By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 20 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-28657No exploit	In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28658No exploit	In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
32Monitor	CVE-2026-28662No exploit	In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.google · android · CWE-122 Memory safety	High8.0	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28663No exploit	In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypassgoogle · android · CWE-863 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28664No exploit	In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
35Monitor	CVE-2026-28666No exploit	In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering checkgoogle · android · CWE-863 Broken access control (IDOR)	High8.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-28668No exploit	In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-45515No exploit	In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overfgoogle · android · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-45520No exploit	In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.google · android · CWE-441 Auth bypass Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
29Monitor	CVE-2026-45528No exploit	In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.google · android · CWE-926 Local privilege escalation	High7.3	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-45531No exploit	In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.google · android · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
35Monitor	CVE-2026-49879No exploit	In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.google · android · CWE-787 RCE Memory safety	High8.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-49881Proof of concept	In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code.google · android · CWE-693 RCE Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
35Monitor	CVE-2026-49882No exploit	In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow.google · android · CWE-122 RCE Memory safety	High8.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-49884No exploit	In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check.google · android · CWE-120 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-49887No exploit	In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.google · android · CWE-288 Auth bypass Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-49918No exploit	In multiple functions, there is a possible out of bounds write due to an integer overflow.google · android · CWE-787 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-49919No exploit	In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow.google · android · CWE-190 RCE Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
39Monitor	CVE-2026-49921No exploit	In multiple locations, there is a possible memory safety issue due to a heap buffer overflow.google · android · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-49927No exploit	In multiple locations, there is a possible out of bounds write due to an integer overflow.google · android · CWE-190 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-49932No exploit	In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow.google · android · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-55273No exploit	In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation.google · android · CWE-20 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
32Monitor	CVE-2026-55277No exploit	In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check.google · android · CWE-120 Memory safety	High8.0	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-55285No exploit	In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-120 Local privilege escalation Memory safety	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-55294No exploit	In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow.google · android · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-58820No exploit	In multiple locations, there is a possible memory safety issue due to integer overflow.google · android · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
39Monitor	CVE-2026-58822No exploit	In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting.google · android · CWE-704 pre-auth RCE	Critical9.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-58823No exploit	In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check.google · android · CWE-120 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-58839No exploit	In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow.google · android · CWE-120 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-58846No exploit	In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check.google · android · CWE-269 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
28Monitor	CVE-2026-58848No exploit	In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition.google · android · CWE-362 Local privilege escalation Race condition	High7.0	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-58874No exploit	In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check.google · android · CWE-269 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-58941No exploit	In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation.google · android · CWE-20 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
30Monitor	CVE-2026-66304No exploit	Skype for Business Information Disclosure Vulnerabilitymicrosoft · skype for business server · CWE-918 Pre-auth SSRF	High7.5	—	0.9%	Sep 8, 2026
28Monitor	CVE-2026-66305No exploit	Skype for Business Spoofing Vulnerabilitymicrosoft · skype for business server · CWE-603	High7.1	—	0.5%	Sep 8, 2026
30Monitor	CVE-2026-66307No exploit	Skype for Business and Lync Denial of Service Vulnerabilitymicrosoft · skype for business server · CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	1.1%	Sep 8, 2026
33Monitor	CVE-2026-69646No exploit	Skype for Business Spoofing Vulnerabilitymicrosoft · skype for business server · CWE-347 Pre-auth Weak crypto	High8.3	—	0.3%	Sep 8, 2026
37Monitor	CVE-2026-76200No exploit	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)adobe · magento · CWE-79 Pre-auth XSS	Critical9.3	—	0.7%	Sep 8, 2026
37Monitor	CVE-2026-76201No exploit	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 Pre-auth XSS	Critical9.3	—	0.7%	Sep 8, 2026
32Monitor	CVE-2026-76202No exploit	Adobe Commerce \| Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 Pre-auth Broken access control (IDOR)	High8.2	—	0.6%	Sep 8, 2026
30Monitor	CVE-2026-77108No exploit	Adobe Commerce \| Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.8%	Sep 8, 2026
34Monitor	CVE-2026-77109No exploit	Adobe Commerce \| Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 Pre-auth Broken access control (IDOR)	High8.6	—	0.6%	Sep 8, 2026
30Monitor	CVE-2026-77110No exploit	Adobe Commerce \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · commerce · CWE-22 Path traversal	High7.6	—	1.0%	Sep 8, 2026
34Monitor	CVE-2026-77111No exploit	Adobe Commerce \| Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 Broken access control (IDOR)	High8.7	—	0.8%	Sep 8, 2026
34Monitor	CVE-2026-77774No exploit	Adobe Commerce \| Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 Pre-auth Broken access control (IDOR)	High8.6	—	0.8%	Sep 8, 2026
34Monitor	CVE-2026-79721No exploit	Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact tomlflow · mlflow · CWE-829 RCE	High8.6	—	0.4%	Sep 8, 2026
41Plan	CVE-2026-82004No exploit	Adobe Campaign Classic (ACC) \| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)adobe · campaign · CWE-78 pre-auth RCE Command injection	Critical10.0	—	3.2%	Sep 8, 2026
30Monitor	CVE-2026-82536No exploit	Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operatorroocodeinc · roo-code · CWE-184 Pre-auth	High7.7	—	0.5%	Sep 8, 2026
30Monitor	CVE-2026-82537No exploit	Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatchroocodeinc · roo-code · CWE-436 Pre-auth	High7.7	—	0.4%	Sep 8, 2026
34Monitor	CVE-2026-85384No exploit	Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Importtp-link systems inc. · re210 ac750 · CWE-121 RCE Memory safety	High8.5	—	0.3%	Sep 8, 2026
39Monitor	CVE-2026-19232No exploit	Adobe Experience Manager \| Incorrect Authorization (CWE-863)adobe · experience manager · CWE-863 RCE Broken access control (IDOR)	Critical9.9	—	1.0%	Sep 8, 2026
39Monitor	CVE-2026-48273No exploit	ColdFusion \| Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)adobe · coldfusion · CWE-95 RCE	Critical9.9	—	1.2%	Sep 8, 2026
40Plan	CVE-2026-49883No exploit	In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissiogoogle · android · CWE-269 Pre-auth	Critical10.0	—	0.1%	Sep 8, 2026
30Monitor	CVE-2026-16025No exploit	Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Modulepaytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module · CWE-1284 Pre-auth Denial of service	High7.5	—	0.4%	Sep 8, 2026
30Monitor	CVE-2026-16037No exploit	Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Modulepaytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module · CWE-208 Pre-auth Auth bypass	High7.5	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-75631No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
36Monitor	CVE-2026-75746No exploit	ColdFusion \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · coldfusion · CWE-89 RCE SQL injection	Critical9.1	—	0.9%	Sep 8, 2026
31Monitor	CVE-2026-75771No exploit	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-75862No exploit	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-75863No exploit	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
34Monitor	CVE-2026-75990No exploit	Illustrator \| Incorrect Authorization (CWE-863)adobe · illustrator · CWE-863 RCE Broken access control (IDOR)	High8.6	—	0.2%	Sep 8, 2026
34Monitor	CVE-2026-75991No exploit	Illustrator \| Improper Input Validation (CWE-20)adobe · illustrator · CWE-20 RCE	High8.6	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-75992No exploit	Illustrator \| Out-of-bounds Write (CWE-787)adobe · illustrator · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
34Monitor	CVE-2026-75993No exploit	ColdFusion \| Cross-site Scripting (Reflected XSS) (CWE-79)adobe · coldfusion · CWE-79 Pre-auth XSS	High8.5	—	0.4%	Sep 8, 2026
30Monitor	CVE-2026-75998No exploit	ColdFusion \| Improper Access Control (CWE-284)adobe · coldfusion · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.8%	Sep 8, 2026
33Monitor	CVE-2026-75999No exploit	ColdFusion \| Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 RCE	High8.4	—	0.4%	Sep 8, 2026
34Monitor	CVE-2026-76190No exploit	ColdFusion \| Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)adobe · coldfusion · CWE-95 pre-auth RCE	High8.6	—	0.8%	Sep 8, 2026
34Monitor	CVE-2026-76199No exploit	Photoshop Desktop \| Uncontrolled Search Path Element (CWE-427)adobe · photoshop · CWE-427 RCE	High8.6	—	0.2%	Sep 8, 2026
39Monitor	CVE-2026-78623No exploit	Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastoresokta · access gateway · CWE-89 SQL injection	Critical9.9	—	0.4%	Sep 8, 2026
35Monitor	CVE-2026-78834No exploit	A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.CWE-94 RCE	High8.8	—	0.6%	Sep 8, 2026
31Monitor	CVE-2026-82005No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-82006No exploit	Photoshop Desktop \| Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-82007No exploit	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
36Monitor	CVE-2026-84197No exploit	In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and oeclipse foundation · eclipse ditto · CWE-295 Pre-auth Weak crypto	Critical9.2	—	0.3%	Sep 8, 2026
69This week	CVE-2026-84869Weaponized	ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actionsconnectwise · screenconnect · CWE-269	Critical9.9	KEV	0.9%	Sep 8, 2026
39Monitor	CVE-2026-86464No exploit	In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deploeclipse foundation · eclipse aerios · CWE-200 Pre-auth Hard-coded credentials Info leak	Critical9.9	—	0.5%	Sep 8, 2026
29Monitor	CVE-2026-19651No exploit	IBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesibm · enterprise build of quarkus · CWE-639 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-20293No exploit	Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerabilitycisco · enterprise nfv infrastructure software · CWE-749	High7.1	—	0.1%	Sep 8, 2026
39Monitor	CVE-2026-26084No exploit	A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 allfortinet · fortisandbox paas · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.9	—	0.3%	Sep 8, 2026
20Monitor	CVE-2026-84386No exploit	A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacfortinet · forticlientwindows · CWE-283	Medium5.1	—	0.1%	Sep 8, 2026
28Monitor	CVE-2026-84387No exploit	An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet Fortfortinet · fortisandbox · CWE-77 RCE Command injection	High7.2	—	1.5%	Sep 8, 2026
32Monitor	CVE-2026-84393No exploit	A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.fortinet · fortios · CWE-297 Pre-auth Weak crypto	High8.1	—	0.2%	Sep 8, 2026
33Monitor	CVE-2026-77827No exploit	Maono Link local privilege escalationmaono · maono link · CWE-428 Local privilege escalation	High8.4	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-79907No exploit	Acrobat Reader \| Double Free (CWE-415)adobe · acrobat · CWE-415 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-79908No exploit	Acrobat Reader \| Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-79909No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-80161No exploit	Acrobat Reader \| Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)adobe · acrobat · CWE-843 RCE	High7.8	—	0.2%	Sep 8, 2026
28Monitor	CVE-2026-81192No exploit	OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOSopen-telemetry · opentelemetry-dotnet-contrib · CWE-426 RCE Local privilege escalation	High7.0	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-81973No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81975No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81976No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81979No exploit	Acrobat Reader \| Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-81980No exploit	Acrobat Reader \| Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-81981No exploit	Acrobat Reader \| Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-81983No exploit	Acrobat Reader \| Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-81985No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81986No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81987No exploit	Acrobat Reader \| Integer Overflow or Wraparound (CWE-190)adobe · acrobat · CWE-190 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81988No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81989No exploit	Acrobat Reader \| Use After Free (CWE-416)adobe · acrobat · CWE-416 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026

CVE-2026-28657
31Monitor
In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28658
31Monitor
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28662
32Monitor
In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
google · androidSep 8, 2026
CVE-2026-28663
31Monitor
In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
google · androidSep 8, 2026
CVE-2026-28664
31Monitor
In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28666
35Monitor
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
google · androidSep 8, 2026
CVE-2026-28668
31Monitor
In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-45515
31Monitor
In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overf
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-45520
31Monitor
In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Auth bypass
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-45528
29Monitor
In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-45531
31Monitor
In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-49879
35Monitor
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 8, 2026
CVE-2026-49881
31Monitor
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code.
HighCVSS 7.8Proof of conceptEPSS 0%
- RCE
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-49882
35Monitor
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 8, 2026
CVE-2026-49884
31Monitor
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-49887
31Monitor
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.
HighCVSS 7.8No exploitEPSS 0%
- Auth bypass
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-49918
31Monitor
In multiple functions, there is a possible out of bounds write due to an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-49919
31Monitor
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-49921
39Monitor
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · androidSep 8, 2026
CVE-2026-49927
31Monitor
In multiple locations, there is a possible out of bounds write due to an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-49932
31Monitor
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-55273
31Monitor
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-55277
32Monitor
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
google · androidSep 8, 2026
CVE-2026-55285
31Monitor
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-55294
31Monitor
In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-58820
31Monitor
In multiple locations, there is a possible memory safety issue due to integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-58822
39Monitor
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
google · androidSep 8, 2026
CVE-2026-58823
31Monitor
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-58839
31Monitor
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-58846
31Monitor
In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-58848
28Monitor
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
google · androidSep 8, 2026
CVE-2026-58874
31Monitor
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-58941
31Monitor
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-66304
30Monitor
Skype for Business Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
microsoft · skype for business serverSep 8, 2026
CVE-2026-66305
28Monitor
Skype for Business Spoofing Vulnerability
HighCVSS 7.1No exploitEPSS 0%
microsoft · skype for business serverSep 8, 2026
CVE-2026-66307
30Monitor
Skype for Business and Lync Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
microsoft · skype for business serverSep 8, 2026
CVE-2026-69646
33Monitor
Skype for Business Spoofing Vulnerability
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · skype for business serverSep 8, 2026
CVE-2026-76200
37Monitor
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- XSS
adobe · magentoSep 8, 2026
CVE-2026-76201
37Monitor
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- XSS
adobe · commerceSep 8, 2026
CVE-2026-76202
32Monitor
Adobe Commerce | Incorrect Authorization (CWE-863)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · commerceSep 8, 2026
CVE-2026-77108
30Monitor
Adobe Commerce | Incorrect Authorization (CWE-863)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · commerceSep 8, 2026
CVE-2026-77109
34Monitor
Adobe Commerce | Incorrect Authorization (CWE-863)
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · commerceSep 8, 2026
CVE-2026-77110
30Monitor
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
HighCVSS 7.6No exploitEPSS 1%
- Path traversal
adobe · commerceSep 8, 2026
CVE-2026-77111
34Monitor
Adobe Commerce | Incorrect Authorization (CWE-863)
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
adobe · commerceSep 8, 2026
CVE-2026-77774
34Monitor
Adobe Commerce | Incorrect Authorization (CWE-863)
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · commerceSep 8, 2026
CVE-2026-79721
34Monitor
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to
HighCVSS 8.6No exploitEPSS 0%
- RCE
mlflow · mlflowSep 8, 2026
CVE-2026-82004
41Plan
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CriticalCVSS 10.0No exploitEPSS 3%
- pre-auth RCE
- Command injection
adobe · campaignSep 8, 2026
CVE-2026-82536
30Monitor
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocodeinc · roo-codeSep 8, 2026
CVE-2026-82537
30Monitor
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocodeinc · roo-codeSep 8, 2026
CVE-2026-85384
34Monitor
Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Memory safety
tp-link systems inc. · re210 ac750Sep 8, 2026
CVE-2026-19232
39Monitor
Adobe Experience Manager | Incorrect Authorization (CWE-863)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Broken access control (IDOR)
adobe · experience managerSep 8, 2026
CVE-2026-48273
39Monitor
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
adobe · coldfusionSep 8, 2026
CVE-2026-49883
40Plan
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissio
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
google · androidSep 8, 2026
CVE-2026-16025
30Monitor
Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
paytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs moduleSep 8, 2026
CVE-2026-16037
30Monitor
Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
paytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs moduleSep 8, 2026
CVE-2026-75631
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-75746
36Monitor
ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- SQL injection
adobe · coldfusionSep 8, 2026
CVE-2026-75771
31Monitor
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-75862
31Monitor
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-75863
31Monitor
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-75990
34Monitor
Illustrator | Incorrect Authorization (CWE-863)
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
adobe · illustratorSep 8, 2026
CVE-2026-75991
34Monitor
Illustrator | Improper Input Validation (CWE-20)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · illustratorSep 8, 2026
CVE-2026-75992
31Monitor
Illustrator | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · illustratorSep 8, 2026
CVE-2026-75993
34Monitor
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- XSS
adobe · coldfusionSep 8, 2026
CVE-2026-75998
30Monitor
ColdFusion | Improper Access Control (CWE-284)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · coldfusionSep 8, 2026
CVE-2026-75999
33Monitor
ColdFusion | Improper Input Validation (CWE-20)
HighCVSS 8.4No exploitEPSS 0%
- RCE
adobe · coldfusionSep 8, 2026
CVE-2026-76190
34Monitor
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
adobe · coldfusionSep 8, 2026
CVE-2026-76199
34Monitor
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
HighCVSS 8.6No exploitEPSS 0%
- RCE
adobe · photoshopSep 8, 2026
CVE-2026-78623
39Monitor
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
CriticalCVSS 9.9No exploitEPSS 0%
- SQL injection
okta · access gatewaySep 8, 2026
CVE-2026-78834
35Monitor
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.
HighCVSS 8.8No exploitEPSS 0%
- RCE
Sep 8, 2026
CVE-2026-82005
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-82006
31Monitor
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-82007
31Monitor
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopSep 8, 2026
CVE-2026-84197
36Monitor
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and o
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
eclipse foundation · eclipse dittoSep 8, 2026
CVE-2026-84869
69This week
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
CriticalCVSS 9.9KEVWeaponizedEPSS 0%
connectwise · screenconnectSep 8, 2026
CVE-2026-86464
39Monitor
In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deplo
CriticalCVSS 9.9No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
- Info leak
eclipse foundation · eclipse aeriosSep 8, 2026
CVE-2026-19651
29Monitor
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ibm · enterprise build of quarkusSep 8, 2026
CVE-2026-20293
28Monitor
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
HighCVSS 7.1No exploitEPSS 0%
cisco · enterprise nfv infrastructure softwareSep 8, 2026
CVE-2026-26084
39Monitor
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all
CriticalCVSS 9.9No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
fortinet · fortisandbox paasSep 8, 2026
CVE-2026-84386
20Monitor
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attac
MediumCVSS 5.1No exploitEPSS 0%
fortinet · forticlientwindowsSep 8, 2026
CVE-2026-84387
28Monitor
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet Fort
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
fortinet · fortisandboxSep 8, 2026
CVE-2026-84393
32Monitor
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
fortinet · fortiosSep 8, 2026
CVE-2026-77827
33Monitor
Maono Link local privilege escalation
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
maono · maono linkSep 8, 2026
CVE-2026-79907
31Monitor
Acrobat Reader | Double Free (CWE-415)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-79908
31Monitor
Acrobat Reader | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-79909
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-80161
31Monitor
Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
HighCVSS 7.8No exploitEPSS 0%
- RCE
adobe · acrobatSep 8, 2026
CVE-2026-81192
28Monitor
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
open-telemetry · opentelemetry-dotnet-contribSep 8, 2026
CVE-2026-81973
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81975
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81976
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81979
31Monitor
Acrobat Reader | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81980
31Monitor
Acrobat Reader | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81981
31Monitor
Acrobat Reader | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81983
31Monitor
Acrobat Reader | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81985
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81986
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81987
31Monitor
Acrobat Reader | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81988
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026
CVE-2026-81989
31Monitor
Acrobat Reader | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · acrobatSep 8, 2026