October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113904 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-113906 A null pointer dereference was addressed with improved validation. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-113907 A buffer overflow issue was addressed with improved memory handling. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113908 A privacy issue was addressed by removing sensitive data. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112708 A race condition was addressed with improved locking. |
medium | 5.3 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-113896 A race condition was addressed with additional validation. |
medium | 4.7 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113899 The issue was addressed with improved checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112701 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112704 An information leakage was addressed with additional validation. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112705 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112706 A permissions issue was addressed with additional restrictions. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112693 A use-after-free issue was addressed with improved memory management. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112695 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112698 The issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112699 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112687 This issue was addressed by removing the vulnerable code. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112691 An out-of-bounds write issue was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112692 This issue was addressed with additional entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112681 This issue was addressed with additional entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112684 This issue was addressed through improved state management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112685 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112675 This issue was addressed with additional entitlement checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112678 A permissions issue was addressed with additional restrictions. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112680 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112669 A race condition was addressed with improved state handling. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112672 The issue was addressed with improved checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112673 A type confusion issue was addressed with improved state handling. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112658 This issue was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112666 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112646 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112647 An access issue was addressed with additional sandbox restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112652 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112653 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112654 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112634 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112642 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112627 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112628 This issue was addressed with improved data access restriction. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112629 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112632 An uninitialized memory issue was addressed with improved memory handling. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.