Microsoft's security release of 8 September 2026
Patch Tuesday, September 2026, page 10
As of , CISA lists two of the 965 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-85880, Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 901 | CVE-2026-69318Windows Imaging Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 902 | CVE-2026-69321Windows Power Dependency Coordinator Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 903 | CVE-2026-69339Windows MIDI Service Module Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 904 | CVE-2026-69343Windows Overlay Filter Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 905 | CVE-2026-69344Windows Print Spooler Components Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 906 | CVE-2026-69345Microsoft Standard XPS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 907 | CVE-2026-69351Windows Universal Plug and Play (UPnP) Device Host Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 908 | CVE-2026-69353Windows Text Shaping Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 909 | CVE-2026-69367Microsoft Standard XPS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 910 | CVE-2026-69369Windows DNS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 911 | CVE-2026-69376Microsoft Standard XPS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 912 | CVE-2026-69390Windows Spaceport.sys Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 913 | CVE-2026-69403Windows SMB Server Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 914 | CVE-2026-69406Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 915 | CVE-2026-69453Microsoft Windows Search Component Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 916 | CVE-2026-69457Windows USB Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 917 | CVE-2026-69504Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 918 | CVE-2026-69527Windows USB Mass Storage Class Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 919 | CVE-2026-69531Microsoft Windows Speech Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 920 | CVE-2026-69554Microsoft Windows Search Component Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 921 | CVE-2026-69568Storage Spaces Controller Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 922 | CVE-2026-69609Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 923 | CVE-2026-69616Windows Remote Desktop Services Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 924 | CVE-2026-69618Windows SMB Client Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 925 | CVE-2026-69627Windows Remote Desktop Licensing Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 926 | CVE-2026-69672Windows DNS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 927 | CVE-2026-69674Windows Modern Device Management (MDM) Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 928 | CVE-2026-69684Windows Error Reporting Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 929 | CVE-2026-69741Windows Spaceport.sys Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 930 | CVE-2026-69770Windows Spaceport.sys Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 931 | CVE-2026-69794Windows Encrypting File System (EFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 932 | CVE-2026-69808Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 933 | CVE-2026-69862Windows Wireless Wide Area Network Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 934 | CVE-2026-70145Microsoft Windows Search Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 935 | CVE-2026-70290Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 936 | CVE-2026-71341Windows Partition Management Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 937 | CVE-2026-72937Windows Storage Port Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 938 | CVE-2026-72945Windows Task Scheduler Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 939 | CVE-2026-72964Windows Internet Connection Sharing (ICS) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 940 | CVE-2026-72966Windows Remote Access Connection Manager Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 941 | CVE-2026-73004Windows Autopilot Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 942 | CVE-2026-73008Windows Biometric Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 943 | CVE-2026-77488Microsoft SQL Server Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 944 | CVE-2026-77491Windows GDI Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 945 | CVE-2026-77492Windows Storage Port Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 946 | CVE-2026-78454Windows CD-ROM Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 947 | CVE-2026-83501Windows Virtualization-Based Security (VBS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 948 | CVE-2026-83991Windows Cloud Files Mini Filter Driver Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 949 | CVE-2026-68849Windows Bluetooth Port Driver Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 950 | CVE-2026-68891Microsoft Standard XPS Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 951 | CVE-2026-69316Windows Overlay Filter Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 952 | CVE-2026-69425Windows NTFS Tampering | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 953 | CVE-2026-69483Windows Image Acquisition Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 954 | CVE-2026-69771Windows Container Manager Service Security Feature Bypass | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 955 | CVE-2026-69792Windows Win32K Security Feature Bypass | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 956 | CVE-2026-69853Win32k Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 957 | CVE-2026-69895Windows Spaceport.sys Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 958 | CVE-2026-72931Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 959 | CVE-2026-69381Windows Storage Port Driver Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 960 | CVE-2026-69548Windows RNDIS Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 961 | CVE-2026-69690Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 962 | CVE-2026-78452Microsoft Windows SCSI Class System File Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 963 | CVE-2026-78508Windows CD-ROM Driver Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 964 | CVE-2026-69713Windows Secure Boot Security Feature Bypass | None | Not on CISA's list | 4.4 Medium | 0.00 |
| 965 | CVE-2026-69615Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 3.5 Low | 0.00 |