Microsoft Server security updates, September 2026 (Patch Tuesday 2026-09-08)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in September 2026, including the Patch Tuesday release on 2026-09-08 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 450
Critical: 35
High: 311
In CISA KEV: 2

Microsoft server CVEs, September 2026

Sep 8, 2026
High [CVE-2026-69473] Windows Kernel Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69470] Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69472] Windows Devices Human Interface Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69513] Windows Error Reporting Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-69448] Windows Bluetooth Service Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69458] Windows BitLocker Elevation of Privilege Vulnerability
High8.0
Sep 8, 2026
High [CVE-2026-69429] Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
High7.5
Sep 8, 2026
High [CVE-2026-69423] Windows USB Video Driver Elevation of Privilege Vulnerability
High8.0
Sep 8, 2026
High [CVE-2026-69436] Windows State Repository Service Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-69401] Audio Video Control Transport Protocol Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69391] Windows Broker Infrastructure Service Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-69379] Windows NTFS Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69371] Windows Overlay Filter Elevation of Privilege Vulnerability
High8.0
Sep 8, 2026
High [CVE-2026-69389] Windows Storage Management Provider Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-69359] Active Directory Domain Services Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-69347] Windows Fast FAT Driver Remote Code Execution Vulnerability
High7.4
Sep 8, 2026
High [CVE-2026-69338] Remote Desktop Gateway Service Elevation of Privilege Vulnerability
High7.1
Sep 8, 2026
High [CVE-2026-69337] Windows Registry Elevation of Privilege Vulnerability
High7.1
Sep 8, 2026
High [CVE-2026-69310] Windows DNS Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-69325] Microsoft JScript Remote Code Execution Vulnerability
High8.1
Sep 8, 2026
High [CVE-2026-69281] Windows License Manager Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-68893] Remote Desktop Licensing Service Elevation of Privilege Vulnerability
High7.1
Sep 8, 2026
High [CVE-2026-68884] Windows Kernel Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-68878] Windows Fast FAT Driver Elevation of Privilege Vulnerability
High8.0
Sep 8, 2026
High [CVE-2026-68875] Windows NTFS Remote Code Execution Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-68847] Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
High7.0
Sep 8, 2026
High [CVE-2026-55007] Microsoft Exchange Server Remote Code Execution Vulnerability
High8.1
Sep 8, 2026
High [CVE-2026-57098] Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
High7.5
Sep 8, 2026
High [CVE-2026-62895] Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
High8.8
Sep 8, 2026
High [CVE-2026-62744] Microsoft Windows Media Foundation Remote Code Execution Vulnerability
High8.8
Sep 8, 2026
High [CVE-2026-58599] HEVC Video Extensions Remote Code Execution Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-58600] HEVC Video Extensions Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
High [CVE-2026-80075] Windows Work Folders Elevation of Privilege Vulnerability
High7.8
Sep 8, 2026
Medium [CVE-2026-83501] Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-70145] Microsoft Windows Search Component Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69381] Windows Storage Port Driver Information Disclosure Vulnerability
Medium4.6
Sep 8, 2026
Medium [CVE-2026-67645] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-67624] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-78516] Windows Storage Information Disclosure Vulnerability
Medium4.3
Sep 8, 2026
Medium [CVE-2026-67369] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-78454] Windows CD-ROM Driver Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-78452] Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Medium4.6
Sep 8, 2026
Medium [CVE-2026-78455] Xbox Information Disclosure Vulnerability
Medium4.3
Sep 8, 2026
Medium [CVE-2026-78453] Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-78451] Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Medium6.8
Sep 8, 2026
Medium [CVE-2026-78441] Windows OLE DB Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-69562] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-77488] Microsoft SQL Server Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-73004] Windows Autopilot Tampering Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-73008] Windows Biometric Service Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-72999] Windows USB Hub Driver Elevation of Privilege Vulnerability
Medium6.8
Sep 8, 2026
Medium [CVE-2026-73019] Windows URL Moniker Security Feature Bypass Vulnerability
Medium4.3
Sep 8, 2026
Medium [CVE-2026-72985] Volume Shadow Copy Elevation of Privilege Vulnerability
Medium6.8
Sep 8, 2026
Medium [CVE-2026-69636] Microsoft Office SharePoint Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-69568] Storage Spaces Controller Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69490] Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
Medium6.8
Sep 8, 2026
Medium [CVE-2026-69409] Microsoft Office SharePoint Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-69395] Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-72966] Windows Remote Access Connection Manager Tampering Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-72964] Windows Internet Connection Sharing (ICS) Tampering Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-72942] Windows Spaceport.sys Information Disclosure Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-72931] Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Medium4.7
Sep 8, 2026
Medium [CVE-2026-72927] Winsock Elevation of Privilege Vulnerability
Medium6.7
Sep 8, 2026
Medium [CVE-2026-70575] Windows Schannel Denial of Service Vulnerability
Medium5.3
Sep 8, 2026
Medium [CVE-2026-69781] Windows DHCP Client Denial of Service Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-69853] Win32k Information Disclosure Vulnerability
Medium4.7
Sep 8, 2026
Medium [CVE-2026-69792] Windows Win32K Security Feature Bypass Vulnerability
Medium4.7
Sep 8, 2026
Medium [CVE-2026-69672] Windows DNS Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69895] Windows Spaceport.sys Information Disclosure Vulnerability
Medium4.7
Sep 8, 2026
Medium [CVE-2026-69713] Windows Secure Boot Security Feature Bypass Vulnerability
Medium4.4
Sep 8, 2026
Medium [CVE-2026-69794] Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69674] Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69803] Windows DHCP Server Information Disclosure Vulnerability
Medium5.9
Sep 8, 2026
Medium [CVE-2026-69616] Windows Remote Desktop Services Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69624] Active Directory Certificate Services (AD CS) Tampering Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-69618] Windows SMB Client Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69569] Windows Print Spooler Components Denial of Service Vulnerability
Medium5.7
Sep 8, 2026
Medium [CVE-2026-69591] Windows NTFS Information Disclosure Vulnerability
Medium5.7
Sep 8, 2026
Medium [CVE-2026-69483] Windows Image Acquisition Information Disclosure Vulnerability
Medium4.7
Sep 8, 2026
Medium [CVE-2026-69474] Windows Overlay Filter Information Disclosure Vulnerability
Medium4.8
Sep 8, 2026
Medium [CVE-2026-69453] Microsoft Windows Search Component Tampering Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69449] Windows BitLocker Remote Code Execution Vulnerability
Medium6.7
Sep 8, 2026
Medium [CVE-2026-69393] Windows Spaceport.sys Information Disclosure Vulnerability
Medium5.7
Sep 8, 2026
Medium [CVE-2026-69374] Windows SMB Server Denial of Service Vulnerability
Medium6.5
Sep 8, 2026
Medium [CVE-2026-69403] Windows SMB Server Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69372] Windows Network File System Denial of Service Vulnerability
Medium5.7
Sep 8, 2026
Medium [CVE-2026-69376] Microsoft Standard XPS Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69353] Windows Text Shaping Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69344] Windows Print Spooler Components Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69351] Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69316] Windows Overlay Filter Information Disclosure Vulnerability
Medium4.7
Sep 8, 2026
Medium [CVE-2026-69317] Windows Remote Desktop Client Information Disclosure Vulnerability
Medium5.7
Sep 8, 2026
Medium [CVE-2026-69318] Windows Imaging Component Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69315] Windows License Manager Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69303] Push Message Routing Service Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69321] Windows Power Dependency Coordinator Tampering Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69294] Microsoft COM for Windows Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69286] Windows USB Audio Class Driver Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-68895] Internet Storage Name Service Information Disclosure Vulnerability
Medium5.5
Sep 8, 2026
Medium [CVE-2026-69288] Windows GDI+ Information Disclosure Vulnerability
Medium5.5

Page 4 of 5 · 100 of 450

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.