October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83830 Heap-based buffer overflow in Windows COM+ Event System Service allows an author... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-83832 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to ele... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-27 |
| CVE-2026-83792 Incorrect authorization in Windows Device Install Service allows an authorized a... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-28 |
| CVE-2026-83793 Improper link resolution before file access ('link following') in Windows Update... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-28 |
| CVE-2026-83795 Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attac... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-83796 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-27 |
| CVE-2026-83797 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized... |
high | 8.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-27 |
| CVE-2026-83790 Use after free in Windows Hello allows an authorized attacker to elevate privile... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-28 |
| CVE-2026-83791 Improper authorization in Windows Virtual Input allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-28 |
| CVE-2026-83781 Improper null termination in Windows Program Compatibility Assistant Service all... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-11-02 |
| CVE-2026-83783 Heap-based buffer overflow in Windows Management Instrumentation allows an autho... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-11-02 |
| CVE-2026-83784 Absolute path traversal in Windows Encrypting File System (EFS) allows an author... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83785 Use after free in Windows COM+ Event System Service allows an authorized attacke... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83775 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-11-02 |
| CVE-2026-83777 Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized a... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-11-02 |
| CVE-2026-83778 Heap-based buffer overflow in Microsoft Internet Messaging API allows an unautho... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-83779 Heap-based buffer overflow in Windows Installer allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-11-02 |
| CVE-2026-83768 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83769 Use after free in OpenSSH for Windows allows an authorized attacker to elevate p... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83771 Use after free in Windows Camera Frame Server Monitor allows an unauthorized att... |
high | 8.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-11-02 |
| CVE-2026-83767 Stack-based buffer overflow in Windows Installer allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83763 Access of resource using incompatible type ('type confusion') in Windows Input S... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83757 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83758 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83759 Improper control of generation of code ('code injection') in Windows Encrypting... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83761 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83762 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83751 Use after free in Windows MIDI Service Module allows an authorized attacker to e... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83752 Use after free in Windows Installer allows an authorized attacker to elevate pri... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83753 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an auth... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83754 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83756 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83746 Absolute path traversal in Skype for Business and Microsoft Lync allows an autho... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-83749 Use after free in Windows Overlay Filter allows an authorized attacker to elevat... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83750 Time-of-check time-of-use (toctou) race condition in Windows Error Reporting all... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83738 Use after free in Windows Ancillary Function Driver for WinSock allows an author... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83739 Use after free in Windows Bluetooth Service allows an unauthorized attacker to e... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83740 Use after free in Windows Hello allows an authorized attacker to elevate privile... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83741 Use after free in Internet Explorer allows an authorized attacker to elevate pri... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83727 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.