September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-28657 In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible un... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28658 In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a l... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28662 In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of b... |
high | 8.0 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28663 In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28664 In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28666 In multiple functions of LocalImageResolver.java, there is a possible Remote Per... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28668 In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28634 In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to s... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28636 In setupLayout of PickActivity.java, there is a possible bypass of the "Install... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28639 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28642 In executeRequest of ActivityStarter.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28644 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a poss... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28650 In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28653 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28655 In multiple functions of RemoteViews.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28620 In multiple locations, there is a possible unauthorized URI access due to a perm... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28624 In multiple locations, there is a possible read/write access to files without th... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28626 In onCreate of SetupPassthroughActivity.java, there is a possible way to launch... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28631 In buildMiniResolver of IntentForwarderActivity.java, there is a possible consen... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28609 In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28611 In multiple functions of NfcService.java, there is a possible silent payment ses... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28612 In resolveActivity of ActivityStarter.java, there is a possible way to perform I... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28613 In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an a... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28614 In onCreate of SlicePermissionActivity.java, there is a possible permission bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28616 In Setup Wizard, there is a possible way to force connection to a malicious netw... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28618 In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28593 In getItemList of SettingsFragment.java, there is a possible user interaction by... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28594 In multiple locations, there is a possible use after free due to a logic error i... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28599 In addCreatorToken of ActivityManagerService.java, there is a possible Intent Re... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28600 In onCreate of PaymentDefaultDialog.java, there is a possible way to change defa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28602 In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28603 In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a p... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28604 In multiple locations, there is a possible use after free due to a race conditio... |
high | 7.5 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28607 In multiple functions in multiple locations, there is a possible background acti... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28572 In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapj... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28583 In validate_camera_metadata_structure of camera_metadata.c, there is a possible... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28590 In multiple locations, there is a possible improper encryption key validation du... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-0084 In multiple functions of HostEmulationManager.java, there is a possible backgrou... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-0065 In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java,... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-85053 Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.... |
high | 8.8 | — | Google / chrome | 2026-09-03 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.