BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 1501–1550 of 1578 matching · page 31 of 32 · clear filters
CVE-2026-69399 BR2026-0000-014403 unclaimed
Azure Arc Elevation of Privilege Vulnerability
Credited as Rajesh Chada with Microsoft
CVE-2026-69399 BR2026-0000-014404 unclaimed
Azure Arc Elevation of Privilege Vulnerability
Credited as Gal Azaria with Microsoft
CVE-2026-69399 BR2026-0000-014405 unclaimed
Azure Arc Elevation of Privilege Vulnerability
Credited as Yuval Weber with Microsoft
CVE-2026-69843 BR2026-0000-014406 unclaimed
Microsoft Fabric Elevation of Privilege Vulnerability
Credited as Taylor O'Dell with Microsoft
CVE-2026-69865 BR2026-0000-014407 unclaimed
Microsoft Container Registry Elevation of Privilege Vulnerability
Credited as XBREACH TEAM with XBREACH.AI
CVE-2026-70009 BR2026-0000-014408 unclaimed
Azure Arc Elevation of Privilege Vulnerability
Credited as Yuval Weber with Microsoft
CVE-2026-70200 BR2026-0000-014409 unclaimed
Azure Logic Apps Elevation of Privilege Vulnerability
Credited as Haakon Gulbrandsrud with Binary Security
CVE-2026-77901 BR2026-0000-014410 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-77903 BR2026-0000-014411 unclaimed
Microsoft Dataverse Elevation of Privilege Vulnerability
Credited as Daniel Heinsen (hotnops) with SpecterOps
CVE-2026-78501 BR2026-0000-014412 unclaimed
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Credited as Vitaly Simonovich with Cato Networks
CVE-2026-78517 BR2026-0000-014413 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-78526 BR2026-0000-014414 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-83944 BR2026-0000-014415 unclaimed
Azure Logic Apps Elevation of Privilege Vulnerability
Credited as Haakon Gulbrandsrud with Binary Security
CVE-2026-83946 BR2026-0000-014416 unclaimed
Azure Portal Spoofing Vulnerability
Credited as shoodagiri
CVE-2026-85878 BR2026-0000-014417 unclaimed
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Credited as Soufiane EL Habti Of poneglyph
CVE-2026-85878 BR2026-0000-014418 unclaimed
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Credited as Uriel Yochpaz with Upwind Security
CVE-2026-85885 BR2026-0000-014419 unclaimed
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Credited as Alex
CVE-2026-85887 BR2026-0000-014420 unclaimed
M365 Copilot Information Disclosure Vulnerability
Credited as JJ Jiang with Microsoft
CVE-2026-85889 BR2026-0000-014421 unclaimed
Azure AI Foundry Elevation of Privilege Vulnerability
Credited as Rémy Marot
CVE-2026-85917 BR2026-0000-014422 unclaimed
Azure AI Foundry Elevation of Privilege Vulnerability
Credited as MARIOS GYFTOS
CVE-2026-87701 BR2026-0000-014423 unclaimed
Azure Cosmos DB Elevation of Privilege Vulnerability
Credited as Team Menace
CVE-2026-88097 BR2026-0000-014440 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as Nan Wang(@eternalsakura13)
CVE-2026-88097 BR2026-0000-014441 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as Ziling Chen
CVE-2026-83498 BR2026-0000-014495 unclaimed
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Credited as Adrian Denkiewicz with Doyensec
CVE-2026-57099 BR2026-0000-014508 unclaimed
ASP.NET Core Denial of Service Vulnerability
Credited as Nguyen Van Minh Duc with Saigon Newport Corporation
CVE-2026-57099 BR2026-0000-014509 unclaimed
ASP.NET Core Denial of Service Vulnerability
Credited as Nguyen Hoang Quoc An with Lien Phat Technology Corporation
CVE-2026-68824 BR2026-0000-014510 unclaimed
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Credited as mj with Kunlun Lab
CVE-2026-68824 BR2026-0000-014511 unclaimed
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69498 BR2026-0000-014512 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69498 BR2026-0000-014513 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-69498 BR2026-0000-014514 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as npc0vo with https://diffract-ai.com/
CVE-2026-69572 BR2026-0000-014515 unclaimed
Windows SMB Client Information Disclosure Vulnerability
Credited as fanxiaocao
CVE-2026-69572 BR2026-0000-014516 unclaimed
Windows SMB Client Information Disclosure Vulnerability
Credited as pjf
CVE-2026-69620 BR2026-0000-014517 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Jonghoi Kim
CVE-2026-77886 BR2026-0000-014518 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Linzishan, Anemone
CVE-2026-77886 BR2026-0000-014519 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69619 BR2026-0000-014683 unclaimed
Windows exFAT File System Elevation of Privilege Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-69619 BR2026-0000-014684 unclaimed
Windows exFAT File System Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-69637 BR2026-0000-014685 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Jonghoi Kim
CVE-2026-69637 BR2026-0000-014686 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Donghyeon Oh with KloyLab
CVE-2026-73013 BR2026-0000-014687 unclaimed
Windows Imaging Component Remote Code Execution Vulnerability
Credited as HeeChan Kim with TeamH4C
CVE-2026-69338 BR2026-0000-015319 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as VictorV of Kunlun Lab
CVE-2026-69338 BR2026-0000-015320 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as Anemone
CVE-2026-69338 BR2026-0000-015321 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as Linzishan, Anemone
CVE-2026-69338 BR2026-0000-015322 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69590 BR2026-0000-015323 unclaimed
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Credited as Linzishan, Anemone
CVE-2026-69590 BR2026-0000-015324 unclaimed
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69637 BR2026-0000-015325 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Linzishan
CVE-2026-69637 BR2026-0000-015326 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Anemone
CVE-2026-69637 BR2026-0000-015327 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Zhiniang Peng with HUST