CVE-2026-69398

creationtimestamp| type| source ---|---|--- 2026-09-08 22:05:03+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:50+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:20:05+00:00|...

CVE-2026-83972

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:54+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:40+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:48:04+00:00|...

CVE-2026-73021

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:49+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:35+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:25:38+00:00|...

CVE-2026-70581

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:38+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:27+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:24:43+00:00|...

CVE-2026-70573

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:38+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:27+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:24:17+00:00|...

CVE-2026-69580

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:33+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:22+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:52:49+00:00|...

CVE-2026-69609

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:17+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:08+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:48:46+00:00|...

CVE-2026-69418

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:16+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:04:07+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:15:39+00:00|...

CVE-2026-66308

creationtimestamp| type| source ---|---|--- 2026-09-08 22:04:01+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:57+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 06:00:16+00:00|...

CVE-2026-69559

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:33+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:17:18+00:00|...

CVE-2026-69345

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:31+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:21+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:45:25+00:00|...

CVE-2026-68892

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:27+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:17+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:49:43+00:00|...

CVE-2026-81394

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:13+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:03+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:47:18+00:00|...

CVE-2026-69603

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:38+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:30+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:48:55+00:00|...

CVE-2026-78449

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:03+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:59+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:54:57+00:00|...

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that man...

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch...

GHSA-JRC7-96C5-Q579 MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

Impact DOM.sanitize in src/util/dom.ts iterated elem.attributes a live NamedNodeMap while calling elem.removeAttribute in the same loop. Removing an attribute shifts subsequent attributes down by one index, causing the iterator to skip the adjacent attribute. An attacker can provide an HTML paylo...

MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

Impact DOM.sanitize in src/util/dom.ts iterated elem.attributes a live NamedNodeMap while calling elem.removeAttribute in the same loop. Removing an attribute shifts subsequent attributes down by one index, causing the iterator to skip the adjacent attribute. An attacker can provide an HTML paylo...

CVE-2026-32202

Zero-click強制認証: 細工された .lnk が含まれるフォルダを表示すると、アイコンのレンダリング時にUNC解決がトリガーされ、被害者は攻撃者が指定したアウトバウンド接続を強制され、Net-NTLMv2資格情報が漏洩しリレーも可能になる。これはCVE-2026-21510の不完全な修正により発生した。Microsoftが追加した信頼性検証はShellExecuteExW呼び出し時起動時のみ機能したが、CControlPanelFolder::GetUIObjectOfの時点では既に被害が発生しており、これはShellExecuteの信頼性検証より前に呼び出される。...