October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,928
Critical
3,121
High
7,064
Medium
6,896
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-65016 n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation... |
high | 8.8 | — | N8n / n8n | 2026-07-22 | 2026-10-29 |
| CVE-2026-58205 GRR is a resource management and reservation application. |
high | 8.1 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-59158 Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applicat... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-59257 n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL... |
high | 8.8 | — | N8n / n8n | 2026-07-08 | 2026-10-29 |
| CVE-2026-58202 OpenReception's appointment booking software provides an end-to-end encrypted ap... |
high | 8.3 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-56776 n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the... |
high | 7.4 | — | N8n / n8n | 2026-07-08 | 2026-10-29 |
| CVE-2026-118659 Happy DOM is a JavaScript implementation of a web browser without its graphical... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116009 Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows us... |
high | 8.8 | — | — | 2026-10-24 | 2026-10-29 |
| CVE-2026-115969 A flaw has been found in Travisun Opptrix 0.4.0. |
high | 7.3 | — | — | 2026-10-24 | 2026-10-29 |
| CVE-2026-108086 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity referen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-108087 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-63889 In the Linux kernel, the following vulnerability has been resolved:
scsi: scsi_... |
high | 8.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-29 |
| CVE-2026-83749 Use after free in Windows Overlay Filter allows an authorized attacker to elevat... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83750 Time-of-check time-of-use (toctou) race condition in Windows Error Reporting all... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83751 Use after free in Windows MIDI Service Module allows an authorized attacker to e... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83752 Use after free in Windows Installer allows an authorized attacker to elevate pri... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83753 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an auth... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83754 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83757 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-100413 SeaweedFS is a distributed storage system for files and blobs. |
high | 7.1 | — | Seaweedfs / seaweedfs | 2026-10-14 | 2026-10-29 |
| CVE-2026-83712 Out-of-bounds write in Windows NTFS allows an authorized attacker to execute cod... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83704 Improper link resolution before file access ('link following') in Microsoft Wind... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. |
high | 7.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-83690 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83691 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83758 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83665 Null pointer dereference in Windows DHCP Server allows an unauthorized attacker... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83669 Use of uninitialized resource in Windows Error Reporting allows an authorized at... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83675 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83676 Integer underflow (wrap or wraparound) in Windows Installer allows an authorized... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83522 Reliance on untrusted inputs in a security decision in Windows IKE Extension all... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83677 Missing release of memory after effective lifetime in Windows DHCP Client allows... |
high | 7.5 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83678 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83679 Use after free in Windows Defender Firewall Service allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83655 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83659 Improper link resolution before file access ('link following') in Windows User P... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83654 Missing authentication for critical function in Windows Modern Device Management... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83680 Heap-based buffer overflow in Windows Installer allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83682 Use after free in Windows TCP/IP allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83650 Heap-based buffer overflow in Windows Media allows an authorized attacker to ele... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.