October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,919
Critical
3,121
High
7,058
Medium
6,893
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101548 Vulnerability in Oracle Application Testing Suite (component: OpenScript). |
high | 7.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101549 Vulnerability in Oracle Application Testing Suite (component: OpenScript). |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101551 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101552 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101554 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101555 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101556 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101560 Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101562 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-107435 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-110899 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-110369 Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Mem... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-110370 Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinter... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-110884 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-70093 Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorize... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83879 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83881 Heap-based buffer overflow in Windows exFAT File System allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70092 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unau... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83882 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83883 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-98156 In the Linux kernel, the following vulnerability has been resolved:
drm/virtio:... |
high | 7.8 | — | Linux / linux kernel | 2026-09-25 | 2026-10-21 |
| CVE-2026-98073 In the Linux kernel, the following vulnerability has been resolved:
net: Remove... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98056 In the Linux kernel, the following vulnerability has been resolved:
nvme: remov... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98041 In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97953 In the Linux kernel, the following vulnerability has been resolved:
net: stmmac... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97528 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97513 In the Linux kernel, the following vulnerability has been resolved:
media: chip... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-97527 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97428 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93801 In the Linux kernel, the following vulnerability has been resolved:
smb/client:... |
high | 7.0 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93221 In the Linux kernel, the following vulnerability has been resolved:
nfsd: conve... |
high | 8.1 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93144 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93148 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90427 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
high | 7.4 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90408 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12... |
high | 7.7 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90399 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90367 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90324 In the Linux kernel, the following vulnerability has been resolved:
ublk: check... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90326 In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90320 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: vali... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.