October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,950
Critical
3,122
High
7,067
Medium
6,906
Low
609
Severity not reported
4,246
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-95370 Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allo... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95375 Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 al... |
medium | 6.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95364 Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 a... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95367 Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 5.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95368 Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allo... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95327 Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-110141 Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106399 Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a loc... |
low | 3.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106210 Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106180 Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allo... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106224 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 all... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-58856 In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a p... |
low | 3.3 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-106339 Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.