Search CVEs, research… / diras.sa

ARCHIVE

CVEs published in September 2026

Vulnerabilities added to CVE Radar in September 2026, newest first.

  1. CVE-2026-28606
    Android pairing bypass lets remote attacker escalate privileges Google Android ·
    CRITICAL 9.8
  2. CVE-2026-49921
    Android heap buffer overflow remote code execution Google Android ·
    CRITICAL 9.8
  3. CVE-2026-58822
    Android ftsmooth improper casting remote code execution Google Android ·
    CRITICAL 9.8
  4. CVE-2026-87534
    Chrome WebView missing authorization allows bypass via crafted network traffic Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  5. CVE-2026-87544
    Chrome incorrect authorization allows access to privileged Extensions page Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  6. CVE-2026-87595
    Chrome server-side request forgery in Mobile via crafted HTML Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  7. CVE-2026-85025
    Langflow OSS unauthenticated code execution via public MCP endpoints IBM Langflow OSS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  8. CVE-2026-79724
    Langflow OSS command injection allows remote OS command execution IBM Langflow OSS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  9. CVE-2026-81204
    Langflow OSS code injection during graph construction allows remote code execution IBM Langflow OSS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  10. CVE-2026-65414
    IOS and iPadOS out-of-bounds write remote code execution Apple iOS and iPadOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  11. CVE-2026-84520
    MacOS kernel buffer overflow lets local attacker corrupt kernel memory Apple macOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  12. CVE-2026-84561
    IOS and iPadOS double free lets remote code execution / kernel corruption Apple iOS and iPadOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  13. CVE-2026-84609
    IOS and iPadOS permissions bug lets an app modify protected system files Apple iOS and iPadOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  14. CVE-2026-92036
    Firefox memory-safety flaw in HTTP networking allows remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  15. CVE-2026-92037
    Firefox DOM animation boundary bug allows pre-auth remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  16. CVE-2026-92061
    Firefox process sandboxing buffer overflow remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  17. CVE-2026-92066
    Firefox sandbox escape leading to remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  18. CVE-2026-55366
    Android kernel IMS authentication bypass remote privilege escalation Google Android ·
    CRITICAL 9.8
  19. CVE-2026-56960
    Android kernel use-after-free remote privilege escalation Google Android ·
    CRITICAL 9.8
  20. CVE-2026-69399
    Azure ARC elevation of privilege via network Microsoft Azure ARC ·
    • PATCH AVAILABLE
    CRITICAL 9.8
20 CVEs · page 11 of 23