September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-95346 UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allow... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95336 Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.5... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95337 UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95340 Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95342 Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95327 Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95328 Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95330 Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 a... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95332 Use of uninitialized variable in Tint in Google Chrome on on Android prior to 15... |
medium | 4.7 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95320 Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allo... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95321 UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95323 UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95309 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95303 Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95305 UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allow... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95307 UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 a... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95293 Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a... |
medium | 4.7 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95294 UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95295 Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 all... |
medium | 4.6 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95296 Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95297 Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.5... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95300 Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowe... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95287 Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allo... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95288 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95289 Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowe... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95290 Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95291 UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 1... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95292 Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95279 UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.80... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95275 Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.80... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-13018 Insufficient validation of untrusted input in Codecs in Google Chrome prior to 1... |
medium | 4.3 | — | Google / chrome | 2026-09-28 | 2026-09-29 |
| CVE-2026-93387 Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowe... |
medium | 4.3 | — | Google / chrome | 2026-09-17 | 2026-09-18 |
| CVE-2026-93379 Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-09-17 | 2026-09-30 |
| CVE-2026-93383 Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-17 | 2026-09-18 |
| CVE-2026-93385 Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remo... |
medium | 6.5 | — | Google / chrome | 2026-09-17 | 2026-09-18 |
| CVE-2026-93386 UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 a... |
medium | 5.4 | — | Google / chrome | 2026-09-17 | 2026-09-18 |
| CVE-2026-93376 Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allow... |
medium | 6.3 | — | Google / chrome | 2026-09-17 | 2026-09-21 |
| CVE-2026-91744 Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.... |
medium | 5.3 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-91746 Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-91739 Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8... |
medium | 4.2 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.