CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

998vulnerabilities fixed (CVEs)

131of them critical

2exploited (zero-day)

0publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday September 2026

998 vulnerabilities

CVE-2026-81963ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Windows Update Stack Elevation of Privilege Vulnerability

Windows · KB5122871 KB5124008 KB5122880 KB5124012 · MSRC

CVE-2026-85880ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5123099 · MSRC

CVE-2026-62874CriticalCVSS 10.0Elevation of privilege

Azure Billing Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-69843CriticalCVSS 10.0Elevation of privilege

Microsoft Fabric Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2026-69865CriticalCVSS 10.0Elevation of privilege

Microsoft Container Registry Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-70200CriticalCVSS 10.0Elevation of privilege

Azure Logic Apps Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-70352CriticalCVSS 10.0Elevation of privilege

Azure AI Language Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-83711CriticalCVSS 10.0Elevation of privilege

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-83944CriticalCVSS 10.0Elevation of privilege

Azure Logic Apps Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-85889CriticalCVSS 10.0Elevation of privilege

Azure AI Foundry Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-83941CriticalCVSS 9.9Elevation of privilege

Entra ID Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-85878CriticalCVSS 9.9Elevation of privilege

Azure Database for PostgreSQL Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-85885CriticalCVSS 9.9Elevation of privilege

Microsoft 365 Copilot Elevation of Privilege Vulnerability

Apps · MSRC

CVE-2026-67631CriticalCVSS 9.8Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server · KB5122769 KB5122768 KB5122775 KB5122773 · MSRC

CVE-2026-67643CriticalCVSS 9.8Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server · KB5122771 KB5122770 KB5122768 KB5122769 · MSRC

CVE-2026-69579CriticalCVSS 9.8Remote code execution

Windows Message Queuing Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69590CriticalCVSS 9.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69595CriticalCVSS 9.8Remote code execution

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099 · MSRC

CVE-2026-69730CriticalCVSS 9.8Remote code execution

Windows DNS Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099 · MSRC

CVE-2026-69769CriticalCVSS 9.8Remote code execution

Windows HTTP Print Provider Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69829CriticalCVSS 9.8Remote code execution

Windows Shell Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69845CriticalCVSS 9.8Remote code execution

Windows DHCP Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099 · MSRC

CVE-2026-70296CriticalCVSS 9.8Remote code execution

Windows Imaging Component Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-72979CriticalCVSS 9.8Remote code execution

Windows DHCP Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099 · MSRC

CVE-2026-72982CriticalCVSS 9.8Remote code execution

Windows Netlogon Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-72983CriticalCVSS 9.8Remote code execution

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-73009CriticalCVSS 9.8Remote code execution

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-73010CriticalCVSS 9.8Remote code execution

Microsoft Failover Cluster Remote Code Execution Vulnerability

Windows · KB5122876 KB5122882 KB5122871 · MSRC

CVE-2026-77493CriticalCVSS 9.8Remote code execution

Windows Graphics Component Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-78445CriticalCVSS 9.8Remote code execution

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099 · MSRC

CVE-2026-78509CriticalCVSS 9.8Remote code execution

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Office · KB5002923 · MSRC

CVE-2026-65669CriticalCVSS 9.6Elevation of privilege

Microsoft SQL Server Elevation of Privilege Vulnerability

Windows · MSRC

CVE-2026-87701CriticalCVSS 9.6Elevation of privilege

Azure Cosmos DB Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-70009CriticalCVSS 9.3Elevation of privilege

Azure Arc Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-80098CriticalCVSS 9.3Elevation of privilege

Copilot Studio Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2026-62916CriticalCVSS 9.1Elevation of privilege

Microsoft Entra ID Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-67378CriticalCVSS 9.0Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server · KB5122773 KB5122771 KB5122770 KB5122772 · MSRC

CVE-2026-67636CriticalCVSS 9.0Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server · KB5122773 KB5122771 KB5122770 KB5122772 · MSRC

CVE-2026-69854CriticalCVSS 9.0Elevation of privilege

Spring Cloud Azure Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-77903CriticalCVSS 9.0Elevation of privilege

Microsoft Dataverse Elevation of Privilege Vulnerability

Microsoft Dynamics · MSRC

CVE-2026-65772CriticalCVSS 8.8Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Dynamics · MSRC

CVE-2026-69285CriticalCVSS 8.8Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002916 · MSRC

CVE-2026-69499CriticalCVSS 8.8Remote code execution

Windows Imaging Component Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2026-69518CriticalCVSS 8.8Remote code execution

Windows Remote Desktop Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69601CriticalCVSS 8.8Remote code execution

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69603CriticalCVSS 8.8Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69632CriticalCVSS 8.8Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2026-69649CriticalCVSS 8.8Remote code execution

Raw Image Extension Remote Code Execution Vulnerability

Windows · MSRC

CVE-2026-69676CriticalCVSS 8.8Remote code execution

Windows Kerberos Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871 · MSRC

CVE-2026-69678CriticalCVSS 8.8Remote code execution

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft Office · KB5002920 · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed