchblox.com/security/data/fix/microsoft/kb5121611.md) | Microsoft Exchange Server 2016 Cumulative Update 23 | Sep 8, 2026 | High | 8 | 0 | CVE-2026-69378 | | [KB5002908](https://patchblox.com/security/data/fix/microsoft/kb5002908.md) | Microsoft SharePoint Server Subscription Edition | Sep 8, 2026 | High | 16 | 0 | CVE-2026-69716 | | [KB5123731](https://patchblox.com/security/data/fix/microsoft/kb5123731.md) | Microsoft Dynamics 365 Customer Engagement V9.1 | Sep 8, 2026 | High | 1 | 0 | CVE-2026-77908 | | [KB5002898](https://patchblox.com/security/data/fix/microsoft/kb5002898.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Sep 8, 2026 | High | 2 | 0 | CVE-2026-78526 | | [KB5002912](https://patchblox.com/security/data/fix/microsoft/kb5002912.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69614 | | [KB5126105](https://patchblox.com/security/data/fix/microsoft/kb5126105.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows and 1 more | Sep 8, 2026 | High | 6 | 0 | CVE-2026-69522 | | [KB5126106](https://patchblox.com/security/data/fix/microsoft/kb5126106.md) | .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows and 1 more | Sep 8, 2026 | High | 6 | 0 | CVE-2026-69522 | | [KB5126104](https://patchblox.com/security/data/fix/microsoft/kb5126104.md) | .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows and 1 more | Sep 8, 2026 | High | 5 | 0 | CVE-2026-69522 | | [KB5126043](https://patchblox.com/security/data/fix/microsoft/kb5126043.md) | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems and 1 more | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126044](https://patchblox.com/security/data/fix/microsoft/kb5126044.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126045](https://patchblox.com/security/data/fix/microsoft/kb5126045.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126046](https://patchblox.com/security/data/fix/microsoft/kb5126046.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems and 3 more | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126047](https://patchblox.com/security/data/fix/microsoft/kb5126047.md) | Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126049](https://patchblox.com/security/data/fix/microsoft/kb5126049.md) | Microsoft .NET Framework 4.8 on Windows Server 2012 | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126051](https://patchblox.com/security/data/fix/microsoft/kb5126051.md) | Microsoft .NET Framework 4.8 on Windows Server 2012 R2 | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126052](https://patchblox.com/security/data/fix/microsoft/kb5126052.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems and 2 more | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126053](https://patchblox.com/security/data/fix/microsoft/kb5126053.md) | Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126421](https://patchblox.com/security/data/fix/microsoft/kb5126421.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems and 6 more | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126424](https://patchblox.com/security/data/fix/microsoft/kb5126424.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69522 | | [KB5126048](https://patchblox.com/security/data/fix/microsoft/kb5126048.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems and 1 more | Sep 8, 2026 | High | 1 | 0 | CVE-2026-69522 | | [KB5126050](https://patchblox.com/security/data/fix/microsoft/kb5126050.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 | Sep 8, 2026 | High | 1 | 0 | CVE-2026-69522 | | [KB5126422](https://patchblox.com/security/data/fix/microsoft/kb5126422.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 | Sep 8, 2026 | High | 1 | 0 | CVE-2026-69522 | | [KB5002913](https://patchblox.com/security/data/fix/microsoft/kb5002913.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition) and 1 more | Sep 8, 2026 | High | 2 | 0 | CVE-2026-69778 | | [KB4011160](https://patchblox.com/security/data/fix/microsoft/kb4011160.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Sep 8, 2026 | High | 1 | 0 | CVE-2026-78512 | | [KB5002910](https://patchblox.com/security/data/fix/microsoft/kb5002910.md) | Office Online Server | Sep 8, 2026 | High | 5 | 0 | CVE-2026-81956 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Sequoia 15.8.1](https://patchblox.com/security/data/fix/macos/sequoia-15.8.1.md) | Sequoia | Sep 28, 2026 | Patch now | 1 | 1 | CVE-2026-86950 | | [Tahoe 26.7.1](https://patchblox.com/security/data/fix/macos/tahoe-26.7.1.md) | Tahoe | Sep 28, 2026 | Patch now | 1 | 1 | CVE-2026-86950 | | [Tahoe 26.7](https://patchblox.com/security/data/fix/macos/tahoe-26.7.md) | Tahoe | Sep 14, 2026 | Patch now | 173 | 1 | CVE-2026-65400 | | [Sequoia 15.8](https://patchblox.com/security/data/fix/macos/sequoia-15.8.md) | Sequoia | Sep 14, 2026 | Urgent | 174 | 0 | CVE-2026-65414 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Debian | 3,696 | 3,696 | 3 | 3 | | Ubuntu | 2,014 | 420 | 0 | 0 | | Red Hat | 282 | 819 | 3 | 3 | | ol | 273 | 1,806 | 2 | 2 | | rocky | 268 | 711 | 5 | 5 | | almalinux | 265 | 938 | 7 | 7 | | sles | 262 | 2,244 | 4 | 4 | | opensuse-leap | 149 | 1,848 | 2 | 2 | | amzn | 86 | 644 | 0 | 0 | | Fedora | 44 | 171 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [DEBIAN-CVE-2026-87902](https://patchblox.com/security/data/fix/linux/debian-cve-2026-87902.md) | wordpress on Debian 13.5 (trixie), Debian 14 | Sep 29, 2026 | Patch now | 1 | 1 | CVE-2026-87902 | | [SUSE-SU-2026:4180-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4180-1.md) | clamav on sles 15.6, sles 15.7 | Sep 14, 2026 | Patch now | 9 | 1 | CVE-2025-8088 | | [OPENSUSE-SU-2026:21831-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21831-1.md) | clamav on opensuse-leap 16.0 | Sep 11, 2026 | Patch now | 9 | 1 | CVE-2025-8088 | | [SUSE-SU-2026:23727-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23727-1.md) | clamav on sles 16.0 | Sep 11, 2026 | Patch now | 9 | 1 | CVE-2025-8088 | | [OPENSUSE-SU-2026:21897-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21897-1.md) | govulncheck-vulndb on opensuse-leap 16.0 | Sep 21, 2026 | Patch now | 91 | 1 | CVE-2026-60004 | | [SUSE-SU-2026:23863-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23863-1.md) | govulncheck-vulndb on sles 16.0 | Sep 21, 2026 | Patch now | 91 | 1 | CVE-2026-60004 | | [ALSA-2026:74084](https://patchblox.com/security/data/fix/linux/alsa-2026-74084.md) | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on almalinux 8 | Sep 30, 2026 | Patch now | 324 | 1 | CVE-2026-3909 | | [ALSA-2026:69098](https://patchblox.com/security/data/fix/linux/alsa-2026-69098.md) | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on almalinux 9 | Sep 21, 2026 | Patch now | 303 | 1 | CVE-2026-3909 | | [RLSA-2026:69098](https://patchblox.com/security/data/fix/linux/rlsa-2026-69098.md) | webkit2gtk3 on rocky 9 | Sep 22, 2026 | Patch now | 112 | 1 | CVE-2026-3909 | | [DEBIAN-CVE-2026-87491](https://patchblox.com/security/data/fix/linux/debian-cve-2026-87491.md) | chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Sep 18, 2026 | Patch now | 1 | 1 | CVE-2026-87491 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo