October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84633 A path traversal issue was addressed with improved path validation. |
critical | 9.0 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84539 An out-of-bounds write issue was addressed with improved bounds checking. |
critical | 9.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113897 This issue was addressed by removing the vulnerable code. |
critical | 10.0 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112690 This issue was addressed with improved input validation. |
critical | 10.0 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112478 An out-of-bounds read issue was addressed by removing the vulnerable code. |
critical | 9.0 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86868 An authentication issue was addressed with improved state management. |
critical | 9.1 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-86991 A buffer overflow was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86992 The issue was addressed with improved memory handling. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86986 A use-after-free issue was addressed with improved memory management. |
high | 7.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86972 A buffer overflow was addressed with improved size validation. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86974 A type confusion issue was addressed with improved checks. |
high | 7.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86968 An access issue was addressed with improved access control. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86969 An out-of-bounds write was addressed with improved input validation. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86946 A use-after-free issue was addressed with improved memory management. |
high | 7.7 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-86936 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86929 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-86916 A use after free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86896 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-84627 A buffer overflow was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84604 A stack buffer overflow was addressed through improved input validation. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-84599 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84545 A use after free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84494 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-84495 A use-after-free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-65384 An out-of-bounds read issue was addressed with improved input validation. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-65385 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-65373 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-65363 The issue was addressed with improved checks. |
high | 8.4 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-65350 A use-after-free issue was addressed with improved memory management. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-65327 A logic issue was addressed with improved checks. |
high | 8.4 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-64759 An integer overflow was addressed with improved input validation. |
high | 8.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113947 This issue was addressed with improved access restrictions. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-30 |
| CVE-2026-113949 A type confusion issue was addressed with improved state management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-113941 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113942 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113944 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113946 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-113934 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113909 A memory corruption issue was addressed with improved input validation. |
high | 8.0 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.