October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-58854 In multiple locations, there is a possible memory corruption due to type confusi... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-55266 In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write du... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-55269 In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety is... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49937 In multiple functions of MessageQueueBase.h, there is a possible out of bounds r... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28641 In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28647 In updateState of DeviceAdminAppsPreferenceController.java, there is a possible... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28648 In Settings, there is a possible permission bypass due to a confused deputy. |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-45524 In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due... |
high | 8.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49878 In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out... |
high | 7.2 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49880 In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds wri... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49885 In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49933 In handle_le_monitor_device_event of msft.cc, there is a possible control-flow h... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28625 In multiple locations, there is a possible permission bypass due to a logic erro... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28640 In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java,... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-103631 Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-06 |
| CVE-2026-103622 Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103623 Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-06 |
| CVE-2026-103624 Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0... |
high | 8.3 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103625 Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-76027 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowe... |
medium | 4.3 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119272 Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-76024 Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-118318 Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118319 Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remo... |
medium | 4.3 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118322 Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-113340 Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113341 Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113326 Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113329 Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113333 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113322 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113325 Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 al... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113309 Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113310 Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113304 Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113295 Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113296 Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113297 Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113277 Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113246 Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.