September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69379 Improper link resolution before file access ('link following') in Windows NTFS a... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69599 Use after free in Windows Remote Desktop Services allows an authorized attacker... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-14 |
| CVE-2026-68884 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69501 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69536 Use after free in Windows Remote Desktop Services allows an authorized attacker... |
high | 7.1 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-14 |
| CVE-2026-58611 Improper authorization in XBox Gaming Services allows an authorized attacker to... |
high | 7.8 | — | Microsoft / xbox gaming services | 2026-09-08 | 2026-09-14 |
| CVE-2026-69293 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69738 Integer overflow or wraparound in Windows Biometric Service allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69826 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-83948 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.0 | — | Microsoft / vm repair | 2026-09-08 | 2026-09-14 |
| CVE-2026-72991 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-83987 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83981 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83982 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83983 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83985 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83971 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83977 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83980 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83954 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83967 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83970 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-72996 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-73002 Integer overflow or wraparound in Windows Biometric Service allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-73007 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-78448 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83997 Use after free in Windows Message Queuing allows an unauthorized attacker to exe... |
high | 8.1 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-11 |
| CVE-2026-83990 Stack-based buffer overflow in Microsoft Graphics Component allows an authorized... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-11 |
| CVE-2026-78444 Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized... |
high | 8.1 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-11 |
| CVE-2026-73017 Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attac... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-11 |
| CVE-2026-70334 Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorize... |
high | 7.8 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-78461 Improper limitation of a pathname to a restricted directory ('path traversal') i... |
high | 7.4 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-78462 Authorization bypass through user-controlled key in Visual Studio Code allows an... |
high | 8.8 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-81356 Inconsistent interpretation of http requests ('http request/response smuggling')... |
high | 8.2 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-81357 Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized... |
high | 8.2 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-81378 Interpretation conflict in Visual Studio Code allows an unauthorized attacker to... |
high | 8.2 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-81379 Not failing securely ('failing open') in Visual Studio Code allows an unauthoriz... |
high | 8.2 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-11 |
| CVE-2026-72992 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-11 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.