September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69586 Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized a... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-21 |
| CVE-2026-78509 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
critical | 9.8 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-17 |
| CVE-2026-67631 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
critical | 9.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67636 Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code... |
critical | 9.0 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67643 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
critical | 9.8 | — | Microsoft / sql server 2022 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67378 Untrusted pointer dereference in SQL Server allows an unauthorized attacker to e... |
critical | 9.0 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-17 |
| CVE-2026-73010 Use after free in Windows Failover Cluster allows an unauthorized attacker to ex... |
critical | 9.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-17 |
| CVE-2026-66302 External control of file name or path in Skype for Business allows an unauthoriz... |
critical | 9.8 | — | Microsoft / skype for business server | 2026-09-08 | 2026-09-16 |
| CVE-2026-69910 Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker t... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-16 |
| CVE-2026-81376 Incomplete comparison with missing factors in Visual Studio Code allows an unaut... |
critical | 9.6 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-80098 Improper verification of cryptographic signature in Copilot Studio allows an una... |
critical | 10.0 | — | Microsoft / copilot studio | 2026-09-03 | 2026-09-08 |
| CVE-2026-65818 Server-side request forgery (ssrf) in Power Automate allows an authorized attack... |
critical | 9.9 | — | Microsoft / power platform | 2026-09-03 | 2026-09-08 |
| CVE-2026-62916 Authentication bypass using an alternate path or channel in Microsoft Entra ID a... |
critical | 9.8 | — | Microsoft / entra id | 2026-09-03 | 2026-09-08 |
| CVE-2026-69275 Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69277 Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69292 Double free in Remote Desktop Gateway Service allows an authorized attacker to e... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69272 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69271 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69269 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an autho... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-68897 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-68892 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-68890 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-68889 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-81352 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unautho... |
high | 8.8 | — | Microsoft / web media extensions | 2026-09-08 | 2026-09-30 |
| CVE-2026-62813 Use after free in Active Directory Domain Services allows an authorized attacker... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-62810 Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allo... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69313 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69325 Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69329 Out-of-bounds read in BranchCache allows an unauthorized attacker to deny servic... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69336 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69338 Use after free in Remote Desktop Gateway Service allows an authorized attacker t... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69355 External control of file name or path in Microsoft Exchange Server allows an aut... |
high | 8.8 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-30 |
| CVE-2026-69358 Use of uninitialized resource in Remote Desktop Client allows an authorized atta... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69360 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69359 Heap-based buffer overflow in Active Directory Domain Services allows an authori... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69805 External control of file name or path in .NET allows an unauthorized attacker to... |
high | 8.1 | — | Microsoft / microsoft.diagnostics.runtime | 2026-09-08 | 2026-09-29 |
| CVE-2026-69854 Improper authentication in Spring Cloud Azure allows an unauthorized attacker to... |
high | 8.1 | — | Microsoft / spring cloud | 2026-09-08 | 2026-09-29 |
| CVE-2026-70351 Integer overflow or wraparound in Microsoft WebP Image Extension allows an unaut... |
high | 8.8 | — | Microsoft / webp image extension | 2026-09-08 | 2026-09-29 |
| CVE-2026-77504 Double free in Microsoft Office Word allows an unauthorized attacker to execute... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-77897 Relative path traversal in Power Automate allows an authorized attacker to eleva... |
high | 7.0 | — | Microsoft / power automate for desktop | 2026-09-08 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.