BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 851–900 of 1578 matching · page 18 of 32 · clear filters
CVE-2026-69739 BR2026-0000-011101 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as SeaDragnoL with Qrious Secure
CVE-2026-69739 BR2026-0000-011102 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as grass with Viettel Cyber Security
CVE-2026-69740 BR2026-0000-011103 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-69740 BR2026-0000-011104 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-69740 BR2026-0000-011105 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as pwn2addr
CVE-2026-69741 BR2026-0000-011106 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69741 BR2026-0000-011107 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as wgg
CVE-2026-69741 BR2026-0000-011108 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as @2st__ with Diffract
CVE-2026-69742 BR2026-0000-011109 unclaimed
Microsoft Office Publisher Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-69742 BR2026-0000-011110 unclaimed
Microsoft Office Publisher Remote Code Execution Vulnerability
Credited as txz
CVE-2026-69757 BR2026-0000-011111 unclaimed
Windows TCP/IP Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69757 BR2026-0000-011112 unclaimed
Windows TCP/IP Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69758 BR2026-0000-011113 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Aobo Wang
CVE-2026-69758 BR2026-0000-011114 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-69758 BR2026-0000-011115 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69759 BR2026-0000-011116 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-69759 BR2026-0000-011117 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as txz
CVE-2026-69761 BR2026-0000-011118 unclaimed
Windows TCP/IP Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69761 BR2026-0000-011119 unclaimed
Windows TCP/IP Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69762 BR2026-0000-011120 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Byzero with Kunlun Lab
CVE-2026-69762 BR2026-0000-011121 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69764 BR2026-0000-011122 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-69764 BR2026-0000-011123 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-69767 BR2026-0000-011124 unclaimed
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-69767 BR2026-0000-011125 unclaimed
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69768 BR2026-0000-011126 unclaimed
Windows RNDIS Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-69769 BR2026-0000-011127 unclaimed
Windows HTTP Print Provider Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-69770 BR2026-0000-011128 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69770 BR2026-0000-011129 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as wgg with Diffract
CVE-2026-69771 BR2026-0000-011130 unclaimed
Windows Container Manager Service Security Feature Bypass Vulnerability
Credited as haowei yan
CVE-2026-69771 BR2026-0000-011131 unclaimed
Windows Container Manager Service Security Feature Bypass Vulnerability
Credited as xiaozun tang
CVE-2026-69772 BR2026-0000-011132 unclaimed
Windows Network File System Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-69772 BR2026-0000-011133 unclaimed
Windows Network File System Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-69773 BR2026-0000-011134 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69773 BR2026-0000-011135 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69775 BR2026-0000-011136 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Varun Goel
CVE-2026-69777 BR2026-0000-011137 unclaimed
Windows DHCP Client Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU) with Diffract
CVE-2026-69777 BR2026-0000-011138 unclaimed
Windows DHCP Client Elevation of Privilege Vulnerability
Credited as PB18
CVE-2026-69777 BR2026-0000-011139 unclaimed
Windows DHCP Client Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab
CVE-2026-69778 BR2026-0000-011140 unclaimed
Microsoft Office Access Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-69778 BR2026-0000-011141 unclaimed
Microsoft Office Access Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-69779 BR2026-0000-011142 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-69781 BR2026-0000-011143 unclaimed
Windows DHCP Client Denial of Service Vulnerability
Credited as Jay Ladhad
CVE-2026-69782 BR2026-0000-011144 unclaimed
Windows DNS Server Remote Code Execution Vulnerability
Credited as Souhail Hammou
CVE-2026-69782 BR2026-0000-011145 unclaimed
Windows DNS Server Remote Code Execution Vulnerability
Credited as Marcos Oviedo with Deep Extract Harness
CVE-2026-69784 BR2026-0000-011146 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-69784 BR2026-0000-011147 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-69785 BR2026-0000-011148 unclaimed
Windows Smart Card Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-69785 BR2026-0000-011149 unclaimed
Windows Smart Card Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-69786 BR2026-0000-011150 unclaimed
Windows Text Shaping Remote Code Execution Vulnerability
Credited as Ky0toFu