BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 1551–1578 of 1578 matching · page 32 of 32 · clear filters
CVE-2026-69637 BR2026-0000-015328 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Linzishan, Anemone
CVE-2026-69681 BR2026-0000-015329 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Artur Stetsko
CVE-2026-69712 BR2026-0000-015330 unclaimed
Windows Key Distribution Center Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69712 BR2026-0000-015331 unclaimed
Windows Key Distribution Center Remote Code Execution Vulnerability
Credited as npc0vo with https://diffract-ai.com/
CVE-2026-69732 BR2026-0000-015332 unclaimed
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Credited as Mingjia Liu with DBAPPSecurity WeBin Lab
CVE-2026-69732 BR2026-0000-015333 unclaimed
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Credited as Takuto Tanda with GMO Cybersecurity by Ierae, Inc.
CVE-2026-69803 BR2026-0000-015334 unclaimed
Windows DHCP Server Information Disclosure Vulnerability
Credited as Linzishan, Anemone
CVE-2026-69803 BR2026-0000-015335 unclaimed
Windows DHCP Server Information Disclosure Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-71337 BR2026-0000-015336 unclaimed
Windows Storage Management Provider Elevation of Privilege Vulnerability
Credited as Linzishan, Anemone
CVE-2026-71337 BR2026-0000-015337 unclaimed
Windows Storage Management Provider Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-71337 BR2026-0000-015338 unclaimed
Windows Storage Management Provider Elevation of Privilege Vulnerability
Credited as Anemone
CVE-2026-81357 BR2026-0000-015339 unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Mohit_Negi with Bugcrowd
CVE-2026-81951 BR2026-0000-015340 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-68894 BR2026-0000-015373 unclaimed
Windows Error Reporting Elevation of Privilege Vulnerability
Credited as Koen van Eijk
CVE-2026-68894 BR2026-0000-015374 unclaimed
Windows Error Reporting Elevation of Privilege Vulnerability
Credited as Thomas van Turnhout with Datatalk
CVE-2026-69282 BR2026-0000-015375 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as dongblanco
CVE-2026-69409 BR2026-0000-015376 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as Mahmoud Gamal with Abu Dhabi GovDigital DGE
CVE-2026-69636 BR2026-0000-015377 unclaimed
Microsoft Office SharePoint Information Disclosure Vulnerability
Credited as hir0ot with SHFSEC
CVE-2026-85921 BR2026-0000-015378 unclaimed
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Credited as vmpr0be
CVE-2026-62694 BR2026-0000-015559 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69288 BR2026-0000-015560 unclaimed
Windows GDI+ Information Disclosure Vulnerability
Credited as Yongha Lee
CVE-2026-69307 BR2026-0000-015561 unclaimed
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69307 BR2026-0000-015562 unclaimed
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Credited as wgg with Diffract
CVE-2026-56172 BR2026-0000-015563 unclaimed
Windows VHD miniport driver Elevation of Privilege Vulnerability
Credited as Thanatos Tian
CVE-2026-56172 BR2026-0000-015564 unclaimed
Windows VHD miniport driver Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-69328 BR2026-0000-015565 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Matthew Eidelberg with Black Hills Information Security
CVE-2026-69504 BR2026-0000-019167 unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as Jmini
CVE-2026-69504 BR2026-0000-019168 unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as boolgombear