Microsoft
September 2026 Early Security Updates
2026-Sep Sep 3, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1578 lines
Showing 1051–1100 of 1578 matching · page 22 of 32 · clear filters
CVE-2026-71348
BR2026-0000-011301
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-71348
BR2026-0000-011302
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Aobo Wang
CVE-2026-71348
BR2026-0000-011303
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-71349
BR2026-0000-011304
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-71349
BR2026-0000-011305
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-71349
BR2026-0000-011306
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as 2st__ with Diffract
CVE-2026-71349
BR2026-0000-011307
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-71350
BR2026-0000-011308
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-71350
BR2026-0000-011309
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-71350
BR2026-0000-011310
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-71350
BR2026-0000-011311
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-71350
BR2026-0000-011312
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Linzishan, Anemone
CVE-2026-71350
BR2026-0000-011313
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as Aobo Wang
CVE-2026-71350
BR2026-0000-011314
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-71350
BR2026-0000-011315
unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as txz
CVE-2026-71351
BR2026-0000-011316
unclaimed
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Credited as zoemurmure with Qingteng
CVE-2026-71352
BR2026-0000-011317
unclaimed
Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Credited as ʌ!ɔ⊥ojv
CVE-2026-71353
BR2026-0000-011318
unclaimed
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Credited as zoemurmure with Qingteng
CVE-2026-72926
BR2026-0000-011319
unclaimed
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-72927
BR2026-0000-011320
unclaimed
Winsock Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-72928
BR2026-0000-011321
unclaimed
Windows DNS Server Remote Code Execution Vulnerability
Credited as Souhail Hammou
CVE-2026-72929
BR2026-0000-011322
unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-72929
BR2026-0000-011323
unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-72932
BR2026-0000-011324
unclaimed
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Credited as Seung Chan Kim
CVE-2026-72933
BR2026-0000-011325
unclaimed
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Credited as bee13oy with JD.com
CVE-2026-72935
BR2026-0000-011326
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-72935
BR2026-0000-011327
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-72935
BR2026-0000-011328
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-72937
BR2026-0000-011329
unclaimed
Windows Storage Port Driver Information Disclosure Vulnerability
Credited as Jmini
CVE-2026-72937
BR2026-0000-011330
unclaimed
Windows Storage Port Driver Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-72937
BR2026-0000-011331
unclaimed
Windows Storage Port Driver Information Disclosure Vulnerability
Credited as wgg with Diffract
CVE-2026-72937
BR2026-0000-011332
unclaimed
Windows Storage Port Driver Information Disclosure Vulnerability
Credited as Linzishan
CVE-2026-72938
BR2026-0000-011333
unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-72940
BR2026-0000-011334
unclaimed
Windows Schannel Remote Code Execution Vulnerability
Credited as Microsoft Red Team with Microsoft
CVE-2026-72941
BR2026-0000-011335
unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-72941
BR2026-0000-011336
unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-72941
BR2026-0000-011337
unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-72942
BR2026-0000-011338
unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-72942
BR2026-0000-011339
unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as wgg
CVE-2026-72942
BR2026-0000-011340
unclaimed
Windows Spaceport.sys Information Disclosure Vulnerability
Credited as @2st__ with Diffract
CVE-2026-72943
BR2026-0000-011341
unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-72944
BR2026-0000-011342
unclaimed
Role: Windows Fax Service Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-72944
BR2026-0000-011343
unclaimed
Role: Windows Fax Service Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-72945
BR2026-0000-011344
unclaimed
Windows Task Scheduler Information Disclosure Vulnerability
Credited as k0shl
CVE-2026-72946
BR2026-0000-011345
unclaimed
Microsoft Storage Port Driver Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-72946
BR2026-0000-011346
unclaimed
Microsoft Storage Port Driver Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-72946
BR2026-0000-011347
unclaimed
Microsoft Storage Port Driver Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-72947
BR2026-0000-011348
unclaimed
Windows File History Service Elevation of Privilege Vulnerability
Credited as Dongjun Lee with KAIST Hacking Lab
CVE-2026-72948
BR2026-0000-011349
unclaimed
Windows DNS Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-72949
BR2026-0000-011350
unclaimed
Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability
Credited as AIフィジカルインターフェイス二号機