Exploited and new serious CVEs: September 2026
7,965 records · 32 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
Page 21 of 80
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2026-81990No exploit | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-81992No exploit | Acrobat Reader | Heap-based Buffer Overflow (CWE-122)adobe · acrobat · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-81996No exploit | Acrobat Reader | Incorrect Authorization (CWE-863)adobe · acrobat · CWE-863 | High8.8 | — | 0.2% | Sep 8, 2026 |
36Monitor | CVE-2026-85982No exploit | Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connectorauth0 · auth0 ad/ldap connector · CWE-79 | Critical9.0 | — | 0.4% | Sep 8, 2026 |
31Monitor | CVE-2026-85983No exploit | Local Privilege Escalation in Auth0 AD/LDAP Connectorauth0 · auth0 ad/ldap connector · CWE-94 | High7.8 | — | 0.2% | Sep 8, 2026 |
33Monitor | CVE-2026-86819No exploit | Waves Central local privilege escalation via Improper XPC Client Authentication in macOSwaves audio ltd. · waves central · CWE-862 | High8.4 | — | 0.1% | Sep 8, 2026 |
32Monitor | CVE-2026-47297No exploit | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2019 · CWE-502 | High8.1 | — | 1.1% | Sep 8, 2026 |
32Monitor | CVE-2026-55007No exploit | Microsoft Exchange Server Remote Code Execution Vulnerabilitymicrosoft · exchange server · CWE-415 | High8.1 | — | 0.7% | Sep 8, 2026 |
31Monitor | CVE-2026-56198No exploit | Microsoft Trace Data Helper Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-125 | High7.8 | — | 0.3% | Sep 8, 2026 |
30Monitor | CVE-2026-57099No exploit | ASP.NET Core Denial of Service Vulnerabilitymicrosoft · asp.net core odata · CWE-770 | High7.5 | — | 1.1% | Sep 8, 2026 |
31Monitor | CVE-2026-58599No exploit | HEVC Video Extensions Remote Code Execution Vulnerabilitymicrosoft · hevc video extensions · CWE-122 | High7.8 | — | 0.4% | Sep 8, 2026 |
31Monitor | CVE-2026-58600No exploit | HEVC Video Extensions Elevation of Privilege Vulnerabilitymicrosoft · hevc video extensions · CWE-122 | High7.8 | — | 0.4% | Sep 8, 2026 |
35Monitor | CVE-2026-62744No exploit | Microsoft Windows Media Foundation Remote Code Execution Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-62804No exploit | Microsoft Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-73 | High7.8 | — | 0.6% | Sep 8, 2026 |
31Monitor | CVE-2026-62810No exploit | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
30Monitor | CVE-2026-62813No exploit | Windows Active Directory Domain Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.5 | — | 0.6% | Sep 8, 2026 |
35Monitor | CVE-2026-62895No exploit | Azure Arc SQL Server Extension Elevation of Privilege Vulnerabilitymicrosoft · azure arc sql server extension · CWE-89 | High8.8 | — | 0.7% | Sep 8, 2026 |
38Monitor | CVE-2026-65669No exploit | Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server management studio · CWE-74 | Critical9.6 | — | 0.8% | Sep 8, 2026 |
36Monitor | CVE-2026-65772No exploit | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerabilitymicrosoft · dynamics 365 · CWE-502 | High8.8 | — | 1.6% | Sep 8, 2026 |
35Monitor | CVE-2026-68828No exploit | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-68850No exploit | Microsoft Account Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
32Monitor | CVE-2026-68880No exploit | Windows Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.0 | — | 0.7% | Sep 8, 2026 |
31Monitor | CVE-2026-68885No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-68888No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-68889No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.1 | — | 0.5% | Sep 8, 2026 |
31Monitor | CVE-2026-68890No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-68892No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-68897No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.0 | — | 0.2% | Sep 8, 2026 |
31Monitor | CVE-2026-69269No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-191 | High7.8 | — | 0.3% | Sep 8, 2026 |
32Monitor | CVE-2026-69271No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.0 | — | 0.7% | Sep 8, 2026 |
28Monitor | CVE-2026-69272No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.1 | — | 0.5% | Sep 8, 2026 |
28Monitor | CVE-2026-69275No exploit | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
39Monitor | CVE-2026-69276No exploit | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Critical9.8 | — | 0.9% | Sep 8, 2026 |
31Monitor | CVE-2026-69277No exploit | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-69292No exploit | Remote Desktop Gateway Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-415 | High7.0 | — | 0.2% | Sep 8, 2026 |
28Monitor | CVE-2026-69313No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.1 | — | 0.5% | Sep 8, 2026 |
32Monitor | CVE-2026-69325No exploit | Microsoft JScript Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.1 | — | 0.7% | Sep 8, 2026 |
30Monitor | CVE-2026-69329No exploit | BranchCache Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 | High7.5 | — | 1.1% | Sep 8, 2026 |
28Monitor | CVE-2026-69336No exploit | Microsoft Standard XPS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.1 | — | 0.5% | Sep 8, 2026 |
28Monitor | CVE-2026-69338No exploit | Remote Desktop Gateway Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.1 | — | 0.5% | Sep 8, 2026 |
35Monitor | CVE-2026-69355No exploit | Microsoft Exchange Server Remote Code Execution Vulnerabilitymicrosoft · exchange server · CWE-73 | High8.8 | — | 0.9% | Sep 8, 2026 |
37Monitor | CVE-2026-69356No exploit | Microsoft Exchange Server Spoofing Vulnerabilitymicrosoft · exchange server · CWE-79 | Critical9.3 | — | 0.7% | Sep 8, 2026 |
28Monitor | CVE-2026-69358No exploit | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-908 | High7.1 | — | 0.5% | Sep 8, 2026 |
31Monitor | CVE-2026-69359No exploit | Active Directory Domain Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-69360No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-69365No exploit | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-125 | High8.0 | — | 0.7% | Sep 8, 2026 |
30Monitor | CVE-2026-69378No exploit | Microsoft Exchange Server Denial of Service Vulnerabilitymicrosoft · exchange server · CWE-674 | High7.5 | — | 1.1% | Sep 8, 2026 |
32Monitor | CVE-2026-69380No exploit | Microsoft Exchange Server Elevation of Privilege Vulnerabilitymicrosoft · exchange server · CWE-862 | High8.1 | — | 0.6% | Sep 8, 2026 |
28Monitor | CVE-2026-69384No exploit | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-476 | High7.1 | — | 0.4% | Sep 8, 2026 |
28Monitor | CVE-2026-69401No exploit | Audio Video Control Transport Protocol Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
31Monitor | CVE-2026-69407No exploit | Volume Manager Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-190 | High7.8 | — | 0.3% | Sep 8, 2026 |
32Monitor | CVE-2026-69418No exploit | Volume Manager Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.0 | — | 0.7% | Sep 8, 2026 |
39Monitor | CVE-2026-69431No exploit | Telnet Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Critical9.8 | — | 0.9% | Sep 8, 2026 |
31Monitor | CVE-2026-69432No exploit | Volume Manager Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-69436No exploit | Windows State Repository Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
32Monitor | CVE-2026-69438No exploit | Microsoft JScript Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-681 | High8.1 | — | 0.7% | Sep 8, 2026 |
35Monitor | CVE-2026-69439No exploit | .NET and Visual Studio Elevation of Privilege Vulnerabilitymicrosoft · .net · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-69459No exploit | Windows Power Dependency Coordinator Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-69460No exploit | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High7.1 | — | 0.5% | Sep 8, 2026 |
32Monitor | CVE-2026-69462No exploit | Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.0 | — | 0.7% | Sep 8, 2026 |
28Monitor | CVE-2026-69468No exploit | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.0 | — | 0.2% | Sep 8, 2026 |
28Monitor | CVE-2026-69470No exploit | Connected User Experiences and Telemetry Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-69485No exploit | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-908 | High8.8 | — | 0.9% | Sep 8, 2026 |
34Monitor | CVE-2026-86075No exploit | n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpointn8n · n8n · CWE-770 | High8.7 | — | 0.6% | Sep 8, 2026 |
34Monitor | CVE-2026-86076Proof of concept | n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Executionn8n · n8n · CWE-94 | High8.7 | — | 0.6% | Sep 8, 2026 |
28Monitor | CVE-2026-69498No exploit | Windows Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-69499No exploit | Windows Imaging Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-190 | High8.8 | — | 0.8% | Sep 8, 2026 |
28Monitor | CVE-2026-86081No exploit | n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Pathn8n-io · n8n · CWE-1333 | High7.1 | — | 0.5% | Sep 8, 2026 |
28Monitor | CVE-2026-86082No exploit | n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Noden8n · n8n · CWE-918 | High7.1 | — | 0.4% | Sep 8, 2026 |
30Monitor | CVE-2026-86083No exploit | n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Executionn8n · n8n · CWE-94 | High7.7 | — | 0.6% | Sep 8, 2026 |
28Monitor | CVE-2026-69516No exploit | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-69522No exploit | .NET and Visual Studio Remote Code Execution Vulnerabilitymicrosoft · .net 10.0 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-69524No exploit | Windows Active Directory Domain Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High8.1 | — | 0.7% | Sep 8, 2026 |
32Monitor | CVE-2026-69530No exploit | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 | High8.1 | — | 0.7% | Sep 8, 2026 |
31Monitor | CVE-2026-69541No exploit | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
32Monitor | CVE-2026-69546No exploit | Windows Active Directory Domain Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High8.1 | — | 0.7% | Sep 8, 2026 |
28Monitor | CVE-2026-69549No exploit | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernabilitymicrosoft · windows 10 1809 · CWE-125 | High7.0 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-69556No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-69576No exploit | Graphic Fonts Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.8 | — | 0.3% | Sep 8, 2026 |
31Monitor | CVE-2026-69594No exploit | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
28Monitor | CVE-2026-69605No exploit | Microsoft Install Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
28Monitor | CVE-2026-69610No exploit | Windows Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-126 | High7.0 | — | 0.2% | Sep 8, 2026 |
28Monitor | CVE-2026-69611No exploit | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernabilitymicrosoft · windows 10 1607 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-69767No exploit | Microsoft Office PowerPoint Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 | High8.8 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-69805No exploit | .NET Elevation of Privilege Vulnerabilitymicrosoft · microsoft.diagnostics.runtime · CWE-73 | High8.1 | — | 0.4% | Sep 8, 2026 |
28Monitor | CVE-2026-69806No exploit | .NET Elevation of Privilege Vulnerabilitymicrosoft · .net · CWE-94 | High7.0 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-69807No exploit | PowerShell Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-22 | High8.0 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-69854No exploit | Spring Cloud Azure Elevation of Privilege Vulnerabilitymicrosoft · spring cloud · CWE-287 | High8.1 | — | 0.6% | Sep 8, 2026 |
35Monitor | CVE-2026-70351No exploit | Microsoft WebP Image Extension Remote Code Execution Vulnerabilitymicrosoft · webp image extension · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-70583No exploit | Windows Core Messaging Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High7.8 | — | 0.3% | Sep 8, 2026 |
35Monitor | CVE-2026-71328No exploit | .NET and Visual Studio Remote Code Execution Vulnerabilitymicrosoft · visual studio 2022 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
31Monitor | CVE-2026-72923No exploit | Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionmicrosoft · openapi.yamlreader · CWE-400 | High7.5 | — | 1.8% | Sep 8, 2026 |
35Monitor | CVE-2026-73013No exploit | Windows Imaging Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | High8.8 | — | 0.8% | Sep 8, 2026 |
35Monitor | CVE-2026-77504No exploit | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-415 | High8.8 | — | 0.8% | Sep 8, 2026 |
32Monitor | CVE-2026-77505No exploit | Windows DNS Server Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High8.1 | — | 0.7% | Sep 8, 2026 |
30Monitor | CVE-2026-77896No exploit | Windows Remote Desktop Client Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-190 | High7.5 | — | 0.7% | Sep 8, 2026 |
28Monitor | CVE-2026-77897No exploit | Microsoft Power Automate Desktop Elevation of Privilege Vulnerabilitymicrosoft · power automate for desktop · CWE-23 | High7.0 | — | 0.2% | Sep 8, 2026 |
35Monitor | CVE-2026-77908No exploit | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerabilitymicrosoft · dynamics 365 · CWE-94 | High8.8 | — | 0.9% | Sep 8, 2026 |
30Monitor | CVE-2026-78446No exploit | Windows Distributed File System (DFS) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | High7.5 | — | 0.4% | Sep 8, 2026 |
28Monitor | CVE-2026-78457No exploit | Windows Security Health Service Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-416 | High7.0 | — | 0.2% | Sep 8, 2026 |
- CVE-2026-8199031Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%adobe · acrobatSep 8, 2026
- CVE-2026-8199231Monitor
Acrobat Reader | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%adobe · acrobatSep 8, 2026
- CVE-2026-8199635Monitor
Acrobat Reader | Incorrect Authorization (CWE-863)
HighCVSS 8.8No exploitEPSS 0%adobe · acrobatSep 8, 2026
- CVE-2026-8598236Monitor
Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector
CriticalCVSS 9.0No exploitEPSS 0%auth0 · auth0 ad/ldap connectorSep 8, 2026
- CVE-2026-8598331Monitor
Local Privilege Escalation in Auth0 AD/LDAP Connector
HighCVSS 7.8No exploitEPSS 0%auth0 · auth0 ad/ldap connectorSep 8, 2026
- CVE-2026-8681933Monitor
Waves Central local privilege escalation via Improper XPC Client Authentication in macOS
HighCVSS 8.4No exploitEPSS 0%waves audio ltd. · waves centralSep 8, 2026
- CVE-2026-4729732Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%microsoft · sql server 2019Sep 8, 2026
- CVE-2026-5500732Monitor
Microsoft Exchange Server Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · exchange serverSep 8, 2026
- CVE-2026-5619831Monitor
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-5709930Monitor
ASP.NET Core Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · asp.net core odataSep 8, 2026
- CVE-2026-5859931Monitor
HEVC Video Extensions Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · hevc video extensionsSep 8, 2026
- CVE-2026-5860031Monitor
HEVC Video Extensions Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · hevc video extensionsSep 8, 2026
- CVE-2026-6274435Monitor
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-6280431Monitor
Microsoft Word Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-6281031Monitor
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6281330Monitor
Windows Active Directory Domain Services Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6289535Monitor
Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · azure arc sql server extensionSep 8, 2026
- CVE-2026-6566938Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%microsoft · sql server management studioSep 8, 2026
- CVE-2026-6577236Monitor
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%microsoft · dynamics 365Sep 8, 2026
- CVE-2026-6882835Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6885031Monitor
Microsoft Account Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-6888032Monitor
Windows Win32k Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6888531Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6888831Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6888928Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6889031Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6889231Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6889728Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6926931Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6927132Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6927228Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6927528Monitor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6927639Monitor
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6927731Monitor
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6929228Monitor
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6931328Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6932532Monitor
Microsoft JScript Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6932930Monitor
BranchCache Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6933628Monitor
Microsoft Standard XPS Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6933828Monitor
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6935535Monitor
Microsoft Exchange Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · exchange serverSep 8, 2026
- CVE-2026-6935637Monitor
Microsoft Exchange Server Spoofing Vulnerability
CriticalCVSS 9.3No exploitEPSS 0%microsoft · exchange serverSep 8, 2026
- CVE-2026-6935828Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6935931Monitor
Active Directory Domain Services Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6936035Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6936532Monitor
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%microsoft · windows 10 21h2Sep 8, 2026
- CVE-2026-6937830Monitor
Microsoft Exchange Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · exchange serverSep 8, 2026
- CVE-2026-6938032Monitor
Microsoft Exchange Server Elevation of Privilege Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · exchange serverSep 8, 2026
- CVE-2026-6938428Monitor
Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6940128Monitor
Audio Video Control Transport Protocol Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-6940731Monitor
Volume Manager Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6941832Monitor
Volume Manager Driver Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6943139Monitor
Telnet Client Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6943231Monitor
Volume Manager Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6943631Monitor
Windows State Repository Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6943832Monitor
Microsoft JScript Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6943935Monitor
.NET and Visual Studio Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · .netSep 8, 2026
- CVE-2026-6945931Monitor
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6946028Monitor
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6946232Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6946828Monitor
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6947028Monitor
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6948535Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-8607534Monitor
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
HighCVSS 8.7No exploitEPSS 0%n8n · n8nSep 8, 2026
- CVE-2026-8607634Monitor
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
HighCVSS 8.7Proof of conceptEPSS 0%n8n · n8nSep 8, 2026
- CVE-2026-6949828Monitor
Windows Win32k Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6949935Monitor
Windows Imaging Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-8608128Monitor
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
HighCVSS 7.1No exploitEPSS 0%n8n-io · n8nSep 8, 2026
- CVE-2026-8608228Monitor
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
HighCVSS 7.1No exploitEPSS 0%n8n · n8nSep 8, 2026
- CVE-2026-8608330Monitor
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
HighCVSS 7.7No exploitEPSS 0%n8n · n8nSep 8, 2026
- CVE-2026-6951628Monitor
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6952235Monitor
.NET and Visual Studio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · .net 10.0Sep 8, 2026
- CVE-2026-6952432Monitor
Windows Active Directory Domain Services Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6953032Monitor
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6954131Monitor
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6954632Monitor
Windows Active Directory Domain Services Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6954928Monitor
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1809Sep 8, 2026
- CVE-2026-6955635Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-6957631Monitor
Graphic Fonts Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6959431Monitor
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026
- CVE-2026-6960528Monitor
Microsoft Install Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 21h2Sep 8, 2026
- CVE-2026-6961028Monitor
Windows Win32k Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6961128Monitor
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6976735Monitor
Microsoft Office PowerPoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · 365 appsSep 8, 2026
- CVE-2026-6980532Monitor
.NET Elevation of Privilege Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · microsoft.diagnostics.runtimeSep 8, 2026
- CVE-2026-6980628Monitor
.NET Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · .netSep 8, 2026
- CVE-2026-6980732Monitor
PowerShell Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-6985432Monitor
Spring Cloud Azure Elevation of Privilege Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · spring cloudSep 8, 2026
- CVE-2026-7035135Monitor
Microsoft WebP Image Extension Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · webp image extensionSep 8, 2026
- CVE-2026-7058331Monitor
Windows Core Messaging Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7132835Monitor
.NET and Visual Studio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · visual studio 2022Sep 8, 2026
- CVE-2026-7292331Monitor
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion
HighCVSS 7.5No exploitEPSS 1%microsoft · openapi.yamlreaderSep 8, 2026
- CVE-2026-7301335Monitor
Windows Imaging Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7750435Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7750532Monitor
Windows DNS Server Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789630Monitor
Windows Remote Desktop Client Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7789728Monitor
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · power automate for desktopSep 8, 2026
- CVE-2026-7790835Monitor
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%microsoft · dynamics 365Sep 8, 2026
- CVE-2026-7844630Monitor
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%microsoft · windows 10 1607Sep 8, 2026
- CVE-2026-7845728Monitor
Windows Security Health Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%microsoft · windows 11 24h2Sep 8, 2026