CVE-2026-69307 Microsoft
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 7.8
Update availability Security update available Affected: Windows 10 Version 1607 for 32-bit Systems · Windows 10 Version 1607 for x64-based Systems · +28 more
Updated September 29, 2026
CVE-2026-69522 Microsoft
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: .NET 10.0 installed on Windows · .NET 11.0 installed on Windows · +45 more
Updated September 29, 2026
CVE-2026-93602 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 4.4
Update availability Patch status unknown Affected: azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 · azl3 rust 1.96.1-2 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-93599 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 7.5
Update availability Patch status unknown Affected: azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 · azl3 rust 1.96.1-2 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-93600 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 2.2
Update availability Patch status unknown Affected: azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 · azl3 rust 1.96.1-2 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-93601 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 2.2
Update availability Patch status unknown Affected: azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 · azl3 rust 1.96.1-2 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-82412 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 8.8
Update availability Security update available Affected: azl3 ntopng 5.2.1-7 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-91781 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 3.3
Update availability Patch status unknown Affected: azl3 binutils 2.41-13 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-78133 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 7.5
Update availability Security update available Affected: azl3 strongswan 5.9.14-10 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-91728 Microsoft
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.
CVSS 9.6
Update availability Patch status unknown Affected: Microsoft Edge (Chromium-based)
Updated September 29, 2026
CVE-2026-89156 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 2.9
Update availability Security update available Affected: azl3 pcre2 10.42-3 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-89157 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 5.7
Update availability Security update available Affected: azl3 nmap 7.95-5 on Azure Linux 3.0 · azl3 pcre2 10.42-3 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-91745 Microsoft
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.
CVSS 8.8
Update availability Patch status unknown Affected: Microsoft Edge (Chromium-based)
Updated September 29, 2026
CVE-2026-89160 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 3.7
Update availability Security update available Affected: azl3 nmap 7.95-5 on Azure Linux 3.0 · azl3 pcre2 10.42-3 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-77159 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 5.5
Update availability Patch status unknown Affected: azl3 libvirt 11.9.0-1 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-94286 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 7.1
Update availability Patch status unknown Affected: azl3 libical 3.0.10-1 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-94282 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 5.6
Update availability Patch status unknown Affected: azl3 libXi 1.8.1-1 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-94283 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 6.5
Update availability Patch status unknown Affected: azl3 libX11 1.8.7-1 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-94284 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 5.5
Update availability Patch status unknown Affected: azl3 libX11 1.8.7-1 on Azure Linux 3.0
Updated September 29, 2026
CVE-2026-86950 Apple
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.
CVSS Not supplied
Update availability Patch status unknown Affected: Multiple Products
Added to CISA KEV September 29, 2026
CVE-2026-67419 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS Not supplied
Update availability Patch status unknown Affected: azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0
Updated September 28, 2026
CVE-2026-81355 Microsoft
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVSS 7.5
Update availability Security update available Affected: Windows 10 Version 1607 for 32-bit Systems · Windows 10 Version 1607 for x64-based Systems · +28 more
Updated September 28, 2026
CVE-2026-97899 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 3.3
Update availability Patch status unknown Affected: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Updated September 28, 2026
CVE-2026-93238 Microsoft
Review the authoritative advisory for the vulnerability description and applicability.
CVSS 3.9
Update availability Patch status unknown Affected: azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Updated September 28, 2026