October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112487 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112477 A race condition was addressed with improved locking. |
high | 7.0 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112480 A permissions issue was addressed with additional restrictions. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112482 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112469 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112470 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112473 An authorization issue was addressed with improved state management. |
high | 7.4 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112474 A use-after-free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112476 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112461 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112464 An out-of-bounds write issue was addressed with improved input validation. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112466 An out-of-bounds read was addressed with improved input validation. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112457 A double free issue was addressed with improved memory management. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112459 A race condition was addressed with improved state handling. |
high | 7.0 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112434 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112437 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112438 A logic issue was addressed with improved state management. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112424 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112427 An authentication issue was addressed with improved state management. |
high | 8.1 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112430 An authentication issue was addressed with improved validation of user attribute... |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112417 An integer overflow was addressed with improved input validation. |
high | 7.8 | — | Apple / visionos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112410 A double free issue was addressed with improved memory management. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86977 An authorization issue was addressed with improved network restrictions. |
high | 7.5 | — | Apple / ipados | 2026-10-20 | 2026-11-03 |
| CVE-2026-86948 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-30 |
| CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-29 |
| CVE-2026-86961 A race condition was addressed with additional validation. |
high | 7.8 | — | Apple / ipados | 2026-10-20 | 2026-11-02 |
| CVE-2026-84579 A logic issue was addressed with improved checks. |
high | 8.8 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-28853 The issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. |
high | 7.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86985 This issue was addressed with improved input validation. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86987 An authorization issue was addressed with improved entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-10-30 |
| CVE-2026-86988 The issue was addressed with improved checks. |
medium | 4.3 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-86989 An authorization issue was addressed with improved state management. |
medium | 5.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86990 An access issue was addressed with improved access restrictions. |
medium | 5.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86984 A file access issue existed with certain home folder files. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86970 An out-of-bounds read was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-86971 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86973 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86966 This issue was addressed with improved handling of symlinks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86954 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.