October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,924
Critical
3,121
High
7,062
Medium
6,894
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98524 In the Linux kernel, the following vulnerability has been resolved:
rds: ib: Cl... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98532 In the Linux kernel, the following vulnerability has been resolved:
ipv6: do no... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98543 In the Linux kernel, the following vulnerability has been resolved:
bpf: fs/xat... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98510 In the Linux kernel, the following vulnerability has been resolved:
drm/xe/vm:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98512 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98515 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98517 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98518 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98520 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98491 In the Linux kernel, the following vulnerability has been resolved:
net: openvs... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98497 In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e:... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98499 In the Linux kernel, the following vulnerability has been resolved:
HID: wacom:... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98501 In the Linux kernel, the following vulnerability has been resolved:
HID: alps:... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98465 In the Linux kernel, the following vulnerability has been resolved:
RISC-V: KVM... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98466 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 8.2 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98469 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98471 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: D... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98479 In the Linux kernel, the following vulnerability has been resolved:
scsi: libis... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98485 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98487 In the Linux kernel, the following vulnerability has been resolved:
net: bridge... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98442 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98419 In the Linux kernel, the following vulnerability has been resolved:
drop_monito... |
high | 7.0 | — | — | 2026-10-14 | 2026-10-24 |
| CVE-2026-98440 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98441 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98381 In the Linux kernel, the following vulnerability has been resolved:
veth: manag... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98382 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98383 In the Linux kernel, the following vulnerability has been resolved:
bpf: Disall... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98385 In the Linux kernel, the following vulnerability has been resolved:
sched/cache... |
high | 7.8 | — | — | 2026-10-12 | 2026-10-24 |
| CVE-2026-98401 In the Linux kernel, the following vulnerability has been resolved:
net: iptunn... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-24 |
| CVE-2026-98405 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-24 |
| CVE-2026-98374 In the Linux kernel, the following vulnerability has been resolved:
tcp: fix us... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-24 |
| CVE-2026-98376 In the Linux kernel, the following vulnerability has been resolved:
bpf: Use ar... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98378 In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip u... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability |
high | 8.8 | Listed | JFrog / Artifactory | 2026-07-27 | 2026-10-24 |
| CVE-2026-96185 Stack-based buffer overflow in Microsoft Exchange Online allows an authorized at... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-24 |
| CVE-2026-94422 An incorrect implementation of message filtering in xdg-dbus-proxy versions befo... |
high | 8.8 | — | — | 2026-10-02 | 2026-10-24 |
| CVE-2026-91503 Vulnerability in the VPD component of Oracle Database Server. |
high | 8.1 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-93640 A local privilege escalation vulnerability in the optional dnscache package of Z... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-91496 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91499 Vulnerability in the RDBMS component of Oracle Database Server. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.