Weekly briefing

Week 37 · 7 Sep – 13 Sep 2026 UTC · assess the changes, then plan the next dates.

All dated changes in this period

1018 source records · 46 groups

8 Sep 2026

SecurityDynamics 3652 source records

Published vulnerability · 2 entries

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-65772
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77908
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityExchange9 source records

Published vulnerability · 9 entries

Microsoft Exchange Server Denial of Service Vulnerability
Published vulnerability
CVE-2026-69378
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69380
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69641
Assessment context
Microsoft states that customer action is required

Show the other 6 entries

Microsoft Exchange Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69382
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-55007
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69355
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Spoofing Vulnerability
Published vulnerability
CVE-2026-69356
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Spoofing Vulnerability
Published vulnerability
CVE-2026-69361
Assessment context
Microsoft states that customer action is required
Microsoft Exchange Server Tampering Vulnerability
Published vulnerability
CVE-2026-69375
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityFortinet11 source records

Security advisory · 11 entries

FortiMonitorOnSight: JWT used for authentication in web GUI signed with static key
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it critical
FortiOS: ZTNA Portal Improper Certificate Validation
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high
FortiSandbox: Cron Job Injection in Remote Backup
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high

Show the other 8 entries

FortiSandbox: Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it critical
Improper Authentication of FortiPAM Server
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it critical
FortiAnalyzer: Uncontrolled Resource Consumption in SNMP
Security advisory · Fortinet PSIRT advisories
FortiClient: Arbitrary process termination from exposed minifilter communication port
Security advisory · Fortinet PSIRT advisories
FortiManager: Workflow session email approval process bypass
Security advisory · Fortinet PSIRT advisories
FortiOS: Null Pointer Dereference in Log Report
Security advisory · Fortinet PSIRT advisories
FortiSOAR: Broken Access control on Websocket streams
Security advisory · Fortinet PSIRT advisories
Open Redirect on FortiSIEM
Security advisory · Fortinet PSIRT advisories

8 Sep 2026

SecurityGitHub Copilot / Visual Studio Code2 source records

Published vulnerability · 2 entries

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81380
Assessment context
Microsoft states that customer action is required
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81381
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityHyper-V / Windows / Windows Server5 source records

Published vulnerability · 5 entries

Windows Hyper-V Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69553
Assessment context
Microsoft states that customer action is required
Windows Hyper-V Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-72961
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hyper-V Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69603
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

Show the other 2 entries

Windows Hyper-V Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69910
Assessment context
Microsoft states that customer action is required
Windows Hyper-V Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-80083
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft 365 Apps / Microsoft Fabric

Microsoft Fabric Elevation of Privilege Vulnerability

Published vulnerability

CVE-2026-70178

Assessment context

Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical

8 Sep 2026

SecurityMicrosoft 365 Apps / Outlook3 source records

Published vulnerability · 3 entries

Microsoft Office Outlook Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80073
Assessment context
Microsoft states that customer action is required
Microsoft Office Outlook Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69629
Assessment context
Microsoft states that customer action is required
Microsoft Office Outlook Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78519
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft 365 Apps / SharePoint16 source records

Published vulnerability · 16 entries

Microsoft Office SharePoint Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69464
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69716
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69409
Assessment context
Microsoft states that customer action is required

Show the other 13 entries

Microsoft Office SharePoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69636
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69683
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69904
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69268
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69273
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69282
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69465
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69724
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69804
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Spoofing Vulnerability
Published vulnerability
CVE-2026-69402
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Spoofing Vulnerability
Published vulnerability
CVE-2026-69417
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Spoofing Vulnerability
Published vulnerability
CVE-2026-69615
Assessment context
Microsoft states that customer action is required
Microsoft Office SharePoint Spoofing Vulnerability
Published vulnerability
CVE-2026-69690
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft 365 Apps / Teams2 source records

Published vulnerability · 2 entries

Microsoft Teams for Android Information Disclosure Vulnerability
Published vulnerability
CVE-2026-65812
Assessment context
Microsoft states that customer action is required
Microsoft Teams for Android Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69559
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft 365 Apps / Windows / Windows Server4 source records

Published vulnerability · 4 entries

Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68843
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69360
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77504
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

Show the other 1 entries

Windows Graphics Component Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81955
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft 365 Apps113 source records

Published vulnerability · 113 entries

Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81387
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81390
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81391
Assessment context
Microsoft states that customer action is required

Show the other 110 entries

Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81392
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81393
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81394
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81395
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81399
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81400
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81401
Assessment context
Microsoft states that customer action is required
Microsoft Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81958
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81386
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81388
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81389
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81396
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81397
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81398
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81947
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81948
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81949
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81950
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81951
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81953
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81954
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81956
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81957
Assessment context
Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81959
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81960
Assessment context
Microsoft states that customer action is required
Microsoft Office Access Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69477
Assessment context
Microsoft states that customer action is required
Microsoft Office Access Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69529
Assessment context
Microsoft states that customer action is required
Microsoft Office Access Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69614
Assessment context
Microsoft states that customer action is required
Microsoft Office Access Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69778
Assessment context
Microsoft states that customer action is required
Microsoft Office Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-72974
Assessment context
Microsoft states that customer action is required
Microsoft Office Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78515
Assessment context
Microsoft states that customer action is required
Microsoft Office Excel Information Disclosure Vulnerability
Published vulnerability
CVE-2026-85875
Assessment context
Microsoft states that customer action is required
Microsoft Office Excel Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78518
Assessment context
Microsoft states that customer action is required
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78439
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69626
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69739
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80076
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80078
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80082
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80087
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80089
Assessment context
Microsoft states that customer action is required
Microsoft Office Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80091
Assessment context
Microsoft states that customer action is required
Microsoft Office Outlook Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78520
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Outlook Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80084
Assessment context
Microsoft states that customer action is required
Microsoft Office Outlook Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78509
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Outlook Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78525
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-72938
Assessment context
Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-72956
Assessment context
Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-72975
Assessment context
Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-72977
Assessment context
Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78513
Assessment context
Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80086
Assessment context
Microsoft states that customer action is required
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69678
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69767
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69797
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-80081
Assessment context
Microsoft states that customer action is required
Microsoft Office Publisher Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69742
Assessment context
Microsoft states that customer action is required
Microsoft Office Publisher Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81385
Assessment context
Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69285
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69442
Assessment context
Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69632
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77898
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78505
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78524
Assessment context
Microsoft states that customer action is required
Microsoft Office Spoofing Vulnerability
Published vulnerability
CVE-2026-64918
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69719
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69734
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-72976
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-77911
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78502
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78503
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78506
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78522
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80079
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80088
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-80090
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-83949
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-83951
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69556
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69671
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69686
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69722
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69759
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69764
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-72972
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-72973
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77901
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78504
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78507
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78511
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78512
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78514
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78517
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78521
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78526
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-80080
Assessment context
Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-80085
Assessment context
Microsoft states that customer action is required
Microsoft Outlook and Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78510
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-62804
Assessment context
Microsoft states that customer action is required
Microsoft Word Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81952
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Skype for Business Information Disclosure Vulnerability
Published vulnerability
CVE-2026-66304
Assessment context
Microsoft states that customer action is required
Skype for Business Information Disclosure Vulnerability
Published vulnerability
CVE-2026-66306
Assessment context
Microsoft states that customer action is required
Skype for Business Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-66302
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Skype for Business Spoofing Vulnerability
Published vulnerability
CVE-2026-63523
Assessment context
Microsoft states that customer action is required
Skype for Business Spoofing Vulnerability
Published vulnerability
CVE-2026-66305
Assessment context
Microsoft states that customer action is required
Skype for Business Spoofing Vulnerability
Published vulnerability
CVE-2026-69642
Assessment context
Microsoft states that customer action is required
Skype for Business Spoofing Vulnerability
Published vulnerability
CVE-2026-69646
Assessment context
Microsoft states that customer action is required
Skype for Business and Lync Denial of Service Vulnerability
Published vulnerability
CVE-2026-66303
Assessment context
Microsoft states that customer action is required
Skype for Business and Lync Denial of Service Vulnerability
Published vulnerability
CVE-2026-66307
Assessment context
Microsoft states that customer action is required
Skype for Business and Lync Denial of Service Vulnerability
Published vulnerability
CVE-2026-66308
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft Authenticator Elevation of Privilege Vulnerability

Microsoft Authenticator Elevation of Privilege Vulnerability

Published vulnerability

CVE-2026-80097

Assessment context

Microsoft states that customer action is required

8 Sep 2026

SecurityMicrosoft Security Update Guide

September 2026 Security Updates

MSRC release notes · Microsoft Security Update Guide

Assessment context

Monthly security release notes

8 Sep 2026

SecurityPower Platform2 source records

Published vulnerability · 2 entries

Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-77897
Assessment context
Microsoft states that customer action is required
Power Automate Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-65818
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical

8 Sep 2026

SecuritySQL Server / Windows3 source records

Published vulnerability · 3 entries

Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-65669
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows OLE DB Information Disclosure Vulnerability
Published vulnerability
CVE-2026-78441
Assessment context
Microsoft states that customer action is required
Windows OLE DB Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78442
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecuritySQL Server60 source records

Published vulnerability · 60 entries

Microsoft SQL Server Denial of Service Vulnerability
Published vulnerability
CVE-2026-67376
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Denial of Service Vulnerability
Published vulnerability
CVE-2026-67633
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Denial of Service Vulnerability
Published vulnerability
CVE-2026-67641
Assessment context
Microsoft states that customer action is required

Show the other 57 entries

Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-66814
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-66818
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-66819
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-67368
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-67370
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-67381
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67369
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67383
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67386
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67389
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67390
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67393
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67624
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67629
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67630
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67645
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-67648
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68776
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68777
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68778
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68779
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68780
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68781
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68784
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69562
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-73029
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Information Disclosure Vulnerability
Published vulnerability
CVE-2026-77488
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-47297
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67373
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67378
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67379
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67380
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67384
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67385
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67388
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67631
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67636
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67638
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67639
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67642
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-67643
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-68775
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-68785
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-68786
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-68787
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77481
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77482
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77484
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77486
Assessment context
Microsoft states that customer action is required
Microsoft SQL Server Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-66816
Assessment context
Microsoft states that customer action is required
SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-66820
Assessment context
Microsoft states that customer action is required
SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-73028
Assessment context
Microsoft states that customer action is required
SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-77480
Assessment context
Microsoft states that customer action is required
SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-77483
Assessment context
Microsoft states that customer action is required
SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-77485
Assessment context
Microsoft states that customer action is required
SQL Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-77487
Assessment context
Microsoft states that customer action is required
SQL Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78456
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityVisual Studio Code10 source records

Published vulnerability · 10 entries

Visual Studio Code Information Disclosure Vulnerability
Published vulnerability
CVE-2026-81383
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-70334
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-78461
Assessment context
Microsoft states that customer action is required

Show the other 7 entries

Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-78462
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-81356
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-81357
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-81376
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-81378
Assessment context
Microsoft states that customer action is required
Visual Studio Code Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-81379
Assessment context
Microsoft states that customer action is required
Visual Studio Code Tampering Vulnerability
Published vulnerability
CVE-2026-81377
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityVisual Studio Remote Code Execution Vulnerability2 source records

Published vulnerability · 2 entries

Visual Studio Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77906
Assessment context
Microsoft states that customer action is required
Visual Studio Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-77907
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityWindows38 source records

Published vulnerability · 38 entries

HEIF Image Extensions Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81353
Assessment context
Microsoft states that customer action is required
HEVC Video Extensions Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-58600
Assessment context
Microsoft states that customer action is required
HEVC Video Extensions Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-58599
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

Show the other 35 entries

Microsoft Graphics Component Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69467
Assessment context
Microsoft states that customer action is required
Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
Published vulnerability
CVE-2026-57098
Assessment context
Microsoft states that customer action is required
Microsoft WebP Image Extension Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70351
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Added to CISA KEV
CVE-2026-85880
Assessment context
CISA lists it as exploited
Microsoft Windows Link Following Vulnerability
Added to CISA KEV
CVE-2026-81963
Assessment context
CISA lists it as exploited
Raw Image Extension Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69649
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Remote Desktop Client Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-78463
Assessment context
Microsoft states that customer action is required
Remote Desktop Client Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-80074
Assessment context
Microsoft states that customer action is required
Remote Desktop Client Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-80077
Assessment context
Microsoft states that customer action is required
Web Media Extensions Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-81352
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69283
Assessment context
Microsoft states that customer action is required
Windows Container Manager Service Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-69771
Assessment context
Microsoft states that customer action is required
Windows Core Messaging Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70583
Assessment context
Microsoft states that customer action is required
Windows Credential Guard Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70578
Assessment context
Microsoft states that customer action is required
Windows DHCP Client Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69777
Assessment context
Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69710
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69725
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69740
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69784
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69799
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69820
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Hello Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69864
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Installer Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-71339
Assessment context
Microsoft states that customer action is required
Windows MIDI Service Module Elevation of Privileges Vulnerability
Published vulnerability
CVE-2026-69440
Assessment context
Microsoft states that customer action is required
Windows MIDI Service Module Elevation of Privileges Vulnerability
Published vulnerability
CVE-2026-69508
Assessment context
Microsoft states that customer action is required
Windows MIDI Service Module Elevation of Privileges Vulnerability
Published vulnerability
CVE-2026-69720
Assessment context
Microsoft states that customer action is required
Windows MIDI Service Module Elevation of Privileges Vulnerability
Published vulnerability
CVE-2026-78464
Assessment context
Microsoft states that customer action is required
Windows MIDI Service Module Information Disclosure Vulnerability
Published vulnerability
CVE-2026-68842
Assessment context
Microsoft states that customer action is required
Windows MIDI Service Module Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69339
Assessment context
Microsoft states that customer action is required
Windows Mobile Broadband Information Disclosure Vulnerability
Published vulnerability
CVE-2026-70579
Assessment context
Microsoft states that customer action is required
Windows NTFS Tampering Vulnerability
Published vulnerability
CVE-2026-69425
Assessment context
Microsoft states that customer action is required
Windows Print Spooler Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-85877
Assessment context
Microsoft states that customer action is required
Windows SMB Client Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69544
Assessment context
Microsoft states that customer action is required
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-83939
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Windows Win32k Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69333
Assessment context
Microsoft states that customer action is required

8 Sep 2026

SecurityXbox Gaming Services Elevation of Privilege Vulnerability

Xbox Gaming Services Elevation of Privilege Vulnerability

Published vulnerability

CVE-2026-58611

Assessment context

Microsoft states that customer action is required

7 Sep 2026

Updates and guidanceDefender

Defender for Endpoint iOS 1.1.80270104 (release notes mention Global Secure Access)

Product news · Defender for Endpoint iOS releases

7 Sep 2026

SecurityCloudflare2 source records

Security advisory · 2 entries

WAF - Attack Signature Detection is now available in Early Access
Security advisory · Cloudflare WAF changelog
Assessment context
WAF - Enforce positive security with Application Profiles
Security advisory · Cloudflare WAF changelog
Assessment context

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.