BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 101–150 of 1578 · page 3 of 32
CVE-2026-67389 BR2026-0000-010351 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as yhw
CVE-2026-67389 BR2026-0000-010352 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as txz
CVE-2026-67390 BR2026-0000-010353 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67393 BR2026-0000-010354 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67624 BR2026-0000-010355 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67629 BR2026-0000-010356 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Microsoft Red Team
CVE-2026-67630 BR2026-0000-010357 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67631 BR2026-0000-010358 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Andrew Ruddick with Microsoft Red Team
CVE-2026-67633 BR2026-0000-010359 unclaimed
Microsoft SQL Server Denial of Service Vulnerability
Credited as Microsoft Red Team
CVE-2026-67636 BR2026-0000-010360 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-67638 BR2026-0000-010361 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-67638 BR2026-0000-010362 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-67639 BR2026-0000-010363 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-67641 BR2026-0000-010364 unclaimed
Microsoft SQL Server Denial of Service Vulnerability
Credited as Microsoft Red Team
CVE-2026-67642 BR2026-0000-010365 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-67642 BR2026-0000-010366 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-67643 BR2026-0000-010367 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-67645 BR2026-0000-010368 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Microsoft Red Team
CVE-2026-67645 BR2026-0000-010369 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-67648 BR2026-0000-010370 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68775 BR2026-0000-010371 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Microsoft Red Team
CVE-2026-68776 BR2026-0000-010372 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68777 BR2026-0000-010373 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68778 BR2026-0000-010374 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68779 BR2026-0000-010375 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68780 BR2026-0000-010376 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68781 BR2026-0000-010377 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68784 BR2026-0000-010378 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68785 BR2026-0000-010379 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-68786 BR2026-0000-010380 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-68786 BR2026-0000-010381 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-68786 BR2026-0000-010382 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as txz
CVE-2026-68787 BR2026-0000-010383 unclaimed
Microsoft SQL Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-68824 BR2026-0000-010384 unclaimed
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Credited as Zhang WangJunJie@Hillstone, He YiSheng
CVE-2026-68825 BR2026-0000-010385 unclaimed
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Credited as Byzero with Kunlun Lab
CVE-2026-68825 BR2026-0000-010386 unclaimed
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-68825 BR2026-0000-010387 unclaimed
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-68827 BR2026-0000-010388 unclaimed
Windows GDI+ Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-68827 BR2026-0000-010389 unclaimed
Windows GDI+ Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-68827 BR2026-0000-010390 unclaimed
Windows GDI+ Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-68827 BR2026-0000-010391 unclaimed
Windows GDI+ Elevation of Privilege Vulnerability
Credited as 2st with https://diffract-ai.com/
CVE-2026-68827 BR2026-0000-010392 unclaimed
Windows GDI+ Elevation of Privilege Vulnerability
Credited as npc0vo with https://diffract-ai.com/
CVE-2026-68828 BR2026-0000-010393 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU) with Diffract
CVE-2026-68828 BR2026-0000-010394 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Haoyi Liu
CVE-2026-68830 BR2026-0000-010395 unclaimed
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-68830 BR2026-0000-010396 unclaimed
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Credited as Doug Lorenzen with AHEAD
CVE-2026-68831 BR2026-0000-010397 unclaimed
Windows Defender Firewall Service Information Disclosure Vulnerability
Credited as z1r0
CVE-2026-68832 BR2026-0000-010398 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Thunder_J
CVE-2026-68832 BR2026-0000-010399 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-68833 BR2026-0000-010400 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Thanatos Tian