ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

September 2026 Patch Tuesday

Lead record
Why these records are connected
Records grouped into the same Patch Tuesday cycle; this does not establish a single cause.
Connection key
pt:2026-09
Public snapshot refreshed
today 16:29 UTC
Distinct source events
1017
Source records represented
1017

Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.

Evidence in chronological order

  1. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-47297 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  2. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-50349 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  3. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2026-55007 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  4. Tue 8 Sep · Dated source evidence · Published vulnerability Windows VHD miniport driver Elevation of Privilege VulnerabilityCVE-2026-56172 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  5. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Server Elevation of Privilege VulnerabilityCVE-2026-56177 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  6. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Trace Data Helper Elevation of Privilege VulnerabilityCVE-2026-56198 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  7. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Remote Desktop App for Windows Information Disclosure VulnerabilityCVE-2026-57098 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  8. Tue 8 Sep · Dated source evidence · Published vulnerability ASP.NET Core Denial of Service VulnerabilityCVE-2026-57099 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  9. Tue 8 Sep · Dated source evidence · Published vulnerability HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2026-58599 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  10. Tue 8 Sep · Dated source evidence · Published vulnerability HEVC Video Extensions Elevation of Privilege VulnerabilityCVE-2026-58600 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  11. Tue 8 Sep · Dated source evidence · Published vulnerability Xbox Gaming Services Elevation of Privilege VulnerabilityCVE-2026-58611 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  12. Tue 8 Sep · Dated source evidence · Published vulnerability .NET Information Disclosure VulnerabilityCVE-2026-58649 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  13. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Installer Elevation of Privilege VulnerabilityCVE-2026-62694 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  14. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Push Notifications Elevation of Privilege VulnerabilityCVE-2026-62697 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  15. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-62706 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  16. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-62744 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  17. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Netlogon Spoofing VulnerabilityCVE-2026-62759 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  18. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Active Directory Domain Services Denial of Service VulnerabilityCVE-2026-62762 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  19. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft PowerShell Security Feature Bypass VulnerabilityCVE-2026-62801 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  20. Tue 8 Sep · Dated source evidence · Published vulnerability Active Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityCVE-2026-62810 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  21. Tue 8 Sep · Dated source evidence · Published vulnerability Windows Active Directory Domain Services Remote Code Execution VulnerabilityCVE-2026-62813 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  22. Tue 8 Sep · Dated source evidence · Published vulnerability Azure Arc SQL Server Extension Elevation of Privilege VulnerabilityCVE-2026-62895 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  23. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Discovery Studio Information Disclosure VulnerabilityCVE-2026-62906 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
  24. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Entra ID Elevation of Privilege VulnerabilityCVE-2026-62916 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
  25. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business Spoofing VulnerabilityCVE-2026-63523 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  26. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Office Spoofing VulnerabilityCVE-2026-64918 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  27. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-65669 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  28. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2026-65772 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  29. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft Teams for Android Information Disclosure VulnerabilityCVE-2026-65812 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  30. Tue 8 Sep · Dated source evidence · Published vulnerability Power Automate Elevation of Privilege VulnerabilityCVE-2026-65818 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
  31. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business Remote Code Execution VulnerabilityCVE-2026-66302 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  32. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business and Lync Denial of Service VulnerabilityCVE-2026-66303 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  33. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business Information Disclosure VulnerabilityCVE-2026-66304 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  34. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business Spoofing VulnerabilityCVE-2026-66305 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  35. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business Information Disclosure VulnerabilityCVE-2026-66306 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  36. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business and Lync Denial of Service VulnerabilityCVE-2026-66307 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  37. Tue 8 Sep · Dated source evidence · Published vulnerability Skype for Business and Lync Denial of Service VulnerabilityCVE-2026-66308 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  38. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-66814 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  39. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft SQL Server Security Feature Bypass VulnerabilityCVE-2026-66816 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  40. Tue 8 Sep · Dated source evidence · Published vulnerability Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-66818 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 16:29 UTC · 265 of 275 readable · 263 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.