Exploited and new serious CVEs: September 2026
7,965 records · 32 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
Page 18 of 80
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2026-73011No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-73012No exploit | Windows Management Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.9% | Sep 8, 2026 |
31Monitor | CVE-2026-73014No exploit | Data Sharing Service Client Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-862 | High7.8 | — | 0.2% | Sep 8, 2026 |
31Monitor | CVE-2026-73015No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-73016No exploit | DirectWrite Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
30Monitor | CVE-2026-73017No exploit | Graphics Kernel Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 | High7.5 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-73018No exploit | Graphic Fonts Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-73020No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-73021No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-20 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-73022No exploit | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-73023No exploit | Windows Imaging Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-73024No exploit | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
39Monitor | CVE-2026-73025No exploit | Windows iSCSI Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1607 · CWE-1390 | Critical9.8 | — | 0.9% | Sep 8, 2026 |
31Monitor | CVE-2026-73026No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-73028No exploit | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-284 | High8.8 | — | 0.7% | Sep 8, 2026 |
32Monitor | CVE-2026-76191No exploit | Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · animate · CWE-94 | High8.2 | — | 0.2% | Sep 8, 2026 |
29Monitor | CVE-2026-76196No exploit | Photoshop Mobile | Session Fixation (CWE-384)adobe · photoshop mobile · CWE-384 | High7.4 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-77480No exploit | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-1220 | High8.8 | — | 0.7% | Sep 8, 2026 |
35Monitor | CVE-2026-77481No exploit | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 | High8.8 | — | 0.9% | Sep 8, 2026 |
35Monitor | CVE-2026-77482No exploit | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-77483No exploit | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-1390 | High8.8 | — | 0.7% | Sep 8, 2026 |
36Monitor | CVE-2026-77484No exploit | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2019 · CWE-502 | High8.8 | — | 1.6% | Sep 8, 2026 |
28Monitor | CVE-2026-77485No exploit | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-77486No exploit | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-77487No exploit | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-284 | High8.8 | — | 0.7% | Sep 8, 2026 |
31Monitor | CVE-2026-77489No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-476 | High7.8 | — | 0.3% | Sep 8, 2026 |
39Monitor | CVE-2026-77493No exploit | Windows Graphics Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-415 | Critical9.8 | — | 0.9% | Sep 8, 2026 |
30Monitor | CVE-2026-77494No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 | High7.5 | — | 1.1% | Sep 8, 2026 |
35Monitor | CVE-2026-77495No exploit | Windows Imaging Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
30Monitor | CVE-2026-77498No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
30Monitor | CVE-2026-77499No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 | High7.5 | — | 1.1% | Sep 8, 2026 |
31Monitor | CVE-2026-77500No exploit | Windows Device Association Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-763 | High7.8 | — | 0.3% | Sep 8, 2026 |
30Monitor | CVE-2026-77501No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
30Monitor | CVE-2026-77502No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
31Monitor | CVE-2026-77503No exploit | Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.8 | — | 0.3% | Sep 8, 2026 |
30Monitor | CVE-2026-77886No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
25Monitor | CVE-2026-77887No exploit | Windows DHCP Server Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | Medium6.4 | — | 0.2% | Sep 8, 2026 |
30Monitor | CVE-2026-77888No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 | High7.5 | — | 1.1% | Sep 8, 2026 |
30Monitor | CVE-2026-77889No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 | High7.5 | — | 1.1% | Sep 8, 2026 |
30Monitor | CVE-2026-77890No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 | High7.5 | — | 1.1% | Sep 8, 2026 |
30Monitor | CVE-2026-77893No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
28Monitor | CVE-2026-77894No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-362 | High7.0 | — | 0.2% | Sep 8, 2026 |
30Monitor | CVE-2026-77895No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
30Monitor | CVE-2026-77898No exploit | Microsoft Office Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High7.5 | — | 0.6% | Sep 8, 2026 |
28Monitor | CVE-2026-77899No exploit | Windows Security Center Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-77901No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-476 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-77904No exploit | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-77905No exploit | Windows Management Instrumentation Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-77906No exploit | Visual Studio Remote Code Execution Vulnerabilitymicrosoft · visual studio 2026 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-77907No exploit | Visual Studio Remote Code Execution Vulnerabilitymicrosoft · visual studio 2026 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78439No exploit | Microsoft Office Graphics Component Remote Code Execution Vulnerabilitymicrosoft · microsoft office 365 for mac · CWE-121 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78442No exploit | Windows OLE DB Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-78444No exploit | Microsoft Failover Cluster Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-822 | High8.1 | — | 0.7% | Sep 8, 2026 |
39Monitor | CVE-2026-78445No exploit | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerabilitymicrosoft · windows server 2012 · CWE-416 | Critical9.8 | — | 0.9% | Sep 8, 2026 |
31Monitor | CVE-2026-78447No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-78448No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
32Monitor | CVE-2026-78449No exploit | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High8.1 | — | 0.7% | Sep 8, 2026 |
32Monitor | CVE-2026-78450No exploit | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High8.1 | — | 0.7% | Sep 8, 2026 |
35Monitor | CVE-2026-78456No exploit | SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2022 · CWE-122 | High8.8 | — | 0.9% | Sep 8, 2026 |
29Monitor | CVE-2026-78461No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-22 | High7.4 | — | 1.0% | Sep 8, 2026 |
35Monitor | CVE-2026-78462No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-639 | High8.8 | — | 0.7% | Sep 8, 2026 |
35Monitor | CVE-2026-78463No exploit | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · remote desktop client · CWE-94 | High8.8 | — | 0.8% | Sep 8, 2026 |
28Monitor | CVE-2026-78464No exploit | Windows MIDI Service Module Elevation of Privileges Vulnerabilitymicrosoft · windows 11 24h2 · CWE-367 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-78504No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78505No exploit | Microsoft Office Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78507No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 | High8.8 | — | 0.8% | Sep 8, 2026 |
39Monitor | CVE-2026-78509No exploit | Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Critical9.8 | — | 0.9% | Sep 8, 2026 |
33Monitor | CVE-2026-78510No exploit | Microsoft Outlook and Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.4 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-78511No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78512No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78514No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78517No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78518No exploit | Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-20 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78519No exploit | Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-908 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78521No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
30Monitor | CVE-2026-78523No exploit | Windows DNS Server Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.5 | — | 0.9% | Sep 8, 2026 |
35Monitor | CVE-2026-78525No exploit | Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-78526No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-80074No exploit | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · remote desktop client · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-80075No exploit | Windows Work Folders Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-80077No exploit | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · remote desktop client · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-80080No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-415 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-80081No exploit | Microsoft Office PowerPoint Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-80083No exploit | Windows Hyper-V Remote Code Execution Vulnerabilitymicrosoft · windows 11 23h2 · CWE-822 | High8.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-80085No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
28Monitor | CVE-2026-80093No exploit | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High7.0 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-80096No exploit | Windows Remote Desktop Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High8.8 | — | 0.9% | Sep 8, 2026 |
34Monitor | CVE-2026-80097Proof of concept | Microsoft Authenticator Elevation of Privilege Vulnerabilitymicrosoft · authenticator · CWE-287 | High8.6 | — | 0.5% | Sep 8, 2026 |
28Monitor | CVE-2026-81349No exploit | Azure HDInsight Ambari Elevation of Privilege Vulnerabilitymicrosoft · azure hdinsight · CWE-78 | High7.2 | — | 1.0% | Sep 8, 2026 |
31Monitor | CVE-2026-81353No exploit | HEIF Image Extensions Remote Code Execution Vulnerabilitymicrosoft · heif image extension · CWE-122 | High7.8 | — | 0.4% | Sep 8, 2026 |
32Monitor | CVE-2026-81354No exploit | Windows Hello Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 | High8.2 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-81355No exploit | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.2% | Sep 8, 2026 |
32Monitor | CVE-2026-81356No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-444 | High8.2 | — | 0.5% | Sep 8, 2026 |
32Monitor | CVE-2026-81357No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-918 | High8.2 | — | 0.5% | Sep 8, 2026 |
38Monitor | CVE-2026-81376No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-693 | Critical9.6 | — | 0.9% | Sep 8, 2026 |
32Monitor | CVE-2026-81378No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-436 | High8.2 | — | 0.5% | Sep 8, 2026 |
32Monitor | CVE-2026-81379No exploit | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-636 | High8.2 | — | 0.5% | Sep 8, 2026 |
30Monitor | CVE-2026-81381No exploit | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerabilitymicrosoft · visual studio code · CWE-522 | High7.5 | — | 0.8% | Sep 8, 2026 |
29Monitor | CVE-2026-81383No exploit | Visual Studio Code Information Disclosure Vulnerabilitymicrosoft · visual studio code · CWE-706 | High7.4 | — | 0.9% | Sep 8, 2026 |
35Monitor | CVE-2026-81385No exploit | Microsoft Office Publisher Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-502 | High8.8 | — | 1.2% | Sep 8, 2026 |
- CVE-2026-7301131Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7301235Monitor
Windows Management Services Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7301431Monitor
Data Sharing Service Client Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7301531Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7301635Monitor
DirectWrite Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7301730Monitor
Graphics Kernel Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-7301835Monitor
Graphic Fonts Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302031Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302131Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302228Monitor
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-7302335Monitor
Windows Imaging Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302431Monitor
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302539Monitor
Windows iSCSI Security Feature Bypass Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302631Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7302835Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7619132Monitor
Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94)
HighCVSS 8.2No exploitEPSS 0%adobe · animateSep 8, 2026
- CVE-2026-7619629Monitor
Photoshop Mobile | Session Fixation (CWE-384)
HighCVSS 7.4No exploitEPSS 0%adobe · photoshop mobileSep 8, 2026
- CVE-2026-7748035Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748135Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748235Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748335Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748436Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%microsoft · sql server 2019Sep 8, 2026
- CVE-2026-7748528Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748635Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748735Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7748931Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7749339Monitor
Windows Graphics Component Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7749430Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7749535Monitor
Windows Imaging Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7749830Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7749930Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7750031Monitor
Windows Device Association Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7750130Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7750230Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7750331Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7788630Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7788725Monitor
Windows DHCP Server Remote Code Execution Vulnerability
MediumCVSS 6.4No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7788830Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7788930Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789030Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789330Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789428Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789530Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789830Monitor
Microsoft Office Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7789928Monitor
Windows Security Center Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-7790135Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7790431Monitor
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7790528Monitor
Windows Management Instrumentation Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7790635Monitor
Visual Studio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · visual studio 2026Sep 8, 2026
- CVE-2026-7790735Monitor
Visual Studio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · visual studio 2026Sep 8, 2026
- CVE-2026-7843935Monitor
Microsoft Office Graphics Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · microsoft office 365 for macSep 8, 2026
- CVE-2026-7844235Monitor
Windows OLE DB Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2017Sep 8, 2026
- CVE-2026-7844432Monitor
Microsoft Failover Cluster Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-7844539Monitor
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%microsoft · windows server 2012Sep 8, 2026
- CVE-2026-7844731Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7844831Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7844932Monitor
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7845032Monitor
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-7845635Monitor
SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · sql server 2022Sep 8, 2026
- CVE-2026-7846129Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 7.4No exploitEPSS 1%microsoft · visual studio codeSep 8, 2026
- CVE-2026-7846235Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-7846335Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · remote desktop clientSep 8, 2026
- CVE-2026-7846428Monitor
Windows MIDI Service Module Elevation of Privileges Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-7850435Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7850535Monitor
Microsoft Office Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7850735Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7850939Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851033Monitor
Microsoft Outlook and Word Remote Code Execution Vulnerability
HighCVSS 8.4No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851135Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851235Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851435Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851735Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851835Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7851935Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7852135Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7852330Monitor
Windows DNS Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7852535Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-7852635Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-8007435Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · remote desktop clientSep 8, 2026
- CVE-2026-8007531Monitor
Windows Work Folders Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 21h2Sep 8, 2026
- CVE-2026-8007735Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · remote desktop clientSep 8, 2026
- CVE-2026-8008035Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-8008135Monitor
Microsoft Office PowerPoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-8008335Monitor
Windows Hyper-V Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 11 23h2Sep 8, 2026
- CVE-2026-8008535Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-8009328Monitor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-8009635Monitor
Windows Remote Desktop Services Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-8009734Monitor
Microsoft Authenticator Elevation of Privilege Vulnerability
HighCVSS 8.6Proof of conceptEPSS 0%microsoft · authenticatorSep 8, 2026
- CVE-2026-8134928Monitor
Azure HDInsight Ambari Elevation of Privilege Vulnerability
HighCVSS 7.2No exploitEPSS 1%microsoft · azure hdinsightSep 8, 2026
- CVE-2026-8135331Monitor
HEIF Image Extensions Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · heif image extensionSep 8, 2026
- CVE-2026-8135432Monitor
Windows Hello Elevation of Privilege Vulnerability
HighCVSS 8.2No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-8135531Monitor
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-8135632Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 8.2No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8135732Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 8.2No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8137638Monitor
Visual Studio Code Security Feature Bypass Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8137832Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 8.2No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8137932Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 8.2No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8138130Monitor
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8138329Monitor
Visual Studio Code Information Disclosure Vulnerability
HighCVSS 7.4No exploitEPSS 0%microsoft · visual studio codeSep 8, 2026
- CVE-2026-8138535Monitor
Microsoft Office Publisher Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%microsoft · 365 appsSep 8, 2026