September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77895 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77896 Integer overflow or wraparound in Remote Desktop Client allows an unauthorized a... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-77897 Relative path traversal in Power Automate allows an authorized attacker to eleva... |
high | 7.0 | — | Microsoft / power automate for desktop | 2026-09-08 | 2026-09-29 |
| CVE-2026-77898 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker t... |
high | 7.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-17 |
| CVE-2026-77886 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77888 Access of resource using incompatible type ('type confusion') in Windows DHCP Se... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77889 Access of resource using incompatible type ('type confusion') in Windows DHCP Se... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77890 Access of resource using incompatible type ('type confusion') in Windows DHCP Se... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77501 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77502 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77503 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate pr... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77504 Double free in Microsoft Office Word allows an unauthorized attacker to execute... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-77505 Use after free in DNS Server allows an unauthorized attacker to execute code ove... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-77498 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77499 Access of resource using incompatible type ('type confusion') in Windows DHCP Se... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77500 Release of invalid pointer or reference in Windows Device Association Service al... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-16 |
| CVE-2026-77494 Access of resource using incompatible type ('type confusion') in Windows DHCP Se... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77495 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77484 Deserialization of untrusted data in SQL Server allows an authorized attacker to... |
high | 8.8 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77485 Use after free in SQL Server allows an authorized attacker to elevate privileges... |
high | 7.0 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77486 Integer overflow or wraparound in SQL Server allows an unauthorized attacker to... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77487 Improper access control in SQL Server allows an authorized attacker to elevate p... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77489 Null pointer dereference in Windows Biometric Service allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-11 |
| CVE-2026-76191 Animate is affected by an Improper Control of Generation of Code ('Code Injectio... |
high | 8.2 | — | Adobe / animate | 2026-09-08 | 2026-09-15 |
| CVE-2026-76196 Photoshop Mobile is affected by a Session Fixation vulnerability that could resu... |
high | 7.4 | — | Adobe / photoshop mobile | 2026-09-08 | 2026-09-09 |
| CVE-2026-77480 Insufficient granularity of access control in SQL Server allows an authorized at... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77481 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77482 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-77483 Weak authentication in SQL Server allows an authorized attacker to elevate privi... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-73023 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-73024 Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-73026 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-10 |
| CVE-2026-73028 Improper access control in SQL Server allows an authorized attacker to elevate p... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-73017 Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attac... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-11 |
| CVE-2026-73018 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to e... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-73020 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-11 |
| CVE-2026-73021 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-10 |
| CVE-2026-73022 Use after free in Windows Modern Device Management (MDM) allows an authorized at... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-16 |
| CVE-2026-73011 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-10 |
| CVE-2026-73012 Heap-based buffer overflow in Windows Management Services allows an authorized a... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.