October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,929
Critical
3,121
High
7,064
Medium
6,897
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76725 A vulnerability has been identified in a management protocol of HPE Networking I... |
critical | 9.6 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-85908 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-31 |
| CVE-2026-83651 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose in... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-31 |
| CVE-2026-118147 Improper certificate validation in Visual Studio allows an unauthorized attacker... |
high | 7.4 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-70271 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-31 |
| CVE-2026-70106 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-31 |
| CVE-2026-83943 Exposure of sensitive information to an unauthorized actor in Azure API Center a... |
high | 8.7 | — | — | 2026-10-08 | 2026-10-31 |
| CVE-2026-14164 A double free issue has been identified in libarchive's RAR5 reader. |
high | 7.5 | — | — | 2026-06-30 | 2026-10-31 |
| CVE-2026-119249 A malicious actor with access to the network could exploit a Binding to an Unres... |
high | 7.5 | — | — | 2026-10-29 | 2026-10-31 |
| CVE-2026-119250 A malicious actor with local access and low privileges could exploit an External... |
high | 7.8 | — | — | 2026-10-29 | 2026-10-31 |
| CVE-2026-99185 In the Linux kernel, the following vulnerability has been resolved:
firewire: c... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99203 In the Linux kernel, the following vulnerability has been resolved:
pipe: prese... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99212 In the Linux kernel, the following vulnerability has been resolved:
net/rds: do... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99213 In the Linux kernel, the following vulnerability has been resolved:
vsock: trea... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99216 In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv... |
high | 8.4 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99163 In the Linux kernel, the following vulnerability has been resolved:
tracing/his... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99164 In the Linux kernel, the following vulnerability has been resolved:
spi: imx: f... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99167 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99170 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99173 In the Linux kernel, the following vulnerability has been resolved:
eventfs: Fr... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99177 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: F... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99180 In the Linux kernel, the following vulnerability has been resolved:
unicode: fr... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99142 In the Linux kernel, the following vulnerability has been resolved:
tracing: Ch... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99143 In the Linux kernel, the following vulnerability has been resolved:
tracing: Ke... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99148 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99152 In the Linux kernel, the following vulnerability has been resolved:
scsi: libis... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99156 In the Linux kernel, the following vulnerability has been resolved:
scsi: st: F... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99116 In the Linux kernel, the following vulnerability has been resolved:
net: psp: d... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99117 In the Linux kernel, the following vulnerability has been resolved:
net: bridge... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99122 In the Linux kernel, the following vulnerability has been resolved:
vsock/vmci:... |
high | 7.3 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99123 In the Linux kernel, the following vulnerability has been resolved:
vsock/virti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99131 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix ca... |
high | 8.2 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99136 In the Linux kernel, the following vulnerability has been resolved:
dm-crypt: f... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99099 In the Linux kernel, the following vulnerability has been resolved:
x86/CPU/AMD... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-99107 In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix i... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99109 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99110 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99112 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99094 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-109197 The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection... |
high | 7.5 | — | — | 2026-10-31 | 2026-10-31 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.