Detections
Analytics

CVE-2026-81963

high

Description

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

From the Tenable Blog

September 2026 Microsoft Patch Tuesday | Tenable®
September 2026 Microsoft Patch Tuesday | Tenable®

Published: 2026-09-08

Microsoft patched 964 CVEs in September, the most ever in a Patch Tuesday release in its history, including two zero-day vulnerabilities exploited in the wild.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963

https://securityaffairs.com/198802/hacking/u-s-cisa-adds-microsoft-windows-n-able-n-central-and-adobe-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://www.malwarebytes.com/blog/news/2026/09/microsoft-fixes-record-964-flaws-including-2-exploited-zero-days

https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/

https://www.helpnetsecurity.com/2026/09/09/september-2026-patch-tuesday-zero-days-sigred-successor/

https://thehackernews.com/2026/09/microsoft-patches-record-974-flaws.html

https://securityaffairs.com/198705/security/microsofts-biggest-patch-tuesday-974-cves-2-zero-days-and-20-wormable-bugs.html

https://www.securityweek.com/microsoft-patches-record-974-vulnerabilities-including-two-exploited-zero-days/

https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog

https://cyberscoop.com/microsoft-patch-tuesday-september-2026/

https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-73889

Details

Source: Mitre, NVD

Published: 2026-09-08

Updated: 2026-09-09

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00631