September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77908 Improper control of generation of code ('code injection') in Microsoft Dynamics... |
high | 8.8 | — | Microsoft / dynamics 365 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69605 Use after free in Microsoft Install Service allows an authorized attacker to ele... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-85921 Double free in Windows Secure Kernel Mode allows an authorized attacker to eleva... |
high | 8.2 | — | Microsoft / windows 11 26h1 | 2026-09-14 | 2026-09-29 |
| CVE-2026-69611 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized a... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69365 Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows... |
high | 8.0 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-56198 Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68828 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68850 Heap-based buffer overflow in Microsoft Account allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68885 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68888 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69378 Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attac... |
high | 7.5 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-29 |
| CVE-2026-69380 Missing authorization in Microsoft Exchange Server allows an authorized attacker... |
high | 8.1 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-29 |
| CVE-2026-69401 Use after free in Audio Video Control Transport Protocol allows an authorized at... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69407 Integer overflow or wraparound in Volume Manager Driver allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69418 Heap-based buffer overflow in Volume Manager Driver allows an authorized attacke... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69432 Heap-based buffer overflow in Volume Manager Driver allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69438 Incorrect conversion between numeric types in Microsoft JScript allows an unauth... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69806 Exposure of sensitive information to an unauthorized actor in .NET allows an aut... |
high | 7.0 | — | Microsoft / .net | 2026-09-08 | 2026-09-29 |
| CVE-2026-69439 Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized atta... |
high | 8.8 | — | Microsoft / .net | 2026-09-08 | 2026-09-29 |
| CVE-2026-69485 Use of uninitialized resource in Remote Desktop Client allows an authorized atta... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69516 Use after free in Connected Devices Platform Service (Cdpsvc) allows an authoriz... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69530 Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unautho... |
high | 8.1 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69384 Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an un... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-70583 Heap-based buffer overflow in Windows Core Messaging allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-77505 Use after free in DNS Server allows an unauthorized attacker to execute code ove... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-77896 Integer overflow or wraparound in Remote Desktop Client allows an unauthorized a... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69499 Integer overflow or wraparound in Windows Imaging Component allows an unauthoriz... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69498 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-28 |
| CVE-2026-85887 Incorrect permission assignment for critical resource in M365 Copilot allows an... |
high | 7.7 | — | Microsoft / 365 copilot | 2026-09-18 | 2026-09-28 |
| CVE-2026-62744 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut... |
high | 8.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69459 Heap-based buffer overflow in Windows Power Dependency Coordinator allows an aut... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69460 Use after free in Windows Modern Device Management (MDM) allows an authorized at... |
high | 7.1 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69462 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69468 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69470 Use after free in Windows Connected User Experiences and Telemetry allows an aut... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69472 Use after free in Windows Devices Human Interface allows an authorized attacker... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69478 Heap-based buffer overflow in Windows Device Association Service allows an autho... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69480 Heap-based buffer overflow in Windows Partition Management Driver allows an auth... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69481 Heap-based buffer overflow in Windows Enterprise App Management allows an author... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69482 Creation of temporary file in directory with insecure permissions in Windows Err... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.