October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,950
Critical
3,122
High
7,067
Medium
6,906
Low
609
Severity not reported
4,246
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106304 Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a re... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106300 Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106231 Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106310 Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106232 UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-58834 In setPermissionGrantState of DevicePolicyManagerService.java, there is a possib... |
medium | 5.5 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-106236 UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-55265 In multiple functions of PduParser.java, there is a possible out of bounds read... |
medium | 6.5 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-106260 Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allo... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106262 Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allow... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106264 Missing authorization in Web Authentication (Passkeys & Security Keys) in Google... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106265 UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106243 Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106270 Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.3... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106276 UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106277 Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106330 Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106332 Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106336 Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106379 Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106380 UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106282 UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106285 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106295 Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.805... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106302 UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.3... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106303 Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106305 UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106311 Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowe... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106312 Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106313 Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0... |
medium | 5.1 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106316 UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106317 UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106388 Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106390 Incorrect provision of specified functionality in SanitizerAPI in Google Chrome... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106391 Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106392 Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106394 Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106398 Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106245 Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106400 Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.