Skip to content

Patch Tuesday September 2026

Microsoft’s September 2026 security update release: 998 CVEs, 2 exploited in the wild, 132 rated critical. Severity, CVSS and affected product families from the MSRC Security Update Guide.

← August 2026 October 2026 What's new in September 2026 MSRC release notes
998CVEs, Microsoft CNA
2Exploited in the wild
132Critical
0Publicly disclosed

Exploited in the wild

Patch these first
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability

Windows

Important7.8Elevation of Privilege
CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Windows

Important7.8Elevation of Privilege

Critical

Highest CVSS first
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-62874Azure Billing Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-69843Microsoft Fabric Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-69865Microsoft Container Registry Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-70200Azure Logic Apps Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-83944Azure Logic Apps Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-85889Azure AI Foundry Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-70352Azure AI Language Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-83711Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-69399Azure Arc Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-85878Azure Database for PostgreSQL Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-85885Microsoft 365 Copilot Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-83941Entra ID Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-66302Skype for Business Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-67631Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server

Critical9.8Remote Code Execution
CVE-2026-67643Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server

Critical9.8Remote Code Execution
CVE-2026-69579Windows Message Queuing Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-69730Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-69769Windows HTTP Print Provider Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-69829Windows Shell Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-69845Windows DHCP Server Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-70296Windows Imaging Component Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-72979Windows DHCP Server Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-72982Windows Netlogon Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-73010Microsoft Failover Cluster Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-77493Windows Graphics Component Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-78509Microsoft Office Outlook Remote Code Execution Vulnerability

Office

Critical9.8Remote Code Execution
CVE-2026-87701Azure Cosmos DB Elevation of Privilege Vulnerability

Azure

Critical9.6Elevation of Privilege
CVE-2026-65669Microsoft SQL Server Elevation of Privilege Vulnerability

SQL Server

Critical9.6Elevation of Privilege
CVE-2026-70009Azure Arc Elevation of Privilege Vulnerability

Azure

Critical9.3Elevation of Privilege
CVE-2026-80098Copilot Studio Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-62916Microsoft Entra ID Elevation of Privilege VulnerabilityCritical9.1Elevation of Privilege
CVE-2026-77903Microsoft Dataverse Elevation of Privilege VulnerabilityCritical9Elevation of Privilege
CVE-2026-67378Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server

Critical9Remote Code Execution
CVE-2026-67636Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server

Critical9Remote Code Execution
CVE-2026-69854Spring Cloud Azure Elevation of Privilege Vulnerability

Azure

Critical9Elevation of Privilege
CVE-2026-65772Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Dynamics 365

Critical8.8Remote Code Execution
CVE-2026-69285Microsoft Office Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-69499Windows Imaging Component Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69518Windows Remote Desktop Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69603Windows Hyper-V Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69632Microsoft Office Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-69649Raw Image Extension Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69676Windows Kerberos Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69678Microsoft Office PowerPoint Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-69712Windows Key Distribution Center Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-69740Windows Hello Elevation of Privilege Vulnerability

Windows

Critical8.8Elevation of Privilege
CVE-2026-69767Microsoft Office PowerPoint Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-69784Windows Hello Elevation of Privilege Vulnerability

Windows

Critical8.8Elevation of Privilege
CVE-2026-69797Microsoft Office PowerPoint Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-69860Windows Imaging Component Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-70203Windows Media Player Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-70351Microsoft WebP Image Extension Remote Code Execution VulnerabilityCritical8.8Remote Code Execution
CVE-2026-70586Windows Paint Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-72960Windows Media Player Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-72986Graphic Fonts Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-73006DirectWrite Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-73013Windows Imaging Component Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-73018Graphic Fonts Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-73023Windows Imaging Component Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-77495Windows Imaging Component Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-77504Microsoft Office Word Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-78439Microsoft Office Graphics Component Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-78505Microsoft Office Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-78519Microsoft Office Outlook Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-78525Microsoft Office Outlook Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-80083Windows Hyper-V Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-81352Web Media Extensions Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-81952Microsoft Word Remote Code Execution Vulnerability

Office

Critical8.8Remote Code Execution
CVE-2026-81955Windows Graphics Component Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-68791Azure Machine Learning Information Disclosure Vulnerability

Azure

Critical8.6Information Disclosure
CVE-2026-78501Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityCritical8.6Information Disclosure
CVE-2026-65818Power Automate Elevation of Privilege VulnerabilityCritical8.5Elevation of Privilege
CVE-2026-69857Azure Cosmos DB Spoofing Vulnerability

Azure

Critical8.5Spoofing
CVE-2026-70178Microsoft Fabric Elevation of Privilege VulnerabilityCritical8.5Elevation of Privilege
CVE-2026-78510Microsoft Outlook and Word Remote Code Execution Vulnerability

Office

Critical8.4Remote Code Execution
CVE-2026-83946Azure Portal Spoofing Vulnerability

Azure

Critical8.2Spoofing
CVE-2026-85921Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-69820Windows Hello Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-69846Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-69874Windows ALPC Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-69906Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-72958Windows Credential Guard Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-72961Windows Hyper-V Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-72962Windows USB Video Driver Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-81354Windows Hello Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-83939Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-69530Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-69813Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-69827Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-69858Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-72981IP Helper Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-72987Windows DNS Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-77505Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-78444Microsoft Failover Cluster Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-78450Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-58599HEVC Video Extensions Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-69725Windows Hello Elevation of Privilege Vulnerability

Windows

Critical7.8Elevation of Privilege
CVE-2026-69799Windows Hello Elevation of Privilege Vulnerability

Windows

Critical7.8Elevation of Privilege
CVE-2026-69864Windows Hello Elevation of Privilege Vulnerability

Windows

Critical7.8Elevation of Privilege
CVE-2026-72957Windows Deployment Services Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-81948Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-81949Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-81950Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-81951Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-81953Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-81959Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-83498Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Windows

Critical7.8Elevation of Privilege
CVE-2026-85887M365 Copilot Information Disclosure VulnerabilityCritical7.7Information Disclosure
CVE-2026-85917Azure AI Foundry Elevation of Privilege Vulnerability

Azure

Critical7.5Elevation of Privilege
CVE-2026-69710Windows Hello Elevation of Privilege Vulnerability

Windows

Critical7.5Elevation of Privilege
CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows

Critical7.5Remote Code Execution
CVE-2026-69890Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability

Windows

Critical7.5Elevation of Privilege
CVE-2026-72954Windows Deployment Services Remote Code Execution Vulnerability

Windows

Critical7.5Remote Code Execution
CVE-2026-73017Graphics Kernel Remote Code Execution Vulnerability

Windows

Critical7.5Remote Code Execution
CVE-2026-77898Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.5Remote Code Execution
CVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

Windows

Critical7.5Remote Code Execution
CVE-2026-62906Microsoft Discovery Studio Information Disclosure VulnerabilityCritical7.4Information Disclosure
CVE-2026-69501Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical7Elevation of Privilege
CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows

Critical7Remote Code Execution
CVE-2026-78520Microsoft Office Outlook Information Disclosure Vulnerability

Office

Critical6.5Remote Code Execution
CVE-2026-55946Microsoft Copilot Information Disclosure VulnerabilityCritical6.1Information Disclosure
CVE-2026-83501Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Windows

Critical5.5Information Disclosure
CVE-2026-72980Windows Hello Security Feature Bypass Vulnerability

Windows

Critical4.4Security Feature Bypass

By impact

Denial of Service55
Elevation of Privilege455
Information Disclosure177
Remote Code Execution261
Security Feature Bypass19
Spoofing18
Tampering13

By product family

.NET18
Azure19
Dynamics 3652
Edge5
Exchange Server9
Office106
Other30
SQL Server64
SharePoint16
Teams2
Windows727

Counts include CVEs where Microsoft is the assigning CNA. Third-party CVEs (for example Chromium in Edge) are excluded. Severity, CVSS and exploitation status are Microsoft's published values. See the full advisory list to search every CVE.

Type to search every update, post, CVE and roadmap item.

Try