Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
998Microsoft CVEsreleased Tue 8 Sep
132Critical105 need an update · 27 fixed service-side
2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release
Act first · September 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
Showing 3 of 154All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-67631 | Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server | Critical | 9.8 | 1.0% | RCENetwork | Revised 17 Sep | KB5122768KB5122769+6 |
| CVE-2026-67643 | Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server | Critical | 9.8 | 1.0% | RCENetwork | Revised 17 Sep | KB5122768KB5122769+2 |
| CVE-2026-67378 | Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server | Critical | 9.0 | 0.7% | RCENetwork | Revised 17 Sep | KB5122768KB5122769+4 |
| CVE-2026-67636 | Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server | Critical | 9.0 | 0.7% | RCENetwork | Revised 17 Sep | KB5122768KB5122769+4 |