September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-58823 In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58839 In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58846 In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a miss... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58848 In multiple functions of alloc.c, there is a possible unauthorized read/write ac... |
high | 7.0 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-45528 In getManageSpaceActivityIntent of StorageManagerService.java, there is a possib... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49918 In multiple functions, there is a possible out of bounds write due to an integer... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49919 In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code executi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49927 In multiple locations, there is a possible out of bounds write due to an integer... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49932 In parseParts of PduParser.java, there is a possible out of bounds read due to a... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-45515 In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-45520 In onAttach of BiometricsSettingsBase.java, there is a possible authentication b... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-28663 In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28664 In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28666 In multiple functions of LocalImageResolver.java, there is a possible Remote Per... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28668 In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-45531 In read_boot_region of fsck.c, there is a possible out of bounds read due to a h... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49879 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49881 In serviceClassExists of InCallController.java, there is a possible arbitrary co... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49882 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue d... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49884 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49887 In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a po... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-0159 In Cellular Modem, there is a possible out-of-bounds write due to a missing boun... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0170 In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds wri... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0171 In multiple locations, there is a possible out-of-bounds write due to a logic er... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0189 In ac_init_policy of init.c, there is a possible permission bypass due to a logi... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0194 In multiple locations, there is a possible permission bypass due to an integer o... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0199 In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds writ... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0200 In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55301 In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55306 In Cellular Modem, there is a possible denial of service due to improper input v... |
high | 7.5 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55318 In multiple locations, there is a possible use-after-free due to a race conditio... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55323 In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds wr... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55331 In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an in... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55343 In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write... |
high | 8.0 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55351 In VPU, there is a possible out-of-bounds write due to an integer overflow. |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55359 In multiple locations, there is a possible permission bypass due to a logic erro... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56881 In enable_segment of remap.c, there is a possible permission bypass due to a log... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56882 In Cellular Modem, there is a possible information disclosure due to a logic err... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56920 In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56967 In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer... |
high | 8.0 | — | Google / android | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.