Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21

Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-113900
A race condition was addressed with improved state handling.
high 7.0 —Apple / macos 2026-10-262026-11-03
CVE-2026-112696
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.8 —Apple / ipados 2026-10-262026-11-03
CVE-2026-112697
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-03
CVE-2026-112688
A memory corruption issue was addressed with improved memory handling.
high 8.8 —Apple / ipados 2026-10-262026-11-03
CVE-2026-112689
An out-of-bounds write issue was addressed with improved input validation.
high 8.4 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112682
An input validation issue was addressed with improved input validation.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112683
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.8 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112676
This issue was addressed with additional entitlement checks.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112677
An authorization issue was addressed with improved access control.
high 7.8 —Apple / macos 2026-10-262026-11-02
CVE-2026-112679
A use-after-free issue was addressed with improved memory management.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112668
A logic issue was addressed with improved checks.
high 7.8 —Apple / macos 2026-10-262026-11-04
CVE-2026-112670
An out-of-bounds write issue was addressed with improved input validation.
high 7.8 —Apple / macos 2026-10-262026-11-03
CVE-2026-112671
A resource exhaustion issue was addressed with improved input validation.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112655
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-02
CVE-2026-112659
A type confusion issue was addressed with improved memory handling.
high 8.8 —Apple / safari 2026-10-262026-11-02
CVE-2026-112651
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-02
CVE-2026-112637
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-03
CVE-2026-112638
A heap buffer overflow was addressed with improved bounds checking.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112639
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-03
CVE-2026-112640
A use-after-free issue was addressed with improved memory management.
high 7.6 —Apple / safari 2026-10-262026-11-04
CVE-2026-112620
A denial-of-service issue was addressed with improved input validation.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112621
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112622
An out-of-bounds read was addressed with improved bounds checking.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112623
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-02
CVE-2026-112625
An integer underflow was addressed with improved input validation.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112626
A use-after-free issue was addressed with improved memory management.
high 8.8 —Apple / safari 2026-10-262026-11-03
CVE-2026-112619
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112607
An out-of-bounds read was addressed with improved bounds checking.
high 8.2 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112595
This issue was addressed with improved authentication.
high 7.5 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112570
An access issue was addressed with additional sandbox restrictions.
high 8.2 —Apple / macos 2026-10-262026-11-04
CVE-2026-112593
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.7 —Apple / macos 2026-10-262026-11-04
CVE-2026-112569
An access issue was addressed with additional sandbox restrictions.
high 8.2 —Apple / macos 2026-10-262026-11-04
CVE-2026-112545
A parsing issue in the handling of directory paths was addressed with improved p...
high 7.8 —Apple / macos 2026-10-262026-11-03
CVE-2026-112548
A use after free issue was addressed with improved memory management.
high 7.8 —Apple / macos 2026-10-262026-11-03
CVE-2026-112510
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.5 —Apple / macos 2026-10-262026-11-02
CVE-2026-112492
A race condition was addressed with additional validation.
high 7.0 —Apple / macos 2026-10-262026-11-03
CVE-2026-112493
A downgrade issue was addressed with additional version checks.
high 7.8 —Apple / macos 2026-10-262026-11-04
CVE-2026-112484
This issue was addressed with improved file handling.
high 7.8 —Apple / macos 2026-10-262026-10-29
CVE-2026-112485
The issue was addressed with improved memory handling.
high 7.8 —Apple / ipados 2026-10-262026-11-04
CVE-2026-112486
An out-of-bounds write issue was addressed with improved bounds checking.
high 7.5 —Apple / ipados 2026-10-262026-11-04

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.