BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 1301–1350 of 1578 matching · page 27 of 32 · clear filters
CVE-2026-78510 BR2026-0000-011551 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as Haifei Li with EXPMON
CVE-2026-78511 BR2026-0000-011552 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-78513 BR2026-0000-011553 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as Công Thành Nguyễn
CVE-2026-78514 BR2026-0000-011554 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-78515 BR2026-0000-011555 unclaimed
Microsoft Office Excel Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-78515 BR2026-0000-011556 unclaimed
Microsoft Office Excel Information Disclosure Vulnerability
Credited as SeaDragnoL with Qrious Secure
CVE-2026-78515 BR2026-0000-011557 unclaimed
Microsoft Office Excel Information Disclosure Vulnerability
Credited as grass with Viettel Cyber Security
CVE-2026-78516 BR2026-0000-011558 unclaimed
Windows Storage Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-78516 BR2026-0000-011559 unclaimed
Windows Storage Information Disclosure Vulnerability
Credited as wgg with https://diffract-ai.com/
CVE-2026-78517 BR2026-0000-011560 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-78518 BR2026-0000-011561 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-78519 BR2026-0000-011562 unclaimed
Microsoft Office Outlook Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-78520 BR2026-0000-011563 unclaimed
Microsoft Office Outlook Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-78521 BR2026-0000-011564 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-78522 BR2026-0000-011565 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-78524 BR2026-0000-011566 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-78524 BR2026-0000-011567 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as txz
CVE-2026-78525 BR2026-0000-011568 unclaimed
Microsoft Office Outlook Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-78526 BR2026-0000-011569 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-78526 BR2026-0000-011570 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-80073 BR2026-0000-011571 unclaimed
Microsoft Office Outlook Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-80074 BR2026-0000-011572 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-80075 BR2026-0000-011573 unclaimed
Windows Work Folders Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-80076 BR2026-0000-011574 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Mohammed Alqurashi
CVE-2026-80077 BR2026-0000-011575 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-80078 BR2026-0000-011576 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Mohammed Alqurashi
CVE-2026-80079 BR2026-0000-011577 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Udin Chan
CVE-2026-80080 BR2026-0000-011578 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as hj with 78ResearchLab
CVE-2026-80080 BR2026-0000-011579 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Hyeongjun Choi
CVE-2026-80081 BR2026-0000-011580 unclaimed
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-80081 BR2026-0000-011581 unclaimed
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-80082 BR2026-0000-011582 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Mohammed Alqurashi
CVE-2026-80084 BR2026-0000-011583 unclaimed
Microsoft Office Outlook Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-80085 BR2026-0000-011584 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-80085 BR2026-0000-011585 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-80086 BR2026-0000-011586 unclaimed
Microsoft Office PowerPoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-80087 BR2026-0000-011587 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Jeongmin Choi
CVE-2026-80087 BR2026-0000-011588 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as SeaDragnoL with Qrious Secure
CVE-2026-80087 BR2026-0000-011589 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as grass with Viettel Cyber Security
CVE-2026-80088 BR2026-0000-011590 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as SeaDragnoL
CVE-2026-80088 BR2026-0000-011591 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as grass
CVE-2026-80089 BR2026-0000-011592 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-80089 BR2026-0000-011593 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-80090 BR2026-0000-011594 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-80091 BR2026-0000-011595 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-80093 BR2026-0000-011596 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as Marcin 'Icewall' Noga with Cisco Talos
CVE-2026-80093 BR2026-0000-011597 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-80093 BR2026-0000-011598 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-80096 BR2026-0000-011599 unclaimed
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Credited as zickzick2
CVE-2026-80096 BR2026-0000-011600 unclaimed
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)