Microsoft
September 2026 Early Security Updates
2026-Sep Sep 3, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1578 lines
Showing 1251–1300 of 1578 · page 26 of 32
CVE-2026-77897
BR2026-0000-011501
unclaimed
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Credited as Alaa Kachouh
CVE-2026-77897
BR2026-0000-011502
unclaimed
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Credited as Ali Jammal
CVE-2026-77901
BR2026-0000-011503
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-77904
BR2026-0000-011504
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-77904
BR2026-0000-011505
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-77904
BR2026-0000-011506
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-77904
BR2026-0000-011507
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-77904
BR2026-0000-011508
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as pwn2addr
CVE-2026-77904
BR2026-0000-011509
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-77904
BR2026-0000-011510
unclaimed
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-77905
BR2026-0000-011511
unclaimed
Windows Management Instrumentation Elevation of Privilege Vulnerability
Credited as heesouk park with Microsoft
CVE-2026-77906
BR2026-0000-011512
unclaimed
Visual Studio Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-77907
BR2026-0000-011513
unclaimed
Visual Studio Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-77908
BR2026-0000-011514
unclaimed
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Credited as odgrso with GMO CyberSecurity by Ierae
CVE-2026-77909
BR2026-0000-011515
unclaimed
Azure CycleCloud Information Disclosure Vulnerability
Credited as XBREACH TEAM with XBreach.ai
CVE-2026-77911
BR2026-0000-011516
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-77911
BR2026-0000-011517
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as passion!
CVE-2026-78441
BR2026-0000-011518
unclaimed
Windows OLE DB Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-78442
BR2026-0000-011519
unclaimed
Windows OLE DB Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-78444
BR2026-0000-011520
unclaimed
Microsoft Failover Cluster Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-78447
BR2026-0000-011521
unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-78448
BR2026-0000-011522
unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-78449
BR2026-0000-011523
unclaimed
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-78450
BR2026-0000-011524
unclaimed
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-78451
BR2026-0000-011525
unclaimed
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-78451
BR2026-0000-011526
unclaimed
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Credited as wgg with Diffract
CVE-2026-78452
BR2026-0000-011527
unclaimed
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-78452
BR2026-0000-011528
unclaimed
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Credited as wgg with Diffract
CVE-2026-78453
BR2026-0000-011529
unclaimed
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Credited as Seung Chan Kim
CVE-2026-78453
BR2026-0000-011530
unclaimed
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Credited as yhw
CVE-2026-78454
BR2026-0000-011531
unclaimed
Windows CD-ROM Driver Information Disclosure Vulnerability
Credited as Jmini
CVE-2026-78455
BR2026-0000-011532
unclaimed
Xbox Information Disclosure Vulnerability
Credited as Jmini
CVE-2026-78456
BR2026-0000-011533
unclaimed
SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-78457
BR2026-0000-011534
unclaimed
Windows Security Health Service Elevation of Privilege Vulnerability
Credited as z1r0
CVE-2026-78461
BR2026-0000-011535
unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Tarek Nakkouch
CVE-2026-78462
BR2026-0000-011536
unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as 陳宥升 (CheN..)
CVE-2026-78463
BR2026-0000-011537
unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-78464
BR2026-0000-011538
unclaimed
Windows MIDI Service Module Elevation of Privileges Vulnerability
Credited as Lian Owen
CVE-2026-78464
BR2026-0000-011539
unclaimed
Windows MIDI Service Module Elevation of Privileges Vulnerability
Credited as Vishal Chauhan
CVE-2026-78502
BR2026-0000-011540
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-78503
BR2026-0000-011541
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-78504
BR2026-0000-011542
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-78505
BR2026-0000-011543
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-78505
BR2026-0000-011544
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-78505
BR2026-0000-011545
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as SeaDragnoL with Qrious Secure
CVE-2026-78506
BR2026-0000-011546
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Công Thành Nguyễn
CVE-2026-78507
BR2026-0000-011547
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Haifei Li with EXPMON
CVE-2026-78508
BR2026-0000-011548
unclaimed
Windows CD-ROM Driver Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-78508
BR2026-0000-011549
unclaimed
Windows CD-ROM Driver Information Disclosure Vulnerability
Credited as wgg with Diffract
CVE-2026-78509
BR2026-0000-011550
unclaimed
Microsoft Office Outlook Remote Code Execution Vulnerability
Credited as Haifei Li with EXPMON