September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-28636 In setupLayout of PickActivity.java, there is a possible bypass of the "Install... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28639 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28642 In executeRequest of ActivityStarter.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28644 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a poss... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28650 In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28653 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28655 In multiple functions of RemoteViews.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28620 In multiple locations, there is a possible unauthorized URI access due to a perm... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28624 In multiple locations, there is a possible read/write access to files without th... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28626 In onCreate of SetupPassthroughActivity.java, there is a possible way to launch... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28631 In buildMiniResolver of IntentForwarderActivity.java, there is a possible consen... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28609 In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28611 In multiple functions of NfcService.java, there is a possible silent payment ses... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28612 In resolveActivity of ActivityStarter.java, there is a possible way to perform I... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28613 In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an a... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28614 In onCreate of SlicePermissionActivity.java, there is a possible permission bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28616 In Setup Wizard, there is a possible way to force connection to a malicious netw... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28618 In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28593 In getItemList of SettingsFragment.java, there is a possible user interaction by... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28594 In multiple locations, there is a possible use after free due to a logic error i... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28599 In addCreatorToken of ActivityManagerService.java, there is a possible Intent Re... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28600 In onCreate of PaymentDefaultDialog.java, there is a possible way to change defa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28602 In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28603 In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a p... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28604 In multiple locations, there is a possible use after free due to a race conditio... |
high | 7.5 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28607 In multiple functions in multiple locations, there is a possible background acti... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28572 In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapj... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28583 In validate_camera_metadata_structure of camera_metadata.c, there is a possible... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28590 In multiple locations, there is a possible improper encryption key validation du... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-0084 In multiple functions of HostEmulationManager.java, there is a possible backgrou... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-0065 In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java,... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-86669 A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. |
high | 7.3 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-86673 A vulnerability was determined in ningzichun Student Management System up to 987... |
high | 7.3 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability |
high | 7.8 | Listed | Microsoft / Windows | 2026-09-08 | 2026-09-24 |
| CVE-2026-86074 n8n is an open source workflow automation platform. |
high | 7.1 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-85877 Heap-based buffer overflow in Windows Print Spooler Components allows an unautho... |
high | 8.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-09 |
| CVE-2026-85360 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-84001 Out-of-bounds read in Windows Key Distribution Center allows an unauthorized att... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-84003 Authentication bypass by capture-replay in Microsoft Authentication Library (MSA... |
high | 7.4 | — | Microsoft / azure\/msal-node | 2026-09-08 | 2026-09-16 |
| CVE-2026-83995 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.