October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (382), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-109519 A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. |
high | 8.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109520 A flaw has been found in Colorful iGameCenter 2.0.0.82. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-103499 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM We... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65164 NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort ar... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65170 NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65172 NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnera... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65180 NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attac... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65141 NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65147 NVIDIA DALI contains a vulnerability where an attacker could cause an uncontroll... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-65148 NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65149 NVIDIA DALI contains a vulnerability where an attacker could cause an uncontroll... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-65150 NVIDIA DALI contains a vulnerability where an attacker could cause an uncontroll... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-65161 NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an un... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65101 NVIDIA AIStore for Linux contains a vulnerability in the distributed sort compon... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65103 NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-s... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65104 NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, wher... |
high | 7.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65110 NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an atta... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-109782 Mitigation bypass in the File Handling component. |
high | 8.3 | — | — | 2026-10-13 | 2026-10-26 |
| CVE-2026-109783 Mitigation bypass in the File Handling component. |
high | 8.3 | — | — | 2026-10-13 | 2026-10-26 |
| CVE-2026-109778 Privilege escalation in the WebExtensions component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109762 Incorrect boundary conditions in the SVG component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109766 Mitigation bypass in the Enterprise Policies component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109753 Incorrect boundary conditions in the Layout component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109754 Incorrect boundary conditions in the DOM: Editor component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109756 Privilege escalation in the DOM: Navigation component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109757 Sandbox escape due to race condition in the Networking component. |
high | 8.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109759 Site isolation issue in the Networking component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109760 Mitigation bypass in the Networking: HTTP component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109743 Privilege escalation in the Panning and Zooming component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109744 Other issue in the DOM: File component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109746 Mitigation bypass in the DOM: Security component. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109747 Other issue in the Address Bar component. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109736 Frame poisoning in the Layout component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109737 Mitigation bypass in the Enterprise Policies component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109739 Privilege escalation in the WebExtensions component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109730 Integer overflow in the Graphics component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109734 Mitigation bypass in the DOM: Security component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109716 Incorrect boundary conditions in the JavaScript Engine component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component. |
high | 7.1 | — | — | 2026-10-13 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.