BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 251–300 of 1578 matching · page 6 of 32 · clear filters
CVE-2026-69266 BR2026-0000-010501 unclaimed
Windows DHCP Server Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-69267 BR2026-0000-010502 unclaimed
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Credited as renyidudumen
CVE-2026-69267 BR2026-0000-010503 unclaimed
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Credited as Lian Owen
CVE-2026-69267 BR2026-0000-010504 unclaimed
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Credited as Dhiyanesh Selvaraj with CVS Health
CVE-2026-69268 BR2026-0000-010505 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as chipdb
CVE-2026-69269 BR2026-0000-010506 unclaimed
Microsoft Standard XPS Elevation of Privilege Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69270 BR2026-0000-010507 unclaimed
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69271 BR2026-0000-010508 unclaimed
Microsoft Standard XPS Elevation of Privilege Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69272 BR2026-0000-010509 unclaimed
Microsoft Standard XPS Elevation of Privilege Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69273 BR2026-0000-010510 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as chipdb
CVE-2026-69274 BR2026-0000-010511 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-69275 BR2026-0000-010512 unclaimed
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Credited as hoon with 78researchlab
CVE-2026-69275 BR2026-0000-010513 unclaimed
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Credited as zoemurmure with Qingteng
CVE-2026-69275 BR2026-0000-010514 unclaimed
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Credited as Mert Kuvvet
CVE-2026-69275 BR2026-0000-010515 unclaimed
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69277 BR2026-0000-010516 unclaimed
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Credited as Brandon Fisher
CVE-2026-69279 BR2026-0000-010517 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69279 BR2026-0000-010518 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-69279 BR2026-0000-010519 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-69280 BR2026-0000-010520 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-69280 BR2026-0000-010521 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69280 BR2026-0000-010522 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Ezrak1e
CVE-2026-69281 BR2026-0000-010523 unclaimed
Windows License Manager Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69281 BR2026-0000-010524 unclaimed
Windows License Manager Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69281 BR2026-0000-010525 unclaimed
Windows License Manager Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69282 BR2026-0000-010526 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as Dongjun Kim (smlijun) with UIUC
CVE-2026-69282 BR2026-0000-010527 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-69282 BR2026-0000-010528 unclaimed
Microsoft Office SharePoint Remote Code Execution Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-69283 BR2026-0000-010529 unclaimed
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Credited as sweetchip
CVE-2026-69283 BR2026-0000-010530 unclaimed
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Credited as Daejin Lee
CVE-2026-69283 BR2026-0000-010531 unclaimed
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Credited as HeeChan Kim with TeamH4C
CVE-2026-69283 BR2026-0000-010532 unclaimed
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Credited as LC with VGCO Future Labs
CVE-2026-69283 BR2026-0000-010533 unclaimed
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Credited as grass341 with Viettel Cyber Security
CVE-2026-69285 BR2026-0000-010534 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-69285 BR2026-0000-010535 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-69286 BR2026-0000-010536 unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69287 BR2026-0000-010537 unclaimed
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69288 BR2026-0000-010538 unclaimed
Windows GDI+ Information Disclosure Vulnerability
Credited as Seung Chan Kim
CVE-2026-69290 BR2026-0000-010539 unclaimed
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69290 BR2026-0000-010540 unclaimed
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-69290 BR2026-0000-010541 unclaimed
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-69291 BR2026-0000-010542 unclaimed
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-69291 BR2026-0000-010543 unclaimed
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Credited as txz
CVE-2026-69292 BR2026-0000-010544 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as ʌ!ɔ⊥ojv
CVE-2026-69293 BR2026-0000-010545 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69293 BR2026-0000-010546 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69295 BR2026-0000-010547 unclaimed
Windows USB Driver Elevation of Privilege Vulnerability
Credited as Jmini
CVE-2026-69296 BR2026-0000-010548 unclaimed
Windows Device Association Service Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-69296 BR2026-0000-010549 unclaimed
Windows Device Association Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69297 BR2026-0000-010550 unclaimed
Windows DHCP Server Information Disclosure Vulnerability
Credited as Howard McGreehan with MSRC V&M