BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 1451–1500 of 1578 matching · page 30 of 32 · clear filters
CVE-2026-83989 BR2026-0000-011701 unclaimed
Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability
Credited as xiaozun tang
CVE-2026-83990 BR2026-0000-011702 unclaimed
Microsoft Graphics Component Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab
CVE-2026-83991 BR2026-0000-011703 unclaimed
Windows Cloud Files Mini Filter Driver Tampering Vulnerability
Credited as Karol Nieckarz with independent security research
CVE-2026-83995 BR2026-0000-011704 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Vimal SIndh
CVE-2026-83996 BR2026-0000-011705 unclaimed
Windows Error Reporting Elevation of Privilege Vulnerability
Credited as goodbyeselene
CVE-2026-83998 BR2026-0000-011706 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-84000 BR2026-0000-011707 unclaimed
Microsoft Graphics Component Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-84000 BR2026-0000-011708 unclaimed
Microsoft Graphics Component Remote Code Execution Vulnerability
Credited as txz
CVE-2026-85360 BR2026-0000-011709 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as YuilMuil(Yoon Jung Hyun)
CVE-2026-85360 BR2026-0000-011710 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Byzero with Kunlun Lab
CVE-2026-85360 BR2026-0000-011711 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-85875 BR2026-0000-011712 unclaimed
Microsoft Office Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-85877 BR2026-0000-011713 unclaimed
Windows Print Spooler Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-85877 BR2026-0000-011714 unclaimed
Windows Print Spooler Remote Code Execution Vulnerability
Credited as npc0vo
CVE-2026-85880 BR2026-0000-011715 unclaimed
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Credited as Mark Kelly, David Galazin
CVE-2026-85880 BR2026-0000-011716 unclaimed
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Credited as Jeremy Hedges with Proofpoint Inc.
CVE-2026-85880 BR2026-0000-011717 unclaimed
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Credited as Volexity with https://www.volexity.com/
CVE-2026-69845 BR2026-0000-011772 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Linzishan, Anemone
CVE-2026-69845 BR2026-0000-011773 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69777 BR2026-0000-011774 unclaimed
Windows DHCP Client Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU) with Diffract and HYL
CVE-2026-69478 BR2026-0000-012021 unclaimed
Windows Device Association Service Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-69478 BR2026-0000-012022 unclaimed
Windows Device Association Service Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-70334 BR2026-0000-012023 unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Rubin Ownz
CVE-2026-70334 BR2026-0000-012024 unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Luat Nguyen with CyberJutsu Academy
CVE-2026-71336 BR2026-0000-012025 unclaimed
Windows Work Folder Service Remote Code Execution Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69286 BR2026-0000-012026 unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69286 BR2026-0000-012027 unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as wgg with Diffract
CVE-2026-69549 BR2026-0000-012028 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as insu (@hpy_insu) of Theori, with Xint
CVE-2026-77490 BR2026-0000-012029 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Orange Tsai (@orange_8361) with DEVCORE
CVE-2026-80075 BR2026-0000-012030 unclaimed
Windows Work Folders Elevation of Privilege Vulnerability
Credited as goodbyeselene
CVE-2026-81963 BR2026-0000-012031 unclaimed
Windows Update Stack Elevation of Privilege Vulnerability
Credited as Zhang WangJunJie with Hillstone Networks
CVE-2026-85892 BR2026-0000-012032 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as Nan Wang(@eternalsakura13)
CVE-2026-85892 BR2026-0000-012033 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as Ziling Chen
CVE-2026-69321 BR2026-0000-012221 unclaimed
Windows Power Dependency Coordinator Tampering Vulnerability
Credited as 6ucy
CVE-2026-69406 BR2026-0000-012222 unclaimed
Windows Kernel Information Disclosure Vulnerability
Credited as Jongseong Kim (nevul37), UIUC
CVE-2026-69416 BR2026-0000-012223 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69416 BR2026-0000-012224 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as npc0vo with https://diffract-ai.com/
CVE-2026-69608 BR2026-0000-012225 unclaimed
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-81355 BR2026-0000-012226 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-69603 BR2026-0000-014354 unclaimed
Windows Hyper-V Remote Code Execution Vulnerability
Credited as kanren3
CVE-2026-81355 BR2026-0000-014355 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-81355 BR2026-0000-014356 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-85893 BR2026-0000-014357 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as Nan Wang(@eternalsakura13)
CVE-2026-85893 BR2026-0000-014358 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as Ziling Chen
CVE-2026-69724 BR2026-0000-014359 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-81957 BR2026-0000-014360 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-62874 BR2026-0000-014399 unclaimed
Azure Billing Elevation of Privilege Vulnerability
Credited as Lucas Gayk with Microsoft
CVE-2026-68791 BR2026-0000-014400 unclaimed
Azure Machine Learning Information Disclosure Vulnerability
Credited as Asaf Cohen with XBREACH.AI
CVE-2026-68791 BR2026-0000-014401 unclaimed
Azure Machine Learning Information Disclosure Vulnerability
Credited as Asaf Cohen with XBREACH
CVE-2026-68825 BR2026-0000-014402 unclaimed
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Credited as Grant Hume