Microsoft's security release of 8 September 2026
Patch Tuesday, September 2026, page 2
As of , CISA lists two of the 965 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-85880, Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2026-69629Microsoft Office Outlook Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 102 | CVE-2026-69632Microsoft Office Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 103 | CVE-2026-69649Raw Image Extension Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 104 | CVE-2026-69669Windows Kernel Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 105 | CVE-2026-69671Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 106 | CVE-2026-69676Windows Kerberos Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 107 | CVE-2026-69678Microsoft Office PowerPoint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 108 | CVE-2026-69686Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 109 | CVE-2026-69712Windows Key Distribution Center Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 110 | CVE-2026-69716Microsoft Office SharePoint Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 111 | CVE-2026-69722Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 112 | CVE-2026-69724Microsoft Office SharePoint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 113 | CVE-2026-69729Windows Credential Providers Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 114 | CVE-2026-69742Microsoft Office Publisher Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 115 | CVE-2026-69759Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 116 | CVE-2026-69764Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 117 | CVE-2026-69767Microsoft Office PowerPoint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 118 | CVE-2026-69772Windows Network File System Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 119 | CVE-2026-69778Microsoft Office Access Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 120 | CVE-2026-69797Microsoft Office PowerPoint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 121 | CVE-2026-69860Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 122 | CVE-2026-70203Windows Media Player Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 123 | CVE-2026-70351Microsoft WebP Image Extension Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 124 | CVE-2026-70586Windows Paint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 125 | CVE-2026-71328.NET and Visual Studio Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 126 | CVE-2026-71336Windows Work Folder Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 127 | CVE-2026-71352Windows Remote Access Connection Manager Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 128 | CVE-2026-72933Microsoft WDAC OLE DB provider for SQL Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 129 | CVE-2026-72940Windows Schannel Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 130 | CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 131 | CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 132 | CVE-2026-72960Windows Media Player Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 133 | CVE-2026-72972Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 134 | CVE-2026-72973Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 135 | CVE-2026-72986Graphic Fonts Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 136 | CVE-2026-73006DirectWrite Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 137 | CVE-2026-73012Windows Management Services Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 138 | CVE-2026-73013Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 139 | CVE-2026-73016DirectWrite Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 140 | CVE-2026-73018Graphic Fonts Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 141 | CVE-2026-73023Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 142 | CVE-2026-73028SQL Server Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 143 | CVE-2026-77480SQL Server Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 144 | CVE-2026-77481Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 145 | CVE-2026-77482Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 146 | CVE-2026-77483SQL Server Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 147 | CVE-2026-77486Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 148 | CVE-2026-77487SQL Server Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 149 | CVE-2026-77495Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 150 | CVE-2026-77504Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 151 | CVE-2026-77901Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 152 | CVE-2026-77906Visual Studio Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 153 | CVE-2026-77907Visual Studio Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 154 | CVE-2026-77908Microsoft Dynamics 365 On-Premises Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 155 | CVE-2026-78439Microsoft Office Graphics Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 156 | CVE-2026-78442Windows OLE DB Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 157 | CVE-2026-78456SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 158 | CVE-2026-78462Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 8.8 High | 0.01 |
| 159 | CVE-2026-78463Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 160 | CVE-2026-78504Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 161 | CVE-2026-78505Microsoft Office Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 162 | CVE-2026-78507Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 163 | CVE-2026-78511Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 164 | CVE-2026-78512Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 165 | CVE-2026-78514Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 166 | CVE-2026-78517Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 167 | CVE-2026-78518Microsoft Office Excel Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 168 | CVE-2026-78519Microsoft Office Outlook Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 169 | CVE-2026-78521Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 170 | CVE-2026-78524Microsoft Office Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 171 | CVE-2026-78525Microsoft Office Outlook Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 172 | CVE-2026-78526Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 173 | CVE-2026-80074Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 174 | CVE-2026-80077Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 175 | CVE-2026-80080Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 176 | CVE-2026-80081Microsoft Office PowerPoint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 177 | CVE-2026-80085Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 178 | CVE-2026-80096Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 179 | CVE-2026-81385Microsoft Office Publisher Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 180 | CVE-2026-81952Microsoft Word Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 181 | CVE-2026-81955Windows Graphics Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 182 | CVE-2026-83992Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 183 | CVE-2026-83998Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 184 | CVE-2026-85877Windows Print Spooler Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 185 | CVE-2026-67379Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.5 High | 0.01 |
| 186 | CVE-2026-81356Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 8.2 High | 0.01 |
| 187 | CVE-2026-81357Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 8.2 High | 0.01 |
| 188 | CVE-2026-81378Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 8.2 High | 0.01 |
| 189 | CVE-2026-81379Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 8.2 High | 0.01 |
| 190 | CVE-2026-47297Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 191 | CVE-2026-55007Microsoft Exchange Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 192 | CVE-2026-69325Microsoft JScript Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 193 | CVE-2026-69380Microsoft Exchange Server Elevation of Privilege | None | Not on CISA's list | 8.1 High | 0.01 |
| 194 | CVE-2026-69438Microsoft JScript Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 195 | CVE-2026-69510Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 196 | CVE-2026-69524Windows Active Directory Domain Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 197 | CVE-2026-69530Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 198 | CVE-2026-69546Windows Active Directory Domain Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 199 | CVE-2026-69620Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 200 | CVE-2026-69732Windows Link Layer Topology Discovery Protocol Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |