October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,928
Critical
3,121
High
7,064
Medium
6,896
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87692 Deserialization of untrusted data in Microsoft Exchange Server allows an authori... |
high | 7.8 | — | Microsoft / exchange server | 2026-10-13 | 2026-10-29 |
| CVE-2026-83720 Use after free in Windows Kerberos allows an authorized attacker to elevate priv... |
high | 7.0 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83721 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83724 Heap-based buffer overflow in Windows Management Instrumentation allows an autho... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83707 Use after free in Windows Event Tracing allows an authorized attacker to elevate... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83708 Stack-based buffer overflow in Windows Installer allows an authorized attacker t... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83709 Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83710 Use after free in Windows Device Association Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83726 Use after free in Windows DWM Core Library allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83727 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83728 Improper validation of syntactic correctness of input in Windows Hyper-V allows... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83732 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85829 Double free in Windows Wired AutoConfig Service allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85832 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (B... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85833 Use after free in Windows Modern Device Management (MDM) allows an authorized at... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85834 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85842 Use of externally-controlled format string in Windows Image Acquisition allows a... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85843 Use of uninitialized resource in Windows Background Intelligent Transfer Service... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85846 Use after free in Windows Web Account Manager allows an authorized attacker to e... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85848 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (B... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85849 Improper link resolution before file access ('link following') in Windows AppX D... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85850 Release of invalid pointer or reference in Windows Kernel allows an authorized a... |
high | 7.8 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85851 Use after free in Windows SmartScreen allows an authorized attacker to elevate p... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85853 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85854 Use after free in Windows DWM Core Library allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85855 Use after free in Windows DWM Core Library allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85856 Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows a... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85858 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85860 Use after free in Windows Message Queuing Queue Manager allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85861 Use after free in Windows Clipboard User Service allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85863 Use after free in Windows Clipboard User Service allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-92386 When writing a long cookie name and value to a Netscape cookie jar, a remote
HTT... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-92387 By permanently omitting the final control-response line, a malicious FTP,
IMAP,... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-97206 NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-ov... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-29 |
| CVE-2026-92287 Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and Py... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86409 Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication,
c... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86410 A flaw in the curl command line tool's logic makes it only set SSH host
verifica... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86412 A remote HTTP server can set a cookie that curl accepts and writes to a
Netscape... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-65591 n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator... |
high | 8.8 | — | N8n / n8n | 2026-07-22 | 2026-10-29 |
| CVE-2026-65015 n8n versions before 2.30.1 contain a privilege escalation vulnerability in the A... |
high | 8.8 | — | N8n / n8n | 2026-07-22 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.