Microsoft's security release of 8 September 2026
Patch Tuesday, September 2026, page 9
As of , CISA lists two of the 965 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-85880, Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 801 | CVE-2026-69682Windows Host Guardian Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 802 | CVE-2026-69692Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 803 | CVE-2026-69693Windows Device Association Broker Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 804 | CVE-2026-69708Windows Web Platform Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 805 | CVE-2026-69711Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 806 | CVE-2026-69735Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 807 | CVE-2026-69779Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 808 | CVE-2026-69791Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 809 | CVE-2026-69814Windows Credential Providers Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 810 | CVE-2026-69816Windows Accounts Control Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 811 | CVE-2026-69817Windows Bluetooth Port Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 812 | CVE-2026-69818Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 813 | CVE-2026-69834Windows ALPC Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 814 | CVE-2026-69838Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 815 | CVE-2026-69859Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 816 | CVE-2026-69866Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 817 | CVE-2026-69889Windows Bluetooth Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 818 | CVE-2026-69891Windows Media Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 819 | CVE-2026-69896Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 820 | CVE-2026-69911Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 821 | CVE-2026-70283Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 822 | CVE-2026-70562Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 823 | CVE-2026-70565Windows AF_UNIX Socket Provider Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 824 | CVE-2026-70567Windows Display Enhancement Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 825 | CVE-2026-70568Windows Defender Firewall Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 826 | CVE-2026-70573Windows Biometric Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 827 | CVE-2026-70577Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 828 | CVE-2026-70578Windows Credential Guard Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 829 | CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 830 | CVE-2026-71332Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 831 | CVE-2026-71333Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 832 | CVE-2026-71340Windows File History Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 833 | CVE-2026-71342Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 834 | CVE-2026-71351Windows Routing and Remote Access Service (RRAS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 835 | CVE-2026-71353Windows Routing and Remote Access Service (RRAS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 836 | CVE-2026-72926Windows Internet Connection Sharing (ICS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 837 | CVE-2026-72930Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 838 | CVE-2026-72952Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 839 | CVE-2026-72963Windows Modern Execution Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 840 | CVE-2026-73003Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 841 | CVE-2026-73005Windows Authentication Methods Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 842 | CVE-2026-73022Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 843 | CVE-2026-77485SQL Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 844 | CVE-2026-77894Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 845 | CVE-2026-77897Microsoft Power Automate Desktop Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 846 | CVE-2026-77899Windows Security Center Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 847 | CVE-2026-77905Windows Management Instrumentation Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 848 | CVE-2026-78457Windows Security Health Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 849 | CVE-2026-78464Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.0 High | 0.00 |
| 850 | CVE-2026-80093Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 851 | CVE-2026-81389Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 852 | CVE-2026-83940Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 853 | CVE-2026-83999Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 854 | CVE-2026-85360Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 855 | CVE-2026-68833Windows NTFS Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 856 | CVE-2026-69490Windows USB Mass Storage Class Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 857 | CVE-2026-69566Windows NTFS Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 858 | CVE-2026-71329Windows NTFS Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 859 | CVE-2026-71348Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 860 | CVE-2026-71349Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 861 | CVE-2026-71350Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 862 | CVE-2026-72985Volume Shadow Copy Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 863 | CVE-2026-72999Windows USB Hub Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 864 | CVE-2026-77892Windows Boot Manager Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 865 | CVE-2026-78451Microsoft Windows SCSI Class System File Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 866 | CVE-2026-69350Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 867 | CVE-2026-69373Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 868 | CVE-2026-69449Windows BitLocker Remote Code Execution | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 869 | CVE-2026-71339Windows Installer Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 870 | CVE-2026-72927Winsock Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 871 | CVE-2026-72935Windows NTFS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 872 | CVE-2026-72948Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 873 | CVE-2026-69469Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.00 |
| 874 | CVE-2026-58649.NET Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 875 | CVE-2026-69267Windows Connected User Experiences and Telemetry Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 876 | CVE-2026-69642Skype for Business Spoofing | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 877 | CVE-2026-69878Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 878 | CVE-2026-70582Windows Management Instrumentation Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 879 | CVE-2026-71338Windows Failover Cluster Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 880 | CVE-2026-72947Windows File History Service Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 881 | CVE-2026-77887Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 882 | CVE-2026-77891Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 883 | CVE-2026-69382Microsoft Exchange Server Information Disclosure | None | Not on CISA's list | 5.9 Medium | 0.00 |
| 884 | CVE-2026-69559Microsoft Teams for Android Information Disclosure | None | Not on CISA's list | 5.8 Medium | 0.00 |
| 885 | CVE-2026-69832Win32k Information Disclosure | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 886 | CVE-2026-68830Windows Universal Plug and Play (UPnP) Device Host Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 887 | CVE-2026-68842Windows MIDI Service Module Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 888 | CVE-2026-68843Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 889 | CVE-2026-68851Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 890 | CVE-2026-68852Microsoft Account Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 891 | CVE-2026-68873Windows Program Compatibility Assistant Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 892 | CVE-2026-68881Microsoft Standard XPS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 893 | CVE-2026-68886Windows Network Connection Broker Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 894 | CVE-2026-68895Internet Storage Name Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 895 | CVE-2026-69286Windows USB Audio Class Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 896 | CVE-2026-69288Windows GDI+ Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 897 | CVE-2026-69294Microsoft COM for Windows Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 898 | CVE-2026-69303Push Message Routing Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 899 | CVE-2026-69308Microsoft Standard XPS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 900 | CVE-2026-69315Windows License Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |