September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87600 Improper input validation in Safebrowsing in Google Chrome on on Android prior t... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87602 Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.3... |
medium | 4.7 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87603 Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allo... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87605 Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowe... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87591 Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 al... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87592 Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87593 Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87594 Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87596 Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87597 UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0... |
medium | 4.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87598 Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87599 Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.... |
medium | 5.4 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87583 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.... |
medium | 5.4 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87584 Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87586 Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87589 Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87590 Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 a... |
medium | 5.9 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87573 Improper input validation in Network in Google Chrome prior to 153.0.8010.36 all... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87574 Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowe... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87575 Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowe... |
medium | 5.4 | — | Google / chrome | 2026-09-09 | 2026-09-14 |
| CVE-2026-87577 Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allo... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87580 Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.3... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-11 |
| CVE-2026-87564 Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote at... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87565 Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87566 Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87567 UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 al... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87568 Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 al... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87571 Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.3... |
medium | 5.4 | — | Google / chrome | 2026-09-09 | 2026-09-14 |
| CVE-2026-87555 Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010... |
medium | 4.7 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87556 Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87557 Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87559 UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a rem... |
medium | 4.2 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87560 Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87561 Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.80... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87562 Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87563 Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87545 Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 all... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87546 Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac pri... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-14 |
| CVE-2026-87548 Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 a... |
medium | 4.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87549 Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.