September 2026 Patch Tuesday
Microsoft's September 2026 security release came out on Tuesday, September 8, 2026. Below: the updates for each Windows version, the holes that were already under attack, and the rest of the release.
Microsoft data read Last revised by Microsoft Oct 7, 2026
Windows 11 and Windows 10
| Update | Applies to | Build after update | CVEs |
|---|---|---|---|
| KB5124008Security Update | Windows 11 Version 24H2, Windows 11 Version 25H2 | 26100.9445, 26200.9445 | 628 |
| KB5124012Security Update | Windows 11 Version 26H1 | 28000.2954 | 627 |
| KB5122876Security Update | Windows 10 Version 1809, Windows Server 2019 | 17763.9245 | 616 |
| KB5122880Security Update | Windows 11 Version 23H2 | 22631.7582 | 602 |
| KB5122878Security Update | Windows 10 Version 21H2, Windows 10 Version 22H2 | 19044.7725, 19045.7725 | 568 |
| KB5123099Security Update | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016, Windows 10 Version 1607, Windows Server 2016 | 14393.9512 | 554 |
| KB5122874Servicing Stack Update | Windows 10 Version 1607, Windows Server 2016 | 14393.9504 | 1 |
| KB5129194Security Update | Windows 11 Version 26H1 | 28000.2956 | 1 |
Already exploited when fixed
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | ExploitedImportant |
| CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | ExploitedImportant |
Critical fixes with the highest scores
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-62874Azure Billing Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-69399Azure Arc Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-69843Microsoft Fabric Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-69865Microsoft Container Registry Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-70200Azure Logic Apps Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-70352Azure AI Language Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-83711Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-83944Azure Logic Apps Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-85889Azure AI Foundry Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-83941Entra ID Elevation of Privilege Vulnerability | Elevation of Privilege | 9.9 | Critical |
| CVE-2026-85878Azure Database for PostgreSQL Elevation of Privilege Vulnerability | Elevation of Privilege | 9.9 | Critical |
| CVE-2026-85885Microsoft 365 Copilot Elevation of Privilege Vulnerability | Elevation of Privilege | 9.9 | Critical |
Servers and other products
| Update | Applies to | CVEs |
|---|---|---|
| KB5122871Security Update | Windows Server 2025 | 679 |
| KB5122882Security Update | Windows Server 2022 | 641 |
| KB5123066Monthly Rollup | Windows Server 2012 R2 | 418 |
| KB5123065Monthly Rollup | Windows Server 2012 | 393 |
| KB5122770Security Update | Microsoft SQL Server 2025 (GDR) | 56 |
| KB5122769Security Update | Microsoft SQL Server 2025 (CU8) | 56 |
| KB5122773Security Update | Microsoft SQL Server 2019 (GDR) | 52 |
| KB5122771Security Update | Microsoft SQL Server 2022 (GDR) | 52 |
| KB5122772Security Update | Microsoft SQL Server 2019 (CU 32) | 52 |
| KB5122768Security Update | Microsoft SQL Server 2022 (CU 26) | 52 |
| KB5122775Security Update | Microsoft SQL Server 2017 (GDR) | 45 |
| KB5122774Security Update | Microsoft SQL Server 2017 (CU 31) | 45 |
| KB5002923Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | 31 |
| KB5002914Security Update | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | 30 |
| KB5002904Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 30 |
| KB5002916Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | 18 |
| KB5002908Security Update | Microsoft SharePoint Server Subscription Edition | 16 |
| KB5123301Security Update | Skype for Business Server 2015 CU13 | 10 |
| KB5123287Security Update | Skype for Business Server Subscription Edition CU1 | 10 |
| KB5123300Security Update | Skype for Business Server 2019 CU8 | 10 |
| KB5121610Security Update | Microsoft Exchange Server 2019 Cumulative Update 14 | 9 |
| KB5121609Security Update | Microsoft Exchange Server 2019 Cumulative Update 15 | 9 |
| KB5121608Security Update | Microsoft Exchange Server Subscription Edition RTM | 9 |
| KB5121611Security Update | Microsoft Exchange Server 2016 Cumulative Update 23 | 8 |
| KB5126105Security Update | .NET 9.0 installed on Linux, .NET 9.0 installed on Mac OS, .NET 9.0 installed on Windows, ASP.NET Core 9.0 | 6 |
| KB5126106Security Update | .NET 10.0 installed on Linux, .NET 10.0 installed on Mac OS, .NET 10.0 installed on Windows, ASP.NET Core 10.0 | 6 |
| KB5002920Security Update | Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) | 6 |
| KB5126104Security Update | .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 8.0 installed on Windows, ASP.NET Core 8.0 | 5 |
| KB5002910Security Update | Office Online Server | 4 |
| KB5002919Security Update | Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition) | 3 |
| KB5002912Security Update | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | 2 |
| KB5002913Security Update | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 2 |
| KB5002644Security Update | Microsoft Publisher 2016 (32-bit edition), Microsoft Publisher 2016 (64-bit edition) | 2 |
| KB5002898Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 2 |
| KB5126049Security Update | Microsoft .NET Framework 4.8 on Windows Server 2012 | 1 |
| KB5126047Security Update | Microsoft .NET Framework 4.8 on Windows 10 Version 1607, Microsoft .NET Framework 4.8 on Windows Server 2016 | 1 |
| KB5126051Security Update | Microsoft .NET Framework 4.8 on Windows Server 2012 R2 | 1 |
| KB5126048Security Update | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 | 1 |
| KB5126050Security Update | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 | 1 |
| KB5126046Security Update | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 | 1 |
| KB5126043Security Update | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 | 1 |
| KB5126044Security Update | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 | 1 |
| KB5126045Security Update | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 | 1 |
| KB5126053Security Update | Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 | 1 |
| KB5126422Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 | 1 |
| KB5126421Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 | 1 |
| KB5126052Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 | 1 |
| KB5126424Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 | 1 |
| KB5123731Security Update | Microsoft Dynamics 365 Customer Engagement V9.1 | 1 |
| KB4011160Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 1 |
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…