September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-28599 In addCreatorToken of ActivityManagerService.java, there is a possible Intent Re... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28594 In multiple locations, there is a possible use after free due to a logic error i... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28593 In getItemList of SettingsFragment.java, there is a possible user interaction by... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28620 In multiple locations, there is a possible unauthorized URI access due to a perm... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28618 In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28616 In Setup Wizard, there is a possible way to force connection to a malicious netw... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28614 In onCreate of SlicePermissionActivity.java, there is a possible permission bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28613 In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an a... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28612 In resolveActivity of ActivityStarter.java, there is a possible way to perform I... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-90809 A vulnerability was identified in HKUDS nanobot up to 0.2.1. |
high | 7.3 | — | — | 2026-09-14 | 2026-09-15 |
| CVE-2026-90707 A security flaw has been discovered in Open5GS up to 2.7.x. |
high | 8.3 | — | — | 2026-09-14 | 2026-09-15 |
| CVE-2026-28611 In multiple functions of NfcService.java, there is a possible silent payment ses... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28609 In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28662 In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of b... |
high | 8.0 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28658 In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a l... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28657 In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible un... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28656 In multiple functions of DeviceAdminAdd.java, there is a possible way to an over... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28655 In multiple functions of RemoteViews.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28650 In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28644 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a poss... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-85014 undici's experimental WebSocketStream client crashes the whole Node.js process w... |
high | 7.5 | — | Nodejs / undici | 2026-09-04 | 2026-09-15 |
| CVE-2026-28642 In executeRequest of ActivityStarter.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28639 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28626 In onCreate of SetupPassthroughActivity.java, there is a possible way to launch... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28624 In multiple locations, there is a possible read/write access to files without th... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28653 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28636 In setupLayout of PickActivity.java, there is a possible bypass of the "Install... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28634 In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to s... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28631 In buildMiniResolver of IntentForwarderActivity.java, there is a possible consen... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-76191 Animate is affected by an Improper Control of Generation of Code ('Code Injectio... |
high | 8.2 | — | Adobe / animate | 2026-09-08 | 2026-09-15 |
| CVE-2026-81381 Insufficiently protected credentials in GitHub Copilot and Visual Studio Code al... |
high | 7.5 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-15 |
| CVE-2026-71337 Stack-based buffer overflow in Windows Storage Management Provider allows an aut... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-15 |
| CVE-2026-71340 Use after free in Windows File History Service allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69846 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorize... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69875 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 8.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69906 Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized at... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-82208 With the wolfSSL backend, when CA caching is enabled and an
`CURLOPT_SSL_CTX_FUN... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-82209 When libpsl support is enabled, libcurl fails to enforce the Public Suffix
List... |
high | 8.2 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-80229 When performing transfers via libcurl’s multi interface, pooled TLS
connections... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-80230 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable
stan... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.