Microsoft's security release of 8 September 2026
Patch Tuesday, September 2026, page 3
As of , CISA lists two of the 965 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-85880, Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 201 | CVE-2026-69782Windows DNS Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 202 | CVE-2026-69786Windows Text Shaping Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 203 | CVE-2026-69813Windows DNS Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 204 | CVE-2026-69827Windows DNS Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 205 | CVE-2026-69858Windows DNS Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 206 | CVE-2026-69989Windows DNS Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 207 | CVE-2026-70342Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 8.1 High | 0.01 |
| 208 | CVE-2026-70563Windows Shell Spoofing | None | Not on CISA's list | 8.1 High | 0.01 |
| 209 | CVE-2026-72936Windows SMB Client Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 210 | CVE-2026-72981IP Helper Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 211 | CVE-2026-72987Windows DNS Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 212 | CVE-2026-77505Windows DNS Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 213 | CVE-2026-78444Microsoft Failover Cluster Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 214 | CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 215 | CVE-2026-78450Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 216 | CVE-2026-83997Windows Message Queuing Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 217 | CVE-2026-68827Windows GDI+ Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 218 | CVE-2026-68834Windows NTFS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 219 | CVE-2026-68838Windows NTFS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 220 | CVE-2026-68876Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 221 | CVE-2026-68878Windows Fast FAT Driver Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 222 | CVE-2026-68880Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 223 | CVE-2026-68894Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 224 | CVE-2026-69271Microsoft Standard XPS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 225 | CVE-2026-69301Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 226 | CVE-2026-69322Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 227 | CVE-2026-69332Windows NTFS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 228 | CVE-2026-69346Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 229 | CVE-2026-69365Microsoft Local Security Authority (LSA) Server Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 230 | CVE-2026-69371Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 231 | CVE-2026-69412Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.01 |
| 232 | CVE-2026-69418Volume Manager Driver Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 233 | CVE-2026-69423Windows USB Video Driver Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 234 | CVE-2026-69427Microsoft VOLSNAP.SYS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 235 | CVE-2026-69458Windows BitLocker Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 236 | CVE-2026-69462Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 237 | CVE-2026-69481Windows Enterprise App Management Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 238 | CVE-2026-69503Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 239 | CVE-2026-69505Windows NTFS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 240 | CVE-2026-69512Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 241 | CVE-2026-69619Windows exFAT File System Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 242 | CVE-2026-69623Windows HTTP Print Provider Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.01 |
| 243 | CVE-2026-69625Connected User Experiences and Telemetry Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 244 | CVE-2026-69643Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 245 | CVE-2026-69681Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | None | Not on CISA's list | 8.0 High | 0.01 |
| 246 | CVE-2026-69689Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 247 | CVE-2026-69714Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 248 | CVE-2026-69717Windows Group Policy Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 249 | CVE-2026-69727Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 250 | CVE-2026-69762Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 251 | CVE-2026-69773Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 252 | CVE-2026-69777Windows DHCP Client Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 253 | CVE-2026-69807PowerShell Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 254 | CVE-2026-69826Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 255 | CVE-2026-69847Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.01 |
| 256 | CVE-2026-69875Windows NTFS Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.01 |
| 257 | CVE-2026-69876Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.01 |
| 258 | CVE-2026-83948Microsoft Azure CLI Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.01 |
| 259 | CVE-2026-62804Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 260 | CVE-2026-77909Azure CycleCloud Information Disclosure | None | Not on CISA's list | 7.7 High | 0.01 |
| 261 | CVE-2026-57098Microsoft Remote Desktop App for Windows Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 262 | CVE-2026-57099ASP.NET Core Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 263 | CVE-2026-62813Windows Active Directory Domain Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 264 | CVE-2026-66304Skype for Business Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 265 | CVE-2026-66307Skype for Business and Lync Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 266 | CVE-2026-67376Microsoft SQL Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 267 | CVE-2026-68887Windows Message Queuing Queue Manager Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 268 | CVE-2026-69329BranchCache Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 269 | CVE-2026-69342Windows DHCP Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 270 | CVE-2026-69378Microsoft Exchange Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 271 | CVE-2026-69397Microsoft OpenSSH for Windows Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 272 | CVE-2026-69428Windows LDAP - Lightweight Directory Access Protocol Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 273 | CVE-2026-69429Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 274 | CVE-2026-69443Windows Device Health Attestation (DHA) Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 275 | CVE-2026-69514Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 276 | CVE-2026-69539Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 277 | CVE-2026-69587Windows Internet Key Exchange (IKE) Extension Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 278 | CVE-2026-69588Windows TCP/IP Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 279 | CVE-2026-69599Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 280 | CVE-2026-69607Windows Deployment Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 281 | CVE-2026-69631Windows DNS Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 282 | CVE-2026-69744Windows Kerberos Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 283 | CVE-2026-69760Windows Kerberos Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 284 | CVE-2026-69793Windows TCP/IP Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.01 |
| 285 | CVE-2026-69804Microsoft Office SharePoint Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 286 | CVE-2026-69809Windows Active Directory Domain Services Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 287 | CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 288 | CVE-2026-69881Windows Internet Key Exchange (IKE) Extension Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 289 | CVE-2026-70065Windows DHCP Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 290 | CVE-2026-70570Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 291 | CVE-2026-70579Windows Mobile Broadband Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 292 | CVE-2026-70587Windows Remote Desktop Protocol Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 293 | CVE-2026-71330Windows Services for NFS ONCRPC XDR Driver Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 294 | CVE-2026-72928Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 295 | CVE-2026-72932Windows Message Queuing Queue Manager Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 296 | CVE-2026-72943Windows Deployment Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 297 | CVE-2026-72949Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 298 | CVE-2026-72954Windows Deployment Services Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 299 | CVE-2026-72989Windows Failover Cluster Information Disclosure | None | Not on CISA's list | 7.5 High | 0.01 |
| 300 | CVE-2026-77494Windows DHCP Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |