September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-13466 Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-13467 Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Explo... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58004 Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privil... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58005 Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privil... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58006 Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS al... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58007 Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS al... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58008 Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allo... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-95985 The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remot... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-55294 In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-69397 Use after free in OpenSSH for Windows allows an unauthorized attacker to execute... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69398 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-75743 Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (... |
high | 7.1 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-69429 Heap-based buffer overflow in Windows IKE Extension allows an authorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69430 Use after free in Windows Embedded Mode Service allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69809 Missing release of memory after effective lifetime in Active Directory Domain Se... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69801 Heap-based buffer overflow in Windows Audio Service allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69799 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69563 Heap-based buffer overflow in Windows Program Compatibility Assistant Service al... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-58874 In multiple functions of SmsController.java, there is a possible escalation of p... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-69553 Missing authorization in Windows Hyper-V allows an authorized attacker to elevat... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69544 Heap-based buffer overflow in Windows SMB Client allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 11 26h1 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69542 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an auth... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69540 Use after free in Windows Audio Service allows an authorized attacker to elevate... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68844 Heap-based buffer overflow in Windows Storage Spaces Controller allows an author... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68877 Heap-based buffer overflow in Windows Storage Spaces Controller allows an author... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68896 Absolute path traversal in Microsoft Windows Search Component allows an authoriz... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-58941 In multiple functions of iommu.c, there is a possible out of bounds read/write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-19201 An uncontrolled recursion vulnerability in the Windows SIPA event log parser of... |
high | 7.5 | — | Google / go-attestation | 2026-09-09 | 2026-09-24 |
| CVE-2026-69280 Use after free in Windows Push Notifications allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-91122 Discourse is an open-source discussion platform. |
high | 8.7 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-91123 Discourse is an open-source discussion platform. |
high | 7.2 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-78512 Numeric truncation error in Microsoft Office Word allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-24 |
| CVE-2026-69732 Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol all... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69535 Numeric truncation error in Windows Spaceport.sys allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69534 Improper neutralization of special elements used in a command ('command injectio... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69300 Use after free in Windows Push Notifications allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69383 External control of file name or path in Windows Shell allows an authorized atta... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-58820 In multiple locations, there is a possible memory safety issue due to integer ov... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58823 In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-58839 In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.