The September 2026 Security Update Review
Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an extended break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for September 2026 For the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illust
Read at Zero Day Initiative blog
- Vendor
- Microsoft, Adobe
- CVSS
- 10.0
- EPSS
- 0.039 (p90)
- Exploitation
- observed in the wild
- Fix
- available
Why it ranks 64 (High)
- Exploitation observed in the wild
- CVSS 10.0 critical
- Covered by 7 independent sources
- Fix available
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Zero Day Initiative blog (thezdi.com)
- CVE-2026-75650 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-81963 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-85880 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-55007 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-80097 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.