CVEs published in September 2026
1,795 tracked CVEs from 27 vendors had their first vendor advisory published in September 2026: 291 critical, 1,082 high, 17 in CISA KEV. Newest first.
2,453 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-73009Critical
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73012High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73004Medium
Windows Autopilot Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73026High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73007High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73024High
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73005High
Windows Authentication Methods Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73008Medium
Windows Biometric Service Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73014High
Data Sharing Service Client Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73011High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73022High
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73003High
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73015High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73021High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73001High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73000High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73020High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73002High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72999Medium
Windows USB Hub Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73019Medium
Windows URL Moniker Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-73018High
Graphic Fonts Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72997High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72996High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72994High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72993High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72992High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72991High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72990High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72988High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72995High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72987High
Windows DNS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72989High
Windows Failover Cluster Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69465High
Microsoft Office SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72985Medium
Volume Shadow Copy Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70570High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70296Critical
Windows Imaging Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70203High
Windows Media Player Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69906High
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
Microsoft Office SharePoint Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69441High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69636Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69464High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
Microsoft Office SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69601High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69590Critical
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69607High
Windows Deployment Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69575High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69568Medium
Storage Spaces Controller Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69593High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69564High
Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69560High
Windows Work Folder Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69510High
Windows DHCP Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69499High
Windows Imaging Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69490Medium
Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69489High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69426High
Windows VOLSNAP.SYS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69417High
Microsoft Office SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69409Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69402High
Microsoft Office SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69397High
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69395Medium
Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69392High
Windows Shell Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69910Critical
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69352High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69311High
Windows Audio Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69298High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69323High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69334High
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69291High
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69290High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69309High
Windows Print Spooler Components Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69287High
Windows Remote Desktop Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-68896High
Microsoft Windows Search Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72967High
Windows Network Connection Broker Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72966Medium
Windows Remote Access Connection Manager Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72964Medium
Windows Internet Connection Sharing (ICS) Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72961High
Windows Hyper-V Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72960High
Windows Media Player Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72954High
Windows Deployment Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72959High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72950High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72957High
Windows Deployment Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72942Medium
Windows Spaceport.sys Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72941High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72953High
Windows USB Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72952High
Windows Spaceport.sys Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72932High
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72933High
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72936High
Windows SMB Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72931Medium
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72928High
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72927Medium
Winsock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-71352High
Windows Remote Access Connection Manager Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-71342High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-71349Medium
Windows Spaceport.sys Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70583High
Windows Core Messaging Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70577High
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70581High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70575Medium
Windows Schannel Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70572High
Windows Biometric Service Elevation of Privilege Vulnerability
MS Server · 1 advisory