October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-70300 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized at... |
critical | 9.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-14 |
| CVE-2026-70291 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
critical | 9.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-70275 Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized at... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70262 Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70242 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
critical | 9.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-70157 Heap-based buffer overflow in Windows System Information Console allows an unaut... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70153 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unau... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70147 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unau... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70024 Stack-based buffer overflow in Windows Internet Information Services allows an u... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-69883 Use after free in Windows iSCSI allows an unauthorized attacker to execute code... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-19 |
| CVE-2026-69886 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-69705 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-11-02 |
| CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker... |
critical | 9.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105723 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105008 No cwe for this issue in Windows Schannel allows an unauthorized attacker to per... |
critical | 9.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-105010 Use after free in Microsoft Windows Search Component allows an unauthorized atta... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102210 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attack... |
critical | 9.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-20 |
| CVE-2026-100219 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code... |
critical | 9.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-11-03 |
| CVE-2026-100222 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-100202 Use after free in Windows Message Queuing Queue Manager allows an unauthorized a... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-96207 Improper certificate validation in Microsoft Partner Center allows an unauthoriz... |
critical | 10.0 | — | Microsoft / partner center | 2026-10-08 | 2026-10-15 |
| CVE-2026-88131 Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized... |
critical | 9.8 | — | Microsoft / dataverse | 2026-10-08 | 2026-10-15 |
| CVE-2026-96203 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / edge | 2026-10-29 | 2026-11-03 |
| CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge... |
high | 7.4 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-96192 Use after free in Microsoft Edge for iOS allows an unauthorized attacker to exec... |
high | 8.8 | — | Microsoft / edge | 2026-10-29 | 2026-10-31 |
| CVE-2026-96196 Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows a... |
high | 8.8 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-96198 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-96199 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-88077 Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unau... |
high | 8.8 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-85890 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker t... |
high | 8.8 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-85897 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-85899 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker... |
high | 8.1 | — | Microsoft / edge chromium | 2026-10-29 | 2026-11-03 |
| CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge... |
high | 8.1 | — | Microsoft / edge | 2026-10-27 | 2026-11-03 |
| CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge... |
high | 8.8 | — | Microsoft / edge | 2026-10-27 | 2026-11-03 |
| CVE-2026-83831 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker t... |
high | 8.8 | — | Microsoft / edge | 2026-10-27 | 2026-11-03 |
| CVE-2026-108445 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-15 | 2026-10-19 |
| CVE-2026-108446 Use after free in Microsoft Office Excel allows an unauthorized attacker to exec... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-15 | 2026-10-19 |
| CVE-2026-108447 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-15 | 2026-10-19 |
| CVE-2026-108448 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
high | 7.5 | — | Microsoft / 365 apps | 2026-10-15 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.