September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-68891 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 4.7 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69345 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69303 Out-of-bounds read in Push Message Routing Service allows an authorized attacker... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69308 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69317 Out-of-bounds read in Remote Desktop Client allows an authorized attacker to dis... |
medium | 5.7 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69361 Server-side request forgery (ssrf) in Microsoft Exchange Server allows an author... |
medium | 6.5 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-29 |
| CVE-2026-77909 Insufficiently protected credentials in Azure CycleCloud allows an authorized at... |
medium | 6.5 | — | Microsoft / azure cyclecloud | 2026-09-08 | 2026-09-29 |
| CVE-2026-69367 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69376 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-62762 Null pointer dereference in Active Directory Domain Services allows an authorize... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-65812 Insertion of sensitive information into sent data in Microsoft Teams for Android... |
medium | 6.8 | — | Microsoft / teams | 2026-09-08 | 2026-09-29 |
| CVE-2026-68852 Use of uninitialized resource in Microsoft Account allows an authorized attacker... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68881 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68895 Numeric truncation error in Internet Storage Name Service allows an authorized a... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69375 Authorization bypass through user-controlled key in Microsoft Exchange Server al... |
medium | 6.5 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-29 |
| CVE-2026-69382 Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server al... |
medium | 5.9 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-29 |
| CVE-2026-69395 Use of externally-controlled format string in Active Directory Certificate Servi... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69559 Origin validation error in Microsoft Teams for Android allows an authorized atta... |
medium | 6.3 | — | Microsoft / teams | 2026-09-08 | 2026-09-29 |
| CVE-2026-68843 Use after free in Microsoft Office Word allows an authorized attacker to disclos... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-70582 Concurrent execution using shared resource with improper synchronization ('race... |
medium | 6.4 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-77492 Out-of-bounds read in Storage Port Driver allows an authorized attacker to discl... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-78516 Insertion of sensitive information into externally-accessible file or directory... |
medium | 4.3 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-77490 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 6.1 | — | Microsoft / edge chromium | 2026-09-11 | 2026-09-25 |
| CVE-2026-83946 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 6.1 | — | Microsoft / azure portal | 2026-09-18 | 2026-09-25 |
| CVE-2026-69449 Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to... |
medium | 6.7 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69453 Missing authorization in Microsoft Windows Search Component allows an authorized... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-78508 Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to d... |
medium | 4.6 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-78453 Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System Fi... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77892 No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to... |
medium | 6.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77887 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execu... |
medium | 6.4 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77891 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execu... |
medium | 6.4 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-73019 Improper resolution of path equivalence in Windows URL Moniker allows an unautho... |
medium | 4.3 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72985 Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized... |
medium | 6.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72966 Missing authorization in Windows Remote Access Connection Manager allows an auth... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72939 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) all... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72942 Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to d... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72935 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate priv... |
medium | 6.7 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72937 Out-of-bounds read in Storage Port Driver allows an authorized attacker to discl... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72931 Missing release of resource after effective lifetime in Windows Secure Socket Tu... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-71348 Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attac... |
medium | 6.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.