BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 51–100 of 1578 · page 2 of 32
CVE-2026-62895 BR2026-0000-010301 unclaimed
Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
Credited as Johann Rehberger with https://embracethered.com/
CVE-2026-63523 BR2026-0000-010302 unclaimed
Skype for Business Spoofing Vulnerability
Credited as Ethan Walker
CVE-2026-63523 BR2026-0000-010303 unclaimed
Skype for Business Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64918 BR2026-0000-010304 unclaimed
Microsoft Office Spoofing Vulnerability
Credited as yhw
CVE-2026-64918 BR2026-0000-010305 unclaimed
Microsoft Office Spoofing Vulnerability
Credited as txz
CVE-2026-65669 BR2026-0000-010306 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Johann Rehberger with https://embracethered.com/
CVE-2026-65772 BR2026-0000-010307 unclaimed
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-65812 BR2026-0000-010308 unclaimed
Microsoft Teams for Android Information Disclosure Vulnerability
Credited as Ofek Levin with Enclave
CVE-2026-66302 BR2026-0000-010309 unclaimed
Skype for Business Remote Code Execution Vulnerability
Credited as odgrso with GMO CyberSecurity by Ierae
CVE-2026-66302 BR2026-0000-010310 unclaimed
Skype for Business Remote Code Execution Vulnerability
Credited as Manish Kumar
CVE-2026-66302 BR2026-0000-010311 unclaimed
Skype for Business Remote Code Execution Vulnerability
Credited as Nitish Kumar
CVE-2026-66303 BR2026-0000-010312 unclaimed
Skype for Business and Lync Denial of Service Vulnerability
Credited as Manish Kumar
CVE-2026-66303 BR2026-0000-010313 unclaimed
Skype for Business and Lync Denial of Service Vulnerability
Credited as Pranjal Varshney
CVE-2026-66304 BR2026-0000-010314 unclaimed
Skype for Business Information Disclosure Vulnerability
Credited as Manish Kumar
CVE-2026-66304 BR2026-0000-010315 unclaimed
Skype for Business Information Disclosure Vulnerability
Credited as Pranjal Varshney
CVE-2026-66305 BR2026-0000-010316 unclaimed
Skype for Business Spoofing Vulnerability
Credited as Manish Kumar
CVE-2026-66306 BR2026-0000-010317 unclaimed
Skype for Business Information Disclosure Vulnerability
Credited as Pranjal Varshney
CVE-2026-66306 BR2026-0000-010318 unclaimed
Skype for Business Information Disclosure Vulnerability
Credited as Manish Kumar
CVE-2026-66307 BR2026-0000-010319 unclaimed
Skype for Business and Lync Denial of Service Vulnerability
Credited as Manish kumar
CVE-2026-66307 BR2026-0000-010320 unclaimed
Skype for Business and Lync Denial of Service Vulnerability
Credited as Pranjal Varshney
CVE-2026-66308 BR2026-0000-010321 unclaimed
Skype for Business and Lync Denial of Service Vulnerability
Credited as Manish Kumar
CVE-2026-66308 BR2026-0000-010322 unclaimed
Skype for Business and Lync Denial of Service Vulnerability
Credited as Pranjal Varshney
CVE-2026-66814 BR2026-0000-010323 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Ola Hallengren with Saxo Bank
CVE-2026-66816 BR2026-0000-010324 unclaimed
Microsoft SQL Server Security Feature Bypass Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-66818 BR2026-0000-010325 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Nick Wagner with AWS
CVE-2026-66818 BR2026-0000-010326 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-66819 BR2026-0000-010327 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-66819 BR2026-0000-010328 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-66820 BR2026-0000-010329 unclaimed
SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-67368 BR2026-0000-010330 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-67369 BR2026-0000-010331 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67370 BR2026-0000-010332 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Krishna Badiger
CVE-2026-67373 BR2026-0000-010333 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-67373 BR2026-0000-010334 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-67373 BR2026-0000-010335 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-67373 BR2026-0000-010336 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as pwnky
CVE-2026-67373 BR2026-0000-010337 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as 3072
CVE-2026-67376 BR2026-0000-010338 unclaimed
Microsoft SQL Server Denial of Service Vulnerability
Credited as Johann Rehberger with https://embracethred.com/
CVE-2026-67376 BR2026-0000-010339 unclaimed
Microsoft SQL Server Denial of Service Vulnerability
Credited as Microsoft Red Team
CVE-2026-67378 BR2026-0000-010340 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Andrew Ruddick with Microsoft Red Team
CVE-2026-67379 BR2026-0000-010341 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Andrew Ruddick with Microsoft Red Team
CVE-2026-67380 BR2026-0000-010342 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Andrew Ruddick with Microsoft Red Team
CVE-2026-67381 BR2026-0000-010343 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-67383 BR2026-0000-010344 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67384 BR2026-0000-010345 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-67384 BR2026-0000-010346 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-67385 BR2026-0000-010347 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Andrew Ruddick with Microsoft Red Team
CVE-2026-67386 BR2026-0000-010348 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67388 BR2026-0000-010349 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-67389 BR2026-0000-010350 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777