This Patch Tuesday, SAP is the worst offender and Microsoft users can kinda chill

September security updates cover multiple critical vulnerabilities across major vendors: SAP NetWeaver includes a CVSS 10 unauthenticated deserialization RCE and additional critical flaws, Microsoft patched several high-severity issues including a network-exploitable HPC RCE and SMB relay/EoP bugs, Adobe released numerous code-execution and security-bypass fixes, Android pushed its largest bundle with two flaws already exploited in the wild, and Cisco fixed a high-severity ASA DoS — administrators are urged to apply patches and interim mitigations (e.g., disable Office preview pane, enable SMB signing/EPA, monitor TCP/5999).