BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 751–800 of 1578 matching · page 16 of 32 · clear filters
CVE-2026-69620 BR2026-0000-011001 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Neil Kettle (mu-b) with watchtowr
CVE-2026-69621 BR2026-0000-011002 unclaimed
Role: Windows Fax Service Elevation of Privilege Vulnerability
Credited as h4urek with secsys lab
CVE-2026-69623 BR2026-0000-011003 unclaimed
Windows HTTP Print Provider Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-69623 BR2026-0000-011004 unclaimed
Windows HTTP Print Provider Remote Code Execution Vulnerability
Credited as txz
CVE-2026-69623 BR2026-0000-011005 unclaimed
Windows HTTP Print Provider Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-69625 BR2026-0000-011006 unclaimed
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69625 BR2026-0000-011007 unclaimed
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69626 BR2026-0000-011008 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-69628 BR2026-0000-011009 unclaimed
Windows iSCSI Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-69628 BR2026-0000-011010 unclaimed
Windows iSCSI Remote Code Execution Vulnerability
Credited as txz
CVE-2026-69629 BR2026-0000-011011 unclaimed
Microsoft Office Outlook Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69636 BR2026-0000-011012 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as r0ser1
CVE-2026-69636 BR2026-0000-011013 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as Cristian Chavez
CVE-2026-69637 BR2026-0000-011014 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Lewis Lee
CVE-2026-69638 BR2026-0000-011015 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69638 BR2026-0000-011016 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-69638 BR2026-0000-011017 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-69638 BR2026-0000-011018 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as HeeChan Kim with TeamH4C
CVE-2026-69641 BR2026-0000-011019 unclaimed
Microsoft Exchange Server Elevation of Privilege Vulnerability
Credited as Bui Xuan Quang (buxu) with Ncsgroup.vn
CVE-2026-69642 BR2026-0000-011020 unclaimed
Skype for Business Spoofing Vulnerability
Credited as P1hcn
CVE-2026-69643 BR2026-0000-011021 unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69643 BR2026-0000-011022 unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-69643 BR2026-0000-011023 unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-69645 BR2026-0000-011024 unclaimed
Windows Message Queuing Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-69646 BR2026-0000-011025 unclaimed
Skype for Business Spoofing Vulnerability
Credited as Yogesh Mandge
CVE-2026-69648 BR2026-0000-011026 unclaimed
Windows Notification Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69649 BR2026-0000-011027 unclaimed
Raw Image Extension Remote Code Execution Vulnerability
Credited as Jean-Jamil Khalife with HDWSec
CVE-2026-69669 BR2026-0000-011028 unclaimed
Windows Kernel Remote Code Execution Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-69669 BR2026-0000-011029 unclaimed
Windows Kernel Remote Code Execution Vulnerability
Credited as Mitigations
CVE-2026-69669 BR2026-0000-011030 unclaimed
Windows Kernel Remote Code Execution Vulnerability
Credited as Owen McCullough with MSRC V&M
CVE-2026-69671 BR2026-0000-011031 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-69674 BR2026-0000-011032 unclaimed
Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability
Credited as yhw
CVE-2026-69674 BR2026-0000-011033 unclaimed
Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability
Credited as txz
CVE-2026-69676 BR2026-0000-011034 unclaimed
Windows Kerberos Remote Code Execution Vulnerability
Credited as mad31k
CVE-2026-69679 BR2026-0000-011035 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Lewis Lee
CVE-2026-69681 BR2026-0000-011036 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69681 BR2026-0000-011037 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as wgg with Diffract
CVE-2026-69681 BR2026-0000-011038 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as wisi
CVE-2026-69681 BR2026-0000-011039 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Linzishan
CVE-2026-69682 BR2026-0000-011040 unclaimed
Windows Host Guardian Service Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69683 BR2026-0000-011041 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as POLIDINH
CVE-2026-69684 BR2026-0000-011042 unclaimed
Windows Error Reporting Information Disclosure Vulnerability
Credited as Genghis Karimov with Microsoft Corporation
CVE-2026-69685 BR2026-0000-011043 unclaimed
Windows Kerberos Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69685 BR2026-0000-011044 unclaimed
Windows Kerberos Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69686 BR2026-0000-011045 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-69686 BR2026-0000-011046 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-69686 BR2026-0000-011047 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69687 BR2026-0000-011048 unclaimed
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-69687 BR2026-0000-011049 unclaimed
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Credited as fce141fd6b42fcec05c1285b15d8f999
CVE-2026-69688 BR2026-0000-011050 unclaimed
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Credited as yhw