BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

September 2026 Early Security Updates

2026-Sep Sep 3, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Sep, revision 2026-09-06T04:36:00Z). 80 vulnerabilities, 8 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1578 lines
All 1578 CVEs 1578 Additional recognition 0 Unclaimed only
Showing 301–350 of 1578 matching · page 7 of 32 · clear filters
CVE-2026-69298 BR2026-0000-010551 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69298 BR2026-0000-010552 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69300 BR2026-0000-010553 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Ezrak1e
CVE-2026-69303 BR2026-0000-010554 unclaimed
Push Message Routing Service Information Disclosure Vulnerability
Credited as k0shl
CVE-2026-69303 BR2026-0000-010555 unclaimed
Push Message Routing Service Information Disclosure Vulnerability
Credited as maka with Tu Longfeng
CVE-2026-69304 BR2026-0000-010556 unclaimed
ASP.NET Core Denial of Service Vulnerability
Credited as محمد السيد عثمان محمود القصاص
CVE-2026-69307 BR2026-0000-010557 unclaimed
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69308 BR2026-0000-010558 unclaimed
Microsoft Standard XPS Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69309 BR2026-0000-010559 unclaimed
Windows Print Spooler Components Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69309 BR2026-0000-010560 unclaimed
Windows Print Spooler Components Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69310 BR2026-0000-010561 unclaimed
Windows DNS Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-69312 BR2026-0000-010562 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-69312 BR2026-0000-010563 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-69312 BR2026-0000-010564 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-69312 BR2026-0000-010565 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69312 BR2026-0000-010566 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Minjea Park
CVE-2026-69313 BR2026-0000-010567 unclaimed
Microsoft Standard XPS Elevation of Privilege Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69314 BR2026-0000-010568 unclaimed
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69314 BR2026-0000-010569 unclaimed
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69314 BR2026-0000-010570 unclaimed
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69314 BR2026-0000-010571 unclaimed
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Credited as h4urek with secsys lab
CVE-2026-69315 BR2026-0000-010572 unclaimed
Windows License Manager Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-69316 BR2026-0000-010573 unclaimed
Windows Overlay Filter Information Disclosure Vulnerability
Credited as Zeze with TXOne
CVE-2026-69317 BR2026-0000-010574 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69318 BR2026-0000-010575 unclaimed
Windows Imaging Component Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-69319 BR2026-0000-010576 unclaimed
Windows USB Video Driver Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-69321 BR2026-0000-010577 unclaimed
Windows Power Dependency Coordinator Tampering Vulnerability
Credited as Steven Foerster
CVE-2026-69321 BR2026-0000-010578 unclaimed
Windows Power Dependency Coordinator Tampering Vulnerability
Credited as Prayas (Pro bear)
CVE-2026-69322 BR2026-0000-010579 unclaimed
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-69322 BR2026-0000-010580 unclaimed
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69322 BR2026-0000-010581 unclaimed
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69323 BR2026-0000-010582 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-69323 BR2026-0000-010583 unclaimed
Windows Biometric Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-69324 BR2026-0000-010584 unclaimed
Windows Performance Monitor Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69325 BR2026-0000-010585 unclaimed
Microsoft JScript Remote Code Execution Vulnerability
Credited as Hung Nguyen (mov) of Calif.io in collaboration with OpenAI Codex Security
CVE-2026-69328 BR2026-0000-010586 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Ashish Kunwar
CVE-2026-69328 BR2026-0000-010587 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Muntadher hasan (Dark River)
CVE-2026-69328 BR2026-0000-010588 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Bhaswanth Chigurupati
CVE-2026-69329 BR2026-0000-010589 unclaimed
BranchCache Denial of Service Vulnerability
Credited as Linzishan, Anemone
CVE-2026-69329 BR2026-0000-010590 unclaimed
BranchCache Denial of Service Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-69331 BR2026-0000-010591 unclaimed
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-69332 BR2026-0000-010592 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Sergey immortalp0ny Tarasov with Positive Technologies
CVE-2026-69333 BR2026-0000-010593 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-69334 BR2026-0000-010594 unclaimed
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-69334 BR2026-0000-010595 unclaimed
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Credited as txz
CVE-2026-69335 BR2026-0000-010596 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Leo Kao
CVE-2026-69336 BR2026-0000-010597 unclaimed
Microsoft Standard XPS Elevation of Privilege Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-69337 BR2026-0000-010598 unclaimed
Windows Registry Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-69338 BR2026-0000-010599 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as Lewis Lee
CVE-2026-69338 BR2026-0000-010600 unclaimed
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Credited as ʌ!ɔ⊥ojv