September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84515 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84516 An out-of-bounds read was addressed with improved bounds checking. |
high | 8.1 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84505 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84506 A use after free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-10-20 |
| CVE-2026-84507 A race condition was addressed with improved state handling. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-84511 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84512 A buffer overflow was addressed with improved bounds checking. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-84497 A buffer overflow was addressed with improved size validation. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65415 A race condition was addressed with additional validation. |
high | 8.1 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65410 The issue was addressed with improved checks. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65398 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-65378 An authorization issue was addressed with improved state management. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-65390 An integer overflow was addressed with improved input validation. |
high | 8.8 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-65391 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.8 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-65362 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-65364 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-65374 A memory corruption issue was addressed with improved validation. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-65375 The issue was addressed with improved authentication. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-18 |
| CVE-2026-65354 A permissions issue was addressed with additional restrictions. |
high | 8.2 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-65357 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-65359 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-65342 A permissions issue was addressed with improved validation. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-65344 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-64790 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-64761 A privacy issue was addressed with improved handling of user preferences. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-64736 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-64752 A memory corruption issue was addressed by removing the vulnerable code. |
high | 7.3 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-64701 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64712 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43815 A buffer overflow was addressed with improved bounds checking. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-18 |
| CVE-2026-43783 A race condition was addressed with improved locking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43786 This issue was addressed with additional entitlement checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43789 An access issue was addressed with additional sandbox restrictions. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-43702 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-43688 A memory corruption issue was addressed with improved input validation. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-43689 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-43691 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43692 A validation issue was addressed with improved input sanitization. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43697 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-43683 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-09-14 | 2026-09-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.