September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69784 Use after free in Windows Hello allows an authorized attacker to elevate privile... |
high | 8.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69790 Heap-based buffer overflow in Windows Credential Providers allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69791 Use after free in Windows Device Association Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69649 Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized... |
high | 8.8 | — | Microsoft / raw image extension | 2026-09-08 | 2026-09-22 |
| CVE-2026-69652 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69654 Use after free in Windows Accounts Control allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69708 Use after free in Windows Web Platform Storage allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69710 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.5 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69711 Use after free in Windows Device Association Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69760 Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny s... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69744 Null pointer dereference in Windows Kerberos allows an unauthorized attacker to... |
high | 7.5 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69720 Heap-based buffer overflow in Windows MIDI Service Module allows an authorized a... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-72926 Use after free in Windows Internet Connection Sharing (ICS) allows an authorized... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69682 Use after free in Windows Host Guardian Service allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69689 Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate pr... |
high | 8.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69693 Use after free in Windows Device Association Broker service allows an authorized... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-72929 Improper validation of integrity check value in Windows Installer allows an auth... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69694 Deserialization of untrusted data in Windows IP Address Management (IPAM) Servic... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-72946 Heap-based buffer overflow in Storage Port Driver allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-78463 Improper control of generation of code ('code injection') in Remote Desktop Clie... |
high | 8.8 | — | Microsoft / remote desktop client | 2026-09-08 | 2026-09-22 |
| CVE-2026-80074 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac... |
high | 8.8 | — | Microsoft / remote desktop client | 2026-09-08 | 2026-09-22 |
| CVE-2026-80077 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac... |
high | 8.8 | — | Microsoft / remote desktop client | 2026-09-08 | 2026-09-22 |
| CVE-2026-72936 Use after free in Windows SMB Client allows an unauthorized attacker to execute... |
high | 8.1 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-72940 Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker t... |
high | 8.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69648 Use after free in Windows Notification allows an authorized attacker to elevate... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72962 Heap-based buffer overflow in Windows USB Video Driver allows an authorized atta... |
high | 8.2 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72953 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72947 Integer underflow (wrap or wraparound) in Windows File History Service allows an... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72952 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to exe... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72949 Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72960 Heap-based buffer overflow in Windows Media Player allows an unauthorized attack... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-21 |
| CVE-2026-69575 Use after free in Windows Storage Spaces Controller allows an authorized attacke... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-21 |
| CVE-2026-69597 Use after free in Windows HTTP.sys allows an authorized attacker to elevate priv... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-69625 Heap-based buffer overflow in Windows Connected User Experiences and Telemetry a... |
high | 8.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-69602 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-69606 Use after free in Windows Shell allows an authorized attacker to elevate privile... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72958 Double free in Windows Credential Guard allows an authorized attacker to elevate... |
high | 8.2 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72989 Use of uninitialized resource in Windows Failover Cluster allows an unauthorized... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-72961 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate p... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-21 |
| CVE-2026-69617 Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized... |
high | 7.0 | — | Microsoft / windows 11 26h1 | 2026-09-08 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.