October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106305 UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106306 Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allo... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106307 Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106295 Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.805... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106296 Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.80... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106297 Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 al... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106299 Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106284 Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.805... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106285 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106286 Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106287 Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106288 Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106289 Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106290 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106275 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106276 UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106277 Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106280 Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.805... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106282 UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106266 Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106267 Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106270 Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.3... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106272 UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106273 Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106258 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106259 Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106260 Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allo... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106261 Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106262 Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allow... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106263 Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106264 Missing authorization in Web Authentication (Passkeys & Security Keys) in Google... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106265 UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106250 Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106251 UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106253 Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 al... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106254 Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39... |
medium | 5.1 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106242 Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.3... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106243 Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106244 Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106245 Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.