October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106246 Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allow... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106232 UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106236 UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106223 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106226 Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106229 UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allow... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106230 Incorrect reference resolution in Offline in Google Chrome on on Android prior t... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106231 Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106215 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106216 Cross-site request forgery in ReadingList in Google Chrome on on Android prior t... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106217 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 all... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106222 Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106208 Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-11 |
| CVE-2026-106209 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106213 Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106214 Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106202 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106206 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106192 Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 all... |
medium | 4.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106181 Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106182 UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106183 Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106184 Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106185 Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106187 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106179 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-58834 In setPermissionGrantState of DevicePolicyManagerService.java, there is a possib... |
medium | 5.5 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-55265 In multiple functions of PduParser.java, there is a possible out of bounds read... |
medium | 6.5 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28667 In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due t... |
medium | 5.5 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-103629 Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103621 Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103627 Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote... |
medium | 6.5 | — | Google / chrome | 2026-10-02 | 2026-10-06 |
| CVE-2026-110141 Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106399 Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a loc... |
low | 3.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106339 Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106224 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 all... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106210 Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106180 Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allo... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-58856 In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a p... |
low | 3.3 | — | Google / android | 2026-10-05 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.