Microsoft's security release of 8 September 2026
Patch Tuesday, September 2026, page 7
As of , CISA lists two of the 965 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-85880, Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 601 | CVE-2026-69738Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 602 | CVE-2026-69758Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 603 | CVE-2026-69785Windows Smart Card Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 604 | CVE-2026-69787Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 605 | CVE-2026-69790Windows Credential Providers Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 606 | CVE-2026-69799Windows Hello Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 607 | CVE-2026-69801Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 608 | CVE-2026-69821Active Directory Certificate Services (AD CS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 609 | CVE-2026-69822Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 610 | CVE-2026-69841Windows Encrypting File System (EFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 611 | CVE-2026-69844Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 612 | CVE-2026-69864Windows Hello Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 613 | CVE-2026-69900Kernel Streaming WOW Thunk Service Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 614 | CVE-2026-69907Windows Enterprise App Management Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 615 | CVE-2026-69921Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 616 | CVE-2026-70289Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 617 | CVE-2026-70334Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 618 | CVE-2026-70564Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 619 | CVE-2026-70569Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 620 | CVE-2026-70572Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 621 | CVE-2026-70574Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | None | Not on CISA's list | 7.8 High | 0.00 |
| 622 | CVE-2026-70581Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 623 | CVE-2026-70583Windows Core Messaging Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 624 | CVE-2026-70584Windows Core Messaging Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 625 | CVE-2026-71334Windows NFS Portmapper Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 626 | CVE-2026-71337Windows Storage Management Provider Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 627 | CVE-2026-71343Windows Remote Access Connection Manager Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 628 | CVE-2026-71345Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 629 | CVE-2026-72929Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 630 | CVE-2026-72941Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 631 | CVE-2026-72944Role: Windows Fax Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 632 | CVE-2026-72946Microsoft Storage Port Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 633 | CVE-2026-72953Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 634 | CVE-2026-72957Windows Deployment Services Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 635 | CVE-2026-72965Windows WebClient Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 636 | CVE-2026-72967Windows Network Connection Broker Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 637 | CVE-2026-72988Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 638 | CVE-2026-72990Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 639 | CVE-2026-72991Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 640 | CVE-2026-72992Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 641 | CVE-2026-72993Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 642 | CVE-2026-72994Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 643 | CVE-2026-72995Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 644 | CVE-2026-72996Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 645 | CVE-2026-72997Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 646 | CVE-2026-73000Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 647 | CVE-2026-73001Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 648 | CVE-2026-73002Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 649 | CVE-2026-73007Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 650 | CVE-2026-73011Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 651 | CVE-2026-73014Data Sharing Service Client Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 652 | CVE-2026-73015Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 653 | CVE-2026-73020Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 654 | CVE-2026-73021Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 655 | CVE-2026-73024Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 656 | CVE-2026-73026Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 657 | CVE-2026-77489Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 658 | CVE-2026-77500Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 659 | CVE-2026-77904Windows Volume Manager Extension Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 660 | CVE-2026-78447Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 661 | CVE-2026-78448Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 662 | CVE-2026-80075Windows Work Folders Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 663 | CVE-2026-81353HEIF Image Extensions Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 664 | CVE-2026-81386Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 665 | CVE-2026-81388Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 666 | CVE-2026-81396Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 667 | CVE-2026-81397Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 668 | CVE-2026-81398Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 669 | CVE-2026-81947Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 670 | CVE-2026-81948Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 671 | CVE-2026-81949Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 672 | CVE-2026-81950Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 673 | CVE-2026-81951Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 674 | CVE-2026-81953Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 675 | CVE-2026-81954Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 676 | CVE-2026-81956Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 677 | CVE-2026-81957Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 678 | CVE-2026-81959Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 679 | CVE-2026-81960Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 680 | CVE-2026-83498Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 681 | CVE-2026-83942Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 682 | CVE-2026-83952Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 683 | CVE-2026-83954Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 684 | CVE-2026-83955Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 685 | CVE-2026-83967Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 686 | CVE-2026-83968Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 687 | CVE-2026-83969Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 688 | CVE-2026-83970Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 689 | CVE-2026-83971Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 690 | CVE-2026-83972Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 691 | CVE-2026-83973Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 692 | CVE-2026-83974Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 693 | CVE-2026-83975Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 694 | CVE-2026-83976Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 695 | CVE-2026-83977Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 696 | CVE-2026-83978Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 697 | CVE-2026-83979Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 698 | CVE-2026-83980Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 699 | CVE-2026-83981Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 700 | CVE-2026-83982Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |