September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87514 Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87505 Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 al... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a r... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87509 Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87499 Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allow... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability |
high | 8.8 | Listed | Google / Chromium V8 | 2026-09-09 | 2026-09-21 |
| CVE-2026-87487 Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allo... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87489 Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87479 Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.80... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87480 Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a rem... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87481 Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0... |
high | 8.3 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87467 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87471 Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87457 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36... |
high | 8.1 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87460 Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87450 Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 a... |
high | 7.5 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87440 Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87444 Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87430 Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87431 Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allo... |
high | 7.5 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87433 Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-53938 OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encr... |
high | 8.2 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-19201 An uncontrolled recursion vulnerability in the Windows SIPA event log parser of... |
high | 7.5 | — | Google / go-attestation | 2026-09-09 | 2026-09-24 |
| CVE-2026-86083 n8n is an open source workflow automation platform. |
high | 8.8 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-86075 n8n is an open source workflow automation platform. |
high | 7.5 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-86076 n8n is an open source workflow automation platform. |
high | 8.8 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-85983 The Auth0 AD/LDAP Connector improperly processes a configuration value during se... |
high | 7.8 | — | — | 2026-09-08 | 2026-09-10 |
| CVE-2026-86819 Waves Central for macOS contains a local privilege escalation in the privileged... |
high | 7.1 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-81996 Acrobat Reader is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81985 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81986 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81987 Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability th... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81988 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81989 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81990 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81992 Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81976 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81979 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81980 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81981 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.