September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-58710 In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-58724 In multiple locations, there is a possible use-after-free due to a race conditio... |
high | 7.0 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-58678 In Bootloader, there is a possible permission bypass due to a logic error in the... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-58679 In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overfl... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-58683 In IP Multimedia Subsystem, there is a possible out-of-bounds write due to impro... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-58691 In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-58695 In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escala... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56997 In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds wri... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-57008 In Modem, there is a possible information disclosure due to improper input valid... |
high | 7.5 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-57012 In the Setup Wizard, there is a possible remote package install due to a missing... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-57014 In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possib... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56970 In multiple locations, there is a possible permission bypass due to a missing pe... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56974 In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds wr... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56978 In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read d... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56982 In VPU, there is a possible permission bypass due to a missing permission check. |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56985 In multiple files, there is a possible way to obtain signatures due to type conf... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56986 In multiple files, there is a possible out-of-bounds read due to type confusion. |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-18 |
| CVE-2026-56941 In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due t... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56942 In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write du... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56945 In VPU, there is a possible out-of-bounds write due to a confused deputy. |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56967 In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer... |
high | 8.0 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56914 In multiple locations, there is a possible use-after-free due to improper lockin... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56920 In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56882 In Cellular Modem, there is a possible information disclosure due to a logic err... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56881 In enable_segment of remap.c, there is a possible permission bypass due to a log... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55306 In Cellular Modem, there is a possible denial of service due to improper input v... |
high | 7.5 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55318 In multiple locations, there is a possible use-after-free due to a race conditio... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55323 In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds wr... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55331 In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an in... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55343 In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write... |
high | 8.0 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55351 In VPU, there is a possible out-of-bounds write due to an integer overflow. |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55359 In multiple locations, there is a possible permission bypass due to a logic erro... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-55301 In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0199 In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds writ... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0200 In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0171 In multiple locations, there is a possible out-of-bounds write due to a logic er... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0189 In ac_init_policy of init.c, there is a possible permission bypass due to a logi... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0194 In multiple locations, there is a possible permission bypass due to an integer o... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0159 In Cellular Modem, there is a possible out-of-bounds write due to a missing boun... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-0170 In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds wri... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.