October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,950
Critical
3,122
High
7,067
Medium
6,906
Low
609
Severity not reported
4,246
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-95326 Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed... |
high | 8.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95314 Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a... |
high | 8.1 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95285 Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8... |
high | 8.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95278 Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowe... |
high | 8.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95380 Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95381 Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 al... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95372 Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a r... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95373 Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-102299 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102301 Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a rem... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102302 Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95301 Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allo... |
high | 8.1 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95344 Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a rem... |
high | 8.0 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95376 Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037... |
high | 8.0 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95362 Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 a... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95365 Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95369 Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allo... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2023-0697 Inappropriate implementation in Full screen mode in Google Chrome on Android pri... |
medium | 6.5 | — | Google / chrome | 2023-02-07 | 2026-10-28 |
| CVE-2023-0704 Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481... |
medium | 6.5 | — | Google / chrome | 2023-02-07 | 2026-10-28 |
| CVE-2023-20627 In pqframework, there is a possible out of bounds write due to a missing bounds... |
medium | 6.7 | — | Google / android | 2023-03-07 | 2026-10-28 |
| CVE-2023-2462 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63... |
medium | 4.3 | — | Google / chrome | 2023-05-03 | 2026-10-28 |
| CVE-2023-2468 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0... |
medium | 4.3 | — | Google / chrome | 2023-05-03 | 2026-10-28 |
| CVE-2026-113045 Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-110917 Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-15 | 2026-10-19 |
| CVE-2026-110918 Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remo... |
medium | 4.3 | — | Google / chrome | 2026-10-15 | 2026-10-19 |
| CVE-2026-106396 Improper input validation in Omnibox in Google Chrome on on Android prior to 155... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-15 |
| CVE-2026-110150 Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8... |
medium | 5.5 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106340 Missing authorization in CredentialProvider in Google Chrome on on Windows prior... |
medium | 4.6 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106343 Improper state validation in Autofill AI in Google Chrome on on Android prior to... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106344 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106345 Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allo... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106348 Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106351 Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106353 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106354 Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106355 Missing authorization in Media in Google Chrome on on Windows prior to 155.0.805... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106356 Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote att... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106359 Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106360 Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106361 Incorrect provision of specified functionality in Mobile in Google Chrome on on... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.