Archive

8 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /8 October 2026 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.9

CVE-2026-84869 Exploited

ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

ConnectWise ScreenConnect

Sep 8, 2026
KEV Sep 11, 2026
High 7.8

CVE-2026-81963 Exploited Public exploit

Windows Update Stack Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Sep 8, 2026
KEV Sep 8, 2026
High 7.8

CVE-2026-85880 Exploited

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 8, 2026
KEV Sep 8, 2026