Microsoft and Adobe Patch Tuesday, September 2025 Security Update Review

### Executive Summary Microsoft's September 2025 Patch Tuesday addresses 86 vulnerabilities (nine critical, 72 important), including two publicly disclosed zero-day flaws, across numerous Windows components (Kernel, NTLM, NTFS, Hyper-V, SMB, TCP/IP, PowerShell, Office, etc.) that can enable remote code execution, elevation of privilege, denial of service, and information disclosure; Adobe also released advisories for 22 vulnerabilities (12 critical). Qualys provides detection QQL queries, mitigation controls, patch orchestration guidance (VMDR, Patch Catalog) and agentic remediation tooling (Agent Sara) to prioritize and remediate affected hosts.