September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,326
Critical
1,227
High
4,361
Medium
4,108
Low
460
Severity not reported
1,170
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84511 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-43686 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84546 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.4 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84497 A buffer overflow was addressed with improved size validation. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84611 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.3 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84629 This issue was addressed with additional entitlement checks. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84632 The issue was addressed with improved memory handling. |
high | 7.3 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84563 A logic issue was addressed with improved checks. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84581 A buffer overflow was addressed with improved bounds checking. |
high | 8.4 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84577 An access issue was addressed with additional sandbox restrictions. |
high | 8.2 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84535 An authorization issue was addressed with improved state management. |
high | 8.2 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84516 An out-of-bounds read was addressed with improved bounds checking. |
high | 8.1 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84515 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-64761 A privacy issue was addressed with improved handling of user preferences. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-64790 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84598 A path traversal issue was addressed with improved path validation. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65410 The issue was addressed with improved checks. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84543 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-86894 A logic issue was addressed with improved checks. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-65390 An integer overflow was addressed with improved input validation. |
high | 8.8 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-65391 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.8 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-84607 A race condition was addressed with improved state management. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-64752 A memory corruption issue was addressed by removing the vulnerable code. |
high | 7.3 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65374 A memory corruption issue was addressed with improved validation. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-43684 A use-after-free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65415 A race condition was addressed with additional validation. |
high | 8.1 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84505 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84575 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-86895 An information disclosure issue was addressed with improved state management. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-86904 A privacy issue was addressed with improved state management. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65364 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43786 This issue was addressed with additional entitlement checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64701 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64712 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64736 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-65362 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43691 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-28960 A denial-of-service issue was addressed with improved validation. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-43783 A race condition was addressed with improved locking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43689 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.