September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-70581 Integer overflow or wraparound in Windows Biometric Service allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-11 |
| CVE-2026-70565 Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70567 Double free in Windows Display Enhancement Service allows an authorized attacker... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-16 |
| CVE-2026-70568 Heap-based buffer overflow in Windows Defender Firewall Service allows an author... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70569 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to ele... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-16 |
| CVE-2026-70570 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70572 Integer overflow or wraparound in Windows Biometric Service allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-11 |
| CVE-2026-70351 Integer overflow or wraparound in Microsoft WebP Image Extension allows an unaut... |
high | 8.8 | — | Microsoft / webp image extension | 2026-09-08 | 2026-09-29 |
| CVE-2026-70562 Double free in Windows Audio Service allows an authorized attacker to elevate pr... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70563 Improper link resolution before file access ('link following') in Windows Shell... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70564 Heap-based buffer overflow in Windows Print Spooler Components allows an authori... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70334 Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorize... |
high | 7.8 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-70342 Use after free in Windows Ancillary Function Driver for WinSock allows an unauth... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70203 Heap-based buffer overflow in Windows Media Player allows an unauthorized attack... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70283 Incorrect authorization in Windows Win32K allows an authorized attacker to eleva... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70289 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorize... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69989 Use after free in DNS Server allows an unauthorized attacker to execute code ove... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70065 Missing release of memory after effective lifetime in Windows DHCP Server allows... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70124 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to dis... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69911 Use after free in Microsoft Windows Search Component allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69921 Heap-based buffer overflow in Windows Print Spooler Components allows an authori... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69929 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to dis... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69930 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to dis... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69907 Improper handling of insufficient permissions or privileges in Windows Enterpris... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69891 Use after free in Windows Media allows an authorized attacker to elevate privile... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69896 Use after free in Windows Error Reporting allows an authorized attacker to eleva... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69900 Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allow... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69906 Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized at... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69881 Null pointer dereference in Windows IKE Extension allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69889 Use after free in Windows Bluetooth Service allows an authorized attacker to ele... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69890 Use after free in Windows Virtual Trusted Platform Module allows an authorized a... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69875 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 8.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69876 Use after free in Windows DHCP Server allows an authorized attacker to execute c... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69858 Use after free in Windows DNS allows an unauthorized attacker to execute code ov... |
high | 8.1 | — | Microsoft / windows server 2022 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69859 Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class dri... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69860 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69864 Use after free in Windows Hello allows an authorized attacker to elevate privile... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69866 Use after free in Windows Device Association Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-16 |
| CVE-2026-69846 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorize... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69847 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.