BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 1101–1150 of 1578 matching · page 23 of 32 · clear filters
CVE-2026-72949 BR2026-0000-011351 unclaimed
Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability
Credited as Pwnforr777
CVE-2026-72950 BR2026-0000-011352 unclaimed
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-72952 BR2026-0000-011353 unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-72952 BR2026-0000-011354 unclaimed
Windows Spaceport.sys Remote Code Execution Vulnerability
Credited as txz
CVE-2026-72953 BR2026-0000-011355 unclaimed
Windows USB Driver Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-72954 BR2026-0000-011356 unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-72954 BR2026-0000-011357 unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as Aobo Wang
CVE-2026-72956 BR2026-0000-011358 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Minjea Park
CVE-2026-72956 BR2026-0000-011359 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Jmini
CVE-2026-72956 BR2026-0000-011360 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as SeaDragnoL with Qrious Secure
CVE-2026-72956 BR2026-0000-011361 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as minhthutb111
CVE-2026-72957 BR2026-0000-011362 unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-72957 BR2026-0000-011363 unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-72957 BR2026-0000-011364 unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-72957 BR2026-0000-011365 unclaimed
Windows Deployment Services Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-72958 BR2026-0000-011366 unclaimed
Windows Credential Guard Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-72958 BR2026-0000-011367 unclaimed
Windows Credential Guard Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-72959 BR2026-0000-011368 unclaimed
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-72961 BR2026-0000-011369 unclaimed
Windows Hyper-V Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-72961 BR2026-0000-011370 unclaimed
Windows Hyper-V Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-72962 BR2026-0000-011371 unclaimed
Windows USB Video Driver Elevation of Privilege Vulnerability
Credited as Dan Reynolds with MSRC Vulnerabilities
CVE-2026-72962 BR2026-0000-011372 unclaimed
Windows USB Video Driver Elevation of Privilege Vulnerability
Credited as Mitigations
CVE-2026-72963 BR2026-0000-011373 unclaimed
Windows Modern Execution Server Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-72964 BR2026-0000-011374 unclaimed
Windows Internet Connection Sharing (ICS) Tampering Vulnerability
Credited as 0nid with ENKI WhiteHat
CVE-2026-72965 BR2026-0000-011375 unclaimed
Windows WebClient Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-72965 BR2026-0000-011376 unclaimed
Windows WebClient Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-72966 BR2026-0000-011377 unclaimed
Windows Remote Access Connection Manager Tampering Vulnerability
Credited as 0nid with ENKI WhiteHat
CVE-2026-72967 BR2026-0000-011378 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-72967 BR2026-0000-011379 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab
CVE-2026-72967 BR2026-0000-011380 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-72972 BR2026-0000-011381 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-72972 BR2026-0000-011382 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi with S2W
CVE-2026-72973 BR2026-0000-011383 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-72974 BR2026-0000-011384 unclaimed
Microsoft Office Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-72975 BR2026-0000-011385 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-72976 BR2026-0000-011386 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Công Thành Nguyễn
CVE-2026-72977 BR2026-0000-011387 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Minjea Park
CVE-2026-72977 BR2026-0000-011388 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Jmini
CVE-2026-72977 BR2026-0000-011389 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-72978 BR2026-0000-011390 unclaimed
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Credited as Azure Yang with Kunlun Lab
CVE-2026-72979 BR2026-0000-011391 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-72981 BR2026-0000-011392 unclaimed
IP Helper Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-72982 BR2026-0000-011393 unclaimed
Windows Netlogon Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-72983 BR2026-0000-011394 unclaimed
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-72985 BR2026-0000-011395 unclaimed
Volume Shadow Copy Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-72987 BR2026-0000-011396 unclaimed
Windows DNS Remote Code Execution Vulnerability
Credited as sabersauce
CVE-2026-72988 BR2026-0000-011397 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-72989 BR2026-0000-011398 unclaimed
Windows Failover Cluster Information Disclosure Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-72990 BR2026-0000-011399 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-72991 BR2026-0000-011400 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機