cve.bz

Microsoft Patch Tuesday, September 2026: the CVEs

Filter

Microsoft Patch Tuesday September 2026: the CVEs Microsoft published on 8 September 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 9.8CVE-2026-66302EPSS 1.0%

    External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

  2. 9.6CVE-2026-81376EPSS 0.9%

    Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  3. 9.8CVE-2026-78509EPSS 1.0%

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  4. 9.8CVE-2026-78445EPSS 1.0%

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

  5. 9.8CVE-2026-77493EPSS 1.0%

    Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  6. 9.8CVE-2026-73025EPSS 0.9%

    Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

  7. 9.8CVE-2026-73010EPSS 1.0%

    Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

  8. 9.8CVE-2026-73009EPSS 1.0%

    Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

  9. 9.8CVE-2026-72983EPSS 1.0%

    Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

  10. 9.8CVE-2026-72982EPSS 1.0%

    Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

  11. 9.8CVE-2026-72979EPSS 1.0%

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  12. 9.8CVE-2026-72950EPSS 0.9%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  13. 9.8CVE-2026-70296EPSS 1.0%

    Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

  14. 9.8CVE-2026-69910EPSS 1.0%

    Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

  15. 9.8CVE-2026-69845EPSS 1.0%

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  16. 9.8CVE-2026-69829EPSS 1.0%

    Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

  17. 9.8CVE-2026-69824EPSS 1.0%

    Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

  18. 9.8CVE-2026-69819EPSS 1.0%

    Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

  19. 9.8CVE-2026-69769EPSS 1.0%

    Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

  20. 9.8CVE-2026-69768EPSS 1.0%

    Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

  21. 9.8CVE-2026-69730EPSS 1.0%

    Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

  22. 9.8CVE-2026-69715EPSS 1.0%

    Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

  23. 9.1CVE-2026-69641EPSS 0.9%

    Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  24. 9.8CVE-2026-69595EPSS 1.0%

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

  25. 9.8CVE-2026-69590EPSS 1.0%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  26. 9.8CVE-2026-69586EPSS 1.0%

    Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

  27. 9.8CVE-2026-69579EPSS 1.0%

    Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  28. 9.8CVE-2026-69525EPSS 1.0%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  29. 9.8CVE-2026-69496EPSS 1.0%

    Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

  30. 9.8CVE-2026-69493EPSS 1.0%

    Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

  31. 9.8CVE-2026-69491EPSS 1.0%

    Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

  32. 9.8CVE-2026-69463EPSS 1.0%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

  33. 9.8CVE-2026-69431EPSS 1.0%

    Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

  34. 9.8CVE-2026-69408EPSS 1.0%

    Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  35. 9.3CVE-2026-69356EPSS 0.8%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  36. 9.8CVE-2026-69276EPSS 1.0%

    Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.

  37. 9.8CVE-2026-68839EPSS 1.0%

    Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

  38. 9.8CVE-2026-67643EPSS 1.0%

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  39. 9.0CVE-2026-67636EPSS 0.7%

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

  40. 9.8CVE-2026-67631EPSS 1.0%

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  41. 9.0CVE-2026-67378EPSS 0.7%

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

  42. 9.6CVE-2026-65669EPSS 0.9%

    Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.