September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-65415 A race condition was addressed with additional validation. |
high | 8.1 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65410 The issue was addressed with improved checks. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-65398 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-65378 An authorization issue was addressed with improved state management. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-65390 An integer overflow was addressed with improved input validation. |
high | 8.8 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-65391 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.8 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-65362 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-65364 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-65374 A memory corruption issue was addressed with improved validation. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-65375 The issue was addressed with improved authentication. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-18 |
| CVE-2026-65354 A permissions issue was addressed with additional restrictions. |
high | 8.2 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-65357 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-65359 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-18 |
| CVE-2026-65342 A permissions issue was addressed with improved validation. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-65344 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-64790 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-64761 A privacy issue was addressed with improved handling of user preferences. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-64736 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-64752 A memory corruption issue was addressed by removing the vulnerable code. |
high | 7.3 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-64701 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64712 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43815 A buffer overflow was addressed with improved bounds checking. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-18 |
| CVE-2026-53714 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone... |
high | 7.4 | — | — | 2026-09-14 | 2026-09-30 |
| CVE-2026-43783 A race condition was addressed with improved locking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43786 This issue was addressed with additional entitlement checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43789 An access issue was addressed with additional sandbox restrictions. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-43702 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-43688 A memory corruption issue was addressed with improved input validation. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-43689 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-43691 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43692 A validation issue was addressed with improved input sanitization. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43697 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-09-14 | 2026-09-17 |
| CVE-2026-43683 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-09-14 | 2026-09-18 |
| CVE-2026-43684 A use-after-free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-43686 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-28935 The issue was addressed with improved memory handling. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-28938 A privacy issue was addressed by moving sensitive data. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
| CVE-2026-28960 A denial-of-service issue was addressed with improved validation. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-19290 IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0... |
high | 7.5 | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-20683 An authentication issue was addressed with improved state management. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-17 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.