October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112414 A stack overflow was addressed with improved input validation. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112415 An out-of-bounds write was addressed with improved input validation. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112416 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112421 A race condition was addressed with improved handling of symbolic links. |
medium | 4.7 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112423 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112413 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-86976 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-20 | 2026-11-03 |
| CVE-2026-86979 A privacy issue was addressed with improved checks. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86981 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86940 This issue was addressed by removing the vulnerable code. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86955 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-20 | 2026-11-03 |
| CVE-2026-86914 An information disclosure issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-86915 A race condition was addressed with improved locking. |
medium | 4.7 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86928 A path handling issue was addressed with improved validation. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86932 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86935 This issue was addressed by removing additional entitlements. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-10-30 |
| CVE-2026-86907 An authorization issue was addressed with improved entitlement checks. |
medium | 4.4 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-86871 An integer underflow was addressed with improved input validation. |
medium | 5.9 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-86875 An input validation issue was addressed with improved input validation. |
medium | 4.3 | — | Apple / xcode | 2026-10-20 | 2026-10-29 |
| CVE-2026-84508 This issue was addressed with improved validation of the caller's access. |
medium | 5.5 | — | Apple / ipados | 2026-10-20 | 2026-11-03 |
| CVE-2026-65396 A buffer overflow was addressed with improved size validation. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-65372 A race condition was addressed with additional validation. |
medium | 4.7 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-65379 The issue was addressed with improved handling of secure input state. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-65356 An access issue was addressed with improved access controls. |
medium | 5.5 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-86978 This issue was addressed with improved checks. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86923 An information disclosure issue was addressed with improved privacy controls. |
low | 3.3 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84605 An authorization issue was addressed with improved state management. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84528 A logging issue was addressed with improved data redaction. |
low | 3.3 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113898 A logging issue was addressed with improved data redaction. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112707 A privacy issue was addressed by moving sensitive data to a protected location. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112686 A race condition was addressed with improved locking. |
low | 3.1 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112656 An out-of-bounds read was addressed with improved bounds checking. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112660 An authorization issue was addressed with improved state management. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112665 An information disclosure issue was addressed with improved state management. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112630 An uninitialized memory issue was addressed with improved memory handling. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112462 A permissions issue was addressed with additional restrictions. |
low | 3.3 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112467 This issue was addressed with improved checks. |
low | 3.3 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112425 An out-of-bounds read was addressed with improved bounds checking. |
low | 3.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86933 A permissions issue was addressed with additional sandbox restrictions. |
low | 3.3 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86874 An out-of-bounds read was addressed with improved input validation. |
low | 3.3 | — | Apple / xcode | 2026-10-20 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.