HomeNewsletterCommunityMVP FeedToolsArchiveBlogToday's NewsAboutServicesQuick Links Subscribe free
← Back to Blog
Security Patch TuesdayCVEWindows 11KB5124008SecuritySeptember 2026

September 2026 Patch Tuesday — Complete CVE Reference

IA
Imran Awan
9 September 2026
633
CVEs This Month
56
Critical
577
Important
1
Exploited in Wild
PS Check patch status if (Get-HotFix -Id KB5124008 -EA SilentlyContinue) { "KB5124008 INSTALLED" } else { "KB5124008 NOT installed — patch required" }
Outputs a clear INSTALLED or NOT installed — no error thrown if the patch is missing.
🔍
What is a CVE?
A CVE (Common Vulnerabilities and Exposures) is a publicly registered security flaw in a software product. Each one gets a unique ID like CVE-2026-69579 — the year and a sequence number. Microsoft bundles fixes for all known CVEs into monthly Patch Tuesday releases.
⚖️
CVSS Score — the risk number
Every CVE gets a CVSS score from 0.0 to 10.0. It captures: is this remotely exploitable? Does the attacker need a user to click something? How much damage can they do? A 9.8 means unauthenticated, remote, no user interaction. The large number on each row is that score.
🛡️
Vulnerability types
RCE — attacker runs code on the device
EoP — standard user becomes SYSTEM (common in ransomware chains)
Info Disclosure — data leaks out
DoS — service crashes, no data stolen
SFB — security control bypassed (e.g. SmartScreen)
📋
What to do
1. Apply KB5124008 — one update fixes all 633 CVEs for Windows 11 24H2/25H2.

2. Prioritise Critical + CVSS 9+ — especially CVE-2026-81963 (actively exploited EoP).

3. Server admins: RRAS, Netlogon, SSTP all have Critical RCEs this month.
CVSS distribution — all 633 September 2026 CVEs
93
31
370
115
24
Below 6 · 93
6.x · 31
7.x · 370
8.x · 115
9+ · 24
September 2026 pattern: Elevation of Privilege dominates (390 CVEs — 62%). The 56 Critical CVEs are notably high vs Jul 2026 (19) and Aug 2026 (23). The single exploited CVE — CVE-2026-81963 — is a Windows Update Stack EoP observed in ransomware pre-staging; apply KB5124008 (build 26100.9445+) immediately.
Severity
Type
633 CVEs
Sort:
Loading…
Was this post helpful?
React below — no account needed
Share this post
LinkedIn X / Twitter Reddit Bluesky

More from EndpointWeekly

Security
CVE-2026-81963: The September 2026 Windows Update Stack…
CVE-2026-81963 is a Windows Update Stack elevation of privilege flaw rated 7.8 CVSS and…
Security
ShieldCrash: What Admins Need to Know About the Microsoft…
ShieldBreak (CVE-2026-69414) is patched in September 2026. ShieldCrash is a new…
Security
Microsoft Edge 152 Got Two Security Updates in 48 Hours - Here's…
Edge 152.0.4191.62 patched an actively-exploited CVE on September 2; 152.0.4191.66…