September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87642 Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87658 Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87518 Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87490 Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.3... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87502 Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 4.2 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87523 Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87593 Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87594 Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87605 Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowe... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87620 Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87629 Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allow... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87631 Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a r... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87651 Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87623 Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87476 Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowe... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87477 Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remot... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87478 Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allow... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87459 Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87454 Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.801... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87453 Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allow... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87443 Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87439 Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowe... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87437 Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87435 Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allo... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-84327 Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.... |
medium | 6.5 | — | Google / chrome | 2026-09-02 | 2026-09-08 |
| CVE-2026-84330 UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0... |
medium | 5.4 | — | Google / chrome | 2026-09-02 | 2026-09-08 |
| CVE-2026-85044 Use of released resource in Mobile in Google Chrome on on Android prior to 152.0... |
medium | 6.5 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-84356 UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allow... |
medium | 4.3 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84357 Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 all... |
medium | 6.5 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84358 Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.... |
medium | 4.2 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84348 Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84323 Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allo... |
medium | 5.3 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84329 Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 15... |
medium | 5.3 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84332 Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75... |
medium | 6.5 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-95308 Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a re... |
low | 3.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95312 Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a... |
low | 3.1 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95316 Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 al... |
low | 2.9 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95317 Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57... |
low | 3.1 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95324 Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a... |
low | 3.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95302 Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0... |
low | 2.9 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.