September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69493 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attac... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69463 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69431 Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69408 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an u... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69356 Improper neutralization of input during web page generation ('cross-site scripti... |
critical | 9.3 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-30 |
| CVE-2026-69276 Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-68839 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an un... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-67643 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
critical | 9.8 | — | Microsoft / sql server 2022 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67631 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
critical | 9.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67636 Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code... |
critical | 9.0 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67378 Untrusted pointer dereference in SQL Server allows an unauthorized attacker to e... |
critical | 9.0 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-17 |
| CVE-2026-65669 Improper neutralization of special elements in output used by a downstream compo... |
critical | 9.6 | — | Microsoft / sql server management studio | 2026-09-08 | 2026-10-07 |
| CVE-2026-70352 Missing authentication for critical function in Azure AI Language allows an unau... |
critical | 10.0 | — | Microsoft / azure ai language authoring | 2026-09-03 | 2026-10-14 |
| CVE-2026-80098 Improper verification of cryptographic signature in Copilot Studio allows an una... |
critical | 10.0 | — | Microsoft / copilot studio | 2026-09-03 | 2026-09-08 |
| CVE-2026-83711 Authorization bypass through user-controlled key in Microsoft Azure Active Direc... |
critical | 10.0 | — | Microsoft / azure active directory b2c | 2026-09-03 | 2026-10-14 |
| CVE-2026-62916 Authentication bypass using an alternate path or channel in Microsoft Entra ID a... |
critical | 9.8 | — | Microsoft / entra id | 2026-09-03 | 2026-09-08 |
| CVE-2026-65818 Server-side request forgery (ssrf) in Power Automate allows an authorized attack... |
critical | 9.9 | — | Microsoft / power platform | 2026-09-03 | 2026-09-08 |
| CVE-2026-100208 Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorize... |
high | 8.1 | — | Microsoft / 365 apps | 2026-09-25 | 2026-10-28 |
| CVE-2026-70125 Microsoft Office Outlook Remote Code Execution Vulnerability |
high | 8.8 | — | Microsoft / 365 apps | 2026-09-23 | 2026-10-05 |
| CVE-2026-88097 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke... |
high | 7.8 | — | Microsoft / edge chromium | 2026-09-18 | 2026-09-24 |
| CVE-2026-85887 Incorrect permission assignment for critical resource in M365 Copilot allows an... |
high | 7.7 | — | Microsoft / 365 copilot | 2026-09-18 | 2026-09-28 |
| CVE-2026-85885 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.8 | — | Microsoft / 365 copilot | 2026-09-17 | 2026-09-25 |
| CVE-2026-85917 Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized at... |
high | 7.5 | — | Microsoft / foundry | 2026-09-17 | 2026-09-25 |
| CVE-2026-78501 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.6 | — | Microsoft / 365 copilot chat | 2026-09-17 | 2026-10-14 |
| CVE-2026-77903 Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized... |
high | 8.1 | — | Microsoft / dataverse | 2026-09-17 | 2026-09-25 |
| CVE-2026-68791 Incorrect authorization in Azure Machine Learning allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / azure machine learning | 2026-09-17 | 2026-09-25 |
| CVE-2026-85893 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / edge chromium | 2026-09-15 | 2026-09-25 |
| CVE-2026-69486 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | Microsoft / edge chromium | 2026-09-15 | 2026-09-25 |
| CVE-2026-85921 Double free in Windows Secure Kernel Mode allows an authorized attacker to eleva... |
high | 8.2 | — | Microsoft / windows 11 26h1 | 2026-09-14 | 2026-09-29 |
| CVE-2026-85892 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / edge chromium | 2026-09-14 | 2026-09-25 |
| CVE-2026-70341 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker... |
high | 8.8 | — | Microsoft / edge | 2026-09-11 | 2026-10-28 |
| CVE-2026-69646 Improper verification of cryptographic signature in Skype for Business allows an... |
high | 8.3 | — | Microsoft / skype for business server | 2026-09-08 | 2026-09-16 |
| CVE-2026-66305 Use of client-side authentication in Skype for Business allows an authorized att... |
high | 7.1 | — | Microsoft / skype for business server | 2026-09-08 | 2026-09-16 |
| CVE-2026-66307 Integer underflow (wrap or wraparound) in Skype for Business allows an unauthori... |
high | 7.5 | — | Microsoft / skype for business server | 2026-09-08 | 2026-09-16 |
| CVE-2026-66304 Server-side request forgery (ssrf) in Skype for Business allows an unauthorized... |
high | 7.5 | — | Microsoft / skype for business server | 2026-09-08 | 2026-09-16 |
| CVE-2026-85877 Heap-based buffer overflow in Windows Print Spooler Components allows an unautho... |
high | 8.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-09 |
| CVE-2026-85360 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-84001 Out-of-bounds read in Windows Key Distribution Center allows an unauthorized att... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-84003 Authentication bypass by capture-replay in Microsoft Authentication Library (MSA... |
high | 7.4 | — | Microsoft / azure\/msal-node | 2026-09-08 | 2026-09-16 |
| CVE-2026-83995 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.