Microsoft's security release of 8 September 2026
Patch Tuesday, September 2026, page 6
As of , CISA lists two of the 965 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-85880, Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 501 | CVE-2026-56177Windows Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 502 | CVE-2026-56198Microsoft Trace Data Helper Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 503 | CVE-2026-58599HEVC Video Extensions Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 504 | CVE-2026-58600HEVC Video Extensions Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 505 | CVE-2026-58611Xbox Gaming Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 506 | CVE-2026-62697Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 507 | CVE-2026-62810Active Directory Certificate Services (AD CS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 508 | CVE-2026-68787Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 509 | CVE-2026-68832Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 510 | CVE-2026-68841Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 511 | CVE-2026-68844Windows Storage Spaces Controller Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 512 | CVE-2026-68845Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 513 | CVE-2026-68848Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 514 | CVE-2026-68850Microsoft Account Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 515 | CVE-2026-68875Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 516 | CVE-2026-68877Windows Storage Spaces Controller Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 517 | CVE-2026-68885Microsoft Standard XPS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 518 | CVE-2026-68888Microsoft Standard XPS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 519 | CVE-2026-68890Microsoft Standard XPS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 520 | CVE-2026-68892Microsoft Standard XPS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 521 | CVE-2026-68896Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 522 | CVE-2026-69265Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 523 | CVE-2026-69269Microsoft Standard XPS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 524 | CVE-2026-69270Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 525 | CVE-2026-69277Microsoft Local Security Authority (LSA) Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 526 | CVE-2026-69283Windows CD-ROM Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 527 | CVE-2026-69284Windows DCOM Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 528 | CVE-2026-69289Windows Setup Files Cleanup Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 529 | CVE-2026-69290Windows Storage Spaces Controller Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 530 | CVE-2026-69293Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 531 | CVE-2026-69295Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 532 | CVE-2026-69298Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 533 | CVE-2026-69307Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 534 | CVE-2026-69312Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 535 | CVE-2026-69323Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 536 | CVE-2026-69324Windows Performance Monitor Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 537 | CVE-2026-69328Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 538 | CVE-2026-69348Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 539 | CVE-2026-69352Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 540 | CVE-2026-69359Active Directory Domain Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 541 | CVE-2026-69368Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 542 | CVE-2026-69377Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 543 | CVE-2026-69389Windows Storage Management Provider Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 544 | CVE-2026-69391Windows Broker Infrastructure Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 545 | CVE-2026-69392Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 546 | CVE-2026-69407Volume Manager Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 547 | CVE-2026-69420Microsoft VOLSNAP.SYS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 548 | CVE-2026-69421Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 549 | CVE-2026-69424Windows Distributed File System (DFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 550 | CVE-2026-69426Windows VOLSNAP.SYS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 551 | CVE-2026-69432Volume Manager Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 552 | CVE-2026-69433Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 553 | CVE-2026-69436Windows State Repository Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 554 | CVE-2026-69444Microsoft Windows Speech Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 555 | CVE-2026-69445Windows Compressed Folder Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 556 | CVE-2026-69447Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 557 | CVE-2026-69450Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 558 | CVE-2026-69455Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 559 | CVE-2026-69456Microsoft Windows Speech Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 560 | CVE-2026-69459Windows Power Dependency Coordinator Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 561 | CVE-2026-69467Microsoft Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 562 | CVE-2026-69475Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 563 | CVE-2026-69476Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 564 | CVE-2026-69478Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 565 | CVE-2026-69480Windows Partition Management Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 566 | CVE-2026-69489Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 567 | CVE-2026-69508Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.8 High | 0.00 |
| 568 | CVE-2026-69509Role: Windows Fax Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 569 | CVE-2026-69513Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 570 | CVE-2026-69528Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 571 | CVE-2026-69532Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 572 | CVE-2026-69534Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 573 | CVE-2026-69535Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 574 | CVE-2026-69538Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 575 | CVE-2026-69541Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | None | Not on CISA's list | 7.8 High | 0.00 |
| 576 | CVE-2026-69542Windows Camera Frame Server Monitor Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 577 | CVE-2026-69544Windows SMB Client Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 578 | CVE-2026-69561Windows CD-ROM Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 579 | CVE-2026-69571Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 580 | CVE-2026-69576Graphic Fonts Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 581 | CVE-2026-69580Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 582 | CVE-2026-69582Windows Volume Manager Extension Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 583 | CVE-2026-69583Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 584 | CVE-2026-69584Windows USB Video Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 585 | CVE-2026-69585Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 586 | CVE-2026-69589Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 587 | CVE-2026-69592Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 588 | CVE-2026-69593Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 589 | CVE-2026-69594Microsoft Local Security Authority (LSA) Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 590 | CVE-2026-69604Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 591 | CVE-2026-69608Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 592 | CVE-2026-69612Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 593 | CVE-2026-69685Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 594 | CVE-2026-69687Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 595 | CVE-2026-69691Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 596 | CVE-2026-69707Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 597 | CVE-2026-69709Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 598 | CVE-2026-69720Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.8 High | 0.00 |
| 599 | CVE-2026-69725Windows Hello Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 600 | CVE-2026-69731HID Class Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |