October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76028 Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-76029 Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-76030 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-76031 Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119271 Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-76025 Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119264 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119265 Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119266 Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119267 Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119268 Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119269 Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119270 Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.7... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-119260 Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119262 Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-11-03 |
| CVE-2026-118358 Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118359 Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118350 Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118351 Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118352 Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118353 Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118354 Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowe... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118356 Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118357 Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118341 Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118343 Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118344 Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118345 Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118346 Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118347 Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118348 Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowe... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118349 Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118338 Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118339 Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118328 Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allo... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118329 Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.807... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118330 Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118331 Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 all... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
| CVE-2026-118334 Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118335 Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.