October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,919
Critical
3,121
High
7,058
Medium
6,893
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83855 Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unautho... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
high | 7.8 | Listed | EG Secure Solutions / SiteGuard Server Edition | 2026-10-14 | 2026-10-21 |
| CVE-2026-107209 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-83856 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attac... |
high | 8.1 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83857 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83859 Use after free in Windows NTFS allows an authorized attacker to elevate privileg... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83860 Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to de... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83861 Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authoriz... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83866 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70095 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to e... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70102 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70103 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70104 Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an author... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-101452 Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diag... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101457 Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (c... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101473 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101477 Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analy... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101478 Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analy... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101479 Vulnerability in Oracle Secure Backup (component: Backup and Restore). |
high | 8.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101494 Vulnerability in Oracle REST Data Services (component: Core). |
high | 7.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101498 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). |
high | 8.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101504 Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101505 Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101506 Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101518 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101519 Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101525 Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Ente... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101526 Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Ente... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101527 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101531 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101532 Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101534 Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp... |
high | 8.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101535 Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101536 Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101540 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101541 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101542 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101543 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101545 Vulnerability in the Oracle Inventory Management product of Oracle E-Business Su... |
high | 7.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101546 Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-B... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.