September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69544 Heap-based buffer overflow in Windows SMB Client allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 11 26h1 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69542 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an auth... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69540 Use after free in Windows Audio Service allows an authorized attacker to elevate... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68844 Heap-based buffer overflow in Windows Storage Spaces Controller allows an author... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68877 Heap-based buffer overflow in Windows Storage Spaces Controller allows an author... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68896 Absolute path traversal in Microsoft Windows Search Component allows an authoriz... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-58941 In multiple functions of iommu.c, there is a possible out of bounds read/write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-19201 An uncontrolled recursion vulnerability in the Windows SIPA event log parser of... |
high | 7.5 | — | Google / go-attestation | 2026-09-09 | 2026-09-24 |
| CVE-2026-69280 Use after free in Windows Push Notifications allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-91122 Discourse is an open-source discussion platform. |
high | 8.7 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-91123 Discourse is an open-source discussion platform. |
high | 7.2 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-78512 Numeric truncation error in Microsoft Office Word allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-24 |
| CVE-2026-69732 Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol all... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69535 Numeric truncation error in Windows Spaceport.sys allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69534 Improper neutralization of special elements used in a command ('command injectio... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69300 Use after free in Windows Push Notifications allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69383 External control of file name or path in Windows Shell allows an authorized atta... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-58820 In multiple locations, there is a possible memory safety issue due to integer ov... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58823 In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58839 In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58846 In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a miss... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58848 In multiple functions of alloc.c, there is a possible unauthorized read/write ac... |
high | 7.0 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-93759 Mongoid does not neutralize a string-typed query criterion supplied to its query... |
high | 8.6 | — | Mongodb / mongoid | 2026-09-18 | 2026-09-24 |
| CVE-2026-96898 A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. |
high | 7.3 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-96601 A vulnerability was detected in Abdurrab5 online-makeup-store. |
high | 7.3 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-61570 MPXJ is an open source library to read and write project plans from a variety of... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-63203 Logto is the modern, open-source auth infrastructure for SaaS and AI apps. |
high | 7.6 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-93760 Mongoid does not restrict which query operators may come from caller-supplied fi... |
high | 8.2 | — | Mongodb / mongoid | 2026-09-18 | 2026-09-24 |
| CVE-2026-93761 An inefficient regular expression complexity issue in the in-memory query evalua... |
high | 7.5 | — | Mongodb / mongoid | 2026-09-18 | 2026-09-24 |
| CVE-2026-45528 In getManageSpaceActivityIntent of StorageManagerService.java, there is a possib... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49918 In multiple functions, there is a possible out of bounds write due to an integer... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49919 In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code executi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49927 In multiple locations, there is a possible out of bounds write due to an integer... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-49932 In parseParts of PduParser.java, there is a possible out of bounds read due to a... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-69386 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut... |
high | 8.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-45515 In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-69388 Use after free in Windows Bluetooth Service allows an authorized attacker to ele... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-45520 In onAttach of BiometricsSettingsBase.java, there is a possible authentication b... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-97182 A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. |
high | 7.3 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-85682 The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in al... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.