October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-103821 Substance3D - Designer is affected by an out-of-bounds write vulnerability that... |
high | 7.8 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-100111 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-100112 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-110083 Adobe Experience Manager is affected by an Improper Neutralization of Special El... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110084 Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Inject... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-106634 Adobe Experience Manager is affected by an Improper Limitation of a Pathname to... |
high | 7.7 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2026-103837 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103838 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103839 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103840 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103841 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103842 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103843 Substance3D - Stager is affected by a Use After Free vulnerability that could re... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103830 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103832 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103833 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103834 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103835 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103836 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-48377 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-48378 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-103820 CAI Content Credential is affected by an Improper Limitation of a Pathname to a... |
medium | 5.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103294 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
medium | 5.9 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-102501 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-102502 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100125 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.9 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100116 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
medium | 5.9 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-95640 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that c... |
medium | 5.5 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-105896 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that c... |
medium | 5.5 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-103828 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103829 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103822 Substance3D - Designer is affected by an out-of-bounds read vulnerability that c... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103823 Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerabilit... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103824 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103825 Substance3D - Designer is affected by an out-of-bounds read vulnerability that c... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103826 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103827 Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerabilit... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-83958 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-83960 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-29 |
| CVE-2026-48398 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.