LiveActive security incident?Get immediate response

CVE archive

September 2026

Browse CVE records published in September 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 14596 matching CVEs · Page 8 of 292.

High · CVSS 7.8

CVE-2026-83968: Windows Biometric Service Elevation of Privilege Vulnerability

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-83972: Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-83970: Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-83967: Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-83954: Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-83971: Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-69598: Windows iSCSI Remote Code Execution Vulnerability

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-72965: Windows WebClient Service Elevation of Privilege Vulnerability

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 4.6

CVE-2026-69381: Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.1

CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-83949: Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-83951: Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8 · CISA KEV

CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8

CVE-2026-83948: Microsoft Azure CLI Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-77897: Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.5

CVE-2026-57099: ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.2

CVE-2026-83939: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-83940: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-77906: Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81948: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81950: Microsoft Excel Remote Code Execution Vulnerability

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81949: Microsoft Excel Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81953: Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81959: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-81952: Microsoft Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81951: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81388: Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81957: Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81395: Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81960: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81394: Microsoft Excel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-81389: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81400: Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81393: Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81956: Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81397: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81392: Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81396: Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81958: Microsoft Excel Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81401: Microsoft Excel Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81391: Microsoft Excel Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81399: Microsoft Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81390: Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81954: Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-81387: Microsoft Excel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81947: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81386: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-81398: Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Sep 8, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-81385: Microsoft Office Publisher Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

Published Sep 8, 2026 · Updated Oct 14, 2026