October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-86937 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86939 A permissions issue was addressed with additional restrictions. |
medium | 4.9 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-86941 A file quarantine bypass was addressed with additional checks. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86931 A privacy issue was addressed with improved memory management. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86925 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86920 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86880 This issue was addressed with additional entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-84634 A race condition was addressed with additional validation. |
medium | 6.3 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84614 A logic issue was addressed with improved checks. |
medium | 4.6 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84610 A file quarantine bypass was addressed with additional checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84594 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84595 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84590 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84542 An access issue was addressed with improved access restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84496 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-84498 The issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84493 An authentication issue was addressed with improved state management. |
medium | 4.4 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-65392 A permissions issue was addressed with additional restrictions. |
medium | 4.4 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-65397 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-65368 A logic issue was addressed with improved validation. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-64789 This issue was addressed with improved validation of file attributes. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-64750 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-43736 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-113948 A permissions issue was addressed with additional restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113950 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.4 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113952 A logic issue was addressed with improved checks. |
medium | 5.4 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-113940 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113943 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-113935 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-113936 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113937 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-113938 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-113939 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-113910 A memory initialization issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-113913 An input validation issue was addressed with improved input validation. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113914 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113915 A race condition was addressed with additional validation. |
medium | 4.7 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-113901 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-113903 A use-after-free issue was addressed with improved memory management. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.