October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,950
Critical
3,122
High
7,067
Medium
6,906
Low
609
Severity not reported
4,246
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106288 Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106259 Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106263 Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106284 Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.805... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106273 Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106275 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106258 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106272 UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106290 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106296 Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.80... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106395 Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.805... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106424 Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.0 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106324 Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior t... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106326 Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allo... |
medium | 4.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106213 Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106187 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106179 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106181 Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106182 UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106183 Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106184 Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106185 Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106209 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106192 Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 all... |
medium | 4.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106299 Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106306 Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allo... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106307 Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106242 Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.3... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106244 Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106202 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106206 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106222 Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106223 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106250 Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106217 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 all... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106215 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106214 Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106226 Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106230 Incorrect reference resolution in Offline in Google Chrome on on Android prior t... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106229 UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allow... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.