BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 951–1000 of 1578 matching · page 20 of 32 · clear filters
CVE-2026-69862 BR2026-0000-011201 unclaimed
Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-69862 BR2026-0000-011202 unclaimed
Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69864 BR2026-0000-011203 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-69864 BR2026-0000-011204 unclaimed
Windows Hello Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-69874 BR2026-0000-011205 unclaimed
Windows ALPC Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-69874 BR2026-0000-011206 unclaimed
Windows ALPC Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-69875 BR2026-0000-011207 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69875 BR2026-0000-011208 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69876 BR2026-0000-011209 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-69878 BR2026-0000-011210 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Anemone
CVE-2026-69889 BR2026-0000-011211 unclaimed
Windows Bluetooth Service Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69890 BR2026-0000-011212 unclaimed
Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-69890 BR2026-0000-011213 unclaimed
Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-69891 BR2026-0000-011214 unclaimed
Windows Media Elevation of Privilege Vulnerability
Credited as Byunghyun Kang with KAIST
CVE-2026-69895 BR2026-0000-011215 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69895 BR2026-0000-011216 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as wgg
CVE-2026-69895 BR2026-0000-011217 unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as @2st__ with Diffract
CVE-2026-69896 BR2026-0000-011218 unclaimed
Windows Error Reporting Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab
CVE-2026-69896 BR2026-0000-011219 unclaimed
Windows Error Reporting Elevation of Privilege Vulnerability
Credited as WorkspaceAnalysis2
CVE-2026-69904 BR2026-0000-011220 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as Dongjun Kim (smlijun) with UIUC
CVE-2026-69904 BR2026-0000-011221 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-69904 BR2026-0000-011222 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-69904 BR2026-0000-011223 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as Joshua Huang
CVE-2026-69904 BR2026-0000-011224 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as kai63001
CVE-2026-69906 BR2026-0000-011225 unclaimed
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Credited as vmpr0be
CVE-2026-69907 BR2026-0000-011226 unclaimed
Windows Enterprise App Management Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-69907 BR2026-0000-011227 unclaimed
Windows Enterprise App Management Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-69910 BR2026-0000-011228 unclaimed
Windows Hyper-V Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-69910 BR2026-0000-011229 unclaimed
Windows Hyper-V Remote Code Execution Vulnerability
Credited as Aobo Wang
CVE-2026-69911 BR2026-0000-011230 unclaimed
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-69911 BR2026-0000-011231 unclaimed
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-69921 BR2026-0000-011232 unclaimed
Windows Print Spooler Components Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab | LinkedIn: https://www.linkedin.com/in/dongjun-lee-a1505b1b1/
CVE-2026-69929 BR2026-0000-011233 unclaimed
Windows DHCP Server Information Disclosure Vulnerability
Credited as Satyanarayana Oruganti with Microsoft
CVE-2026-69930 BR2026-0000-011234 unclaimed
Windows DHCP Server Information Disclosure Vulnerability
Credited as Satyanarayana Oruganti with Microsoft
CVE-2026-70019 BR2026-0000-011235 unclaimed
Windows Compressed Folder Information Disclosure Vulnerability
Credited as TI
CVE-2026-70019 BR2026-0000-011236 unclaimed
Windows Compressed Folder Information Disclosure Vulnerability
Credited as SecBuddyN of Tencent KeenLab
CVE-2026-70065 BR2026-0000-011237 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as sabersauce
CVE-2026-70124 BR2026-0000-011238 unclaimed
Windows DHCP Server Information Disclosure Vulnerability
Credited as Satyanarayana Oruganti with Microsoft
CVE-2026-70145 BR2026-0000-011239 unclaimed
Microsoft Windows Search Component Information Disclosure Vulnerability
Credited as h4urek with secsys lab
CVE-2026-70203 BR2026-0000-011240 unclaimed
Windows Media Player Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-70289 BR2026-0000-011241 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Byzero with Kunlun Lab
CVE-2026-70289 BR2026-0000-011242 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-70290 BR2026-0000-011243 unclaimed
Win32k Information Disclosure Vulnerability
Credited as Byzero with Kunlun Lab
CVE-2026-70290 BR2026-0000-011244 unclaimed
Win32k Information Disclosure Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-70296 BR2026-0000-011245 unclaimed
Windows Imaging Component Remote Code Execution Vulnerability
Credited as Yejun Won
CVE-2026-70334 BR2026-0000-011246 unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Khai Tran with OpenAI
CVE-2026-70342 BR2026-0000-011247 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Owen McCullough with MSRC V&M
CVE-2026-70562 BR2026-0000-011248 unclaimed
Windows Audio Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-70562 BR2026-0000-011249 unclaimed
Windows Audio Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-70563 BR2026-0000-011250 unclaimed
Windows Shell Spoofing Vulnerability
Credited as yhw