September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87579 Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87542 Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87553 Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87530 Uncontrolled search path element in CredentialProvider in Google Chrome on on Wi... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87514 Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87524 Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 all... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a r... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87509 Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87510 Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 all... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87481 Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87487 Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allo... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87489 Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87467 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87479 Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.80... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87480 Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a rem... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87440 Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87444 Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87457 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87460 Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87430 Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-85045 Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote at... |
high | 7.5 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85048 Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a... |
high | 8.3 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85049 Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85051 Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a... |
high | 8.8 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-85053 Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.... |
high | 8.8 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
| CVE-2026-84350 Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84351 Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 all... |
high | 8.3 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84347 Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84349 Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remo... |
high | 8.3 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84326 Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84334 Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 15... |
high | 8.1 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-84335 Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allo... |
high | 8.3 | — | Google / chrome | 2026-09-02 | 2026-09-03 |
| CVE-2026-102310 Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowe... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102312 UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.80... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95371 Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95309 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95307 UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 a... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95294 UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95296 Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95305 UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allow... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.