BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 1201–1250 of 1578 · page 25 of 32
CVE-2026-73024 BR2026-0000-011451 unclaimed
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-73025 BR2026-0000-011452 unclaimed
Windows iSCSI Security Feature Bypass Vulnerability
Credited as David Carliez with DC CyberSecurity
CVE-2026-73026 BR2026-0000-011453 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-73026 BR2026-0000-011454 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-73028 BR2026-0000-011455 unclaimed
SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-73029 BR2026-0000-011456 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-77480 BR2026-0000-011457 unclaimed
SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-77481 BR2026-0000-011458 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-77482 BR2026-0000-011459 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-77482 BR2026-0000-011460 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as txz
CVE-2026-77483 BR2026-0000-011461 unclaimed
SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-77484 BR2026-0000-011462 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Piotr Bazydło (@chudypb)
CVE-2026-77485 BR2026-0000-011463 unclaimed
SQL Server Elevation of Privilege Vulnerability
Credited as Microsoft Red Team
CVE-2026-77486 BR2026-0000-011464 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-77486 BR2026-0000-011465 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as txz
CVE-2026-77487 BR2026-0000-011466 unclaimed
SQL Server Elevation of Privilege Vulnerability
Credited as Fabiano Amorim with Pythian
CVE-2026-77488 BR2026-0000-011467 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Microsoft Red Team
CVE-2026-77489 BR2026-0000-011468 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-77489 BR2026-0000-011469 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-77491 BR2026-0000-011470 unclaimed
Windows GDI Information Disclosure Vulnerability
Credited as Vamshi Krishna Bolly
CVE-2026-77492 BR2026-0000-011471 unclaimed
Windows Storage Port Driver Information Disclosure Vulnerability
Credited as Taylor Leong
CVE-2026-77493 BR2026-0000-011472 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-77493 BR2026-0000-011473 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-77493 BR2026-0000-011474 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as namnp with Viettel Cyber Security
CVE-2026-77493 BR2026-0000-011475 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as vietnq
CVE-2026-77493 BR2026-0000-011476 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-77494 BR2026-0000-011477 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77495 BR2026-0000-011478 unclaimed
Windows Imaging Component Remote Code Execution Vulnerability
Credited as HeeChan Kim with TeamH4C
CVE-2026-77498 BR2026-0000-011479 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77499 BR2026-0000-011480 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77501 BR2026-0000-011481 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77502 BR2026-0000-011482 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77503 BR2026-0000-011483 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Vimal Sindh
CVE-2026-77504 BR2026-0000-011484 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-77504 BR2026-0000-011485 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-77504 BR2026-0000-011486 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-77504 BR2026-0000-011487 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as namnp with Viettel Cyber Security
CVE-2026-77504 BR2026-0000-011488 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-77504 BR2026-0000-011489 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as vietnq
CVE-2026-77505 BR2026-0000-011490 unclaimed
Windows DNS Server Remote Code Execution Vulnerability
Credited as Souhail Hammou
CVE-2026-77886 BR2026-0000-011491 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77887 BR2026-0000-011492 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Matthew Franklin
CVE-2026-77888 BR2026-0000-011493 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77889 BR2026-0000-011494 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77890 BR2026-0000-011495 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77891 BR2026-0000-011496 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Matthew Franklin
CVE-2026-77893 BR2026-0000-011497 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77894 BR2026-0000-011498 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-77895 BR2026-0000-011499 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Matthew Franklin
CVE-2026-77896 BR2026-0000-011500 unclaimed
Windows Remote Desktop Client Denial of Service Vulnerability
Credited as Rashmi Bharadwaj