October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-119263 Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 a... |
critical | 9.6 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119261 Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-118355 Improper input validation in Command in Google Chrome prior to 156.0.8078.73 all... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118342 Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118337 Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed... |
critical | 9.3 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118340 Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remo... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118332 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118333 Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a... |
critical | 9.3 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118316 Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118321 Improper input validation in Core in Google Chrome on on Android prior to 156.0.... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118306 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118308 Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote a... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118309 Improper input validation in UI in Google Chrome on on Android prior to 156.0.80... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118310 Improper input validation in Views in Google Chrome on on Windows prior to 156.0... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118312 Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118305 Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google... |
critical | 9.8 | Listed | Google / brotli | 2026-10-22 | 2026-11-04 |
| CVE-2026-113336 Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113342 Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113328 Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113300 Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113283 Memory corruption in CredentialProvider in Google Chrome on on Windows prior to... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113263 Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113270 Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113261 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113252 Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113235 Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113222 Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113211 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113186 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113189 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113169 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113171 Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113138 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allo... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113126 Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113116 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113084 Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113089 Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.4... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113078 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113072 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.