September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87534 Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8... |
critical | 9.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87464 Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87643 Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 al... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87646 Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 all... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87650 Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87654 Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 a... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87634 Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87637 Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 a... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87638 Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87621 Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87607 Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allow... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87609 Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allo... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87613 Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.801... |
critical | 9.0 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87581 Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87558 Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 all... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87547 Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.801... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87528 Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 all... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87529 Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowe... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87512 Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 al... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87520 Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 all... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87526 Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87527 Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remot... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87500 Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87504 Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87488 Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 al... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87492 Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allo... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87470 Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87474 Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87448 Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87455 Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87438 Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87494 Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36... |
critical | 9.6 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-84333 Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 all... |
critical | 9.6 | — | Google / chrome | 2026-09-02 | 2026-09-08 |
| CVE-2026-84352 Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 al... |
critical | 9.6 | — | Google / chrome | 2026-09-02 | 2026-09-08 |
| CVE-2026-84353 Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.... |
critical | 9.6 | — | Google / chrome | 2026-09-02 | 2026-09-08 |
| CVE-2026-85042 Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85043 Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a... |
critical | 9.1 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85047 Improper input validation in Transactions Platform in Google Chrome on on iOS pr... |
critical | 9.6 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85050 Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.... |
critical | 9.6 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-84354 Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 al... |
critical | 9.6 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.