October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,401
High
6,159
Medium
6,459
Low
659
Severity not reported
2,803
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (403), apple (325), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116735 libpff through 20260926 contains an off-by-one bounds check in libpff_table_read... |
medium | 6.1 | — | — | 2026-10-26 | 2026-11-05 |
| CVE-2026-116736 Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libp... |
medium | 6.1 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116737 libphdi through 20260902 contains a heap out-of-bounds read vulnerability in lib... |
medium | 6.1 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116725 gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_m... |
medium | 5.5 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116728 libfvde through 20260923 contains a heap out-of-bounds read vulnerability in lib... |
medium | 5.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116730 Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in Div... |
medium | 5.5 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116590 snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser dev... |
medium | 5.9 | — | — | 2026-10-26 | 2026-10-30 |
| CVE-2026-116507 A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. |
medium | 5.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116514 A weakness has been identified in itsourcecode Airline Reservation System 1.0. |
medium | 4.3 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116515 A security vulnerability has been detected in itsourcecode Online Book Store 1.0... |
medium | 6.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-86985 This issue was addressed with improved input validation. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86987 An authorization issue was addressed with improved entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-10-30 |
| CVE-2026-86988 The issue was addressed with improved checks. |
medium | 4.3 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-86989 An authorization issue was addressed with improved state management. |
medium | 5.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86990 An access issue was addressed with improved access restrictions. |
medium | 5.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86984 A file access issue existed with certain home folder files. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86970 An out-of-bounds read was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-86971 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86973 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86966 This issue was addressed with improved handling of symlinks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86954 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86937 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86939 A permissions issue was addressed with additional restrictions. |
medium | 4.9 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-86941 A file quarantine bypass was addressed with additional checks. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86942 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-86931 A privacy issue was addressed with improved memory management. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86925 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86920 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86877 A path traversal issue was addressed with improved path validation. |
medium | 6.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-86880 This issue was addressed with additional entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-84634 A race condition was addressed with additional validation. |
medium | 6.3 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84614 A logic issue was addressed with improved checks. |
medium | 4.6 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84610 A file quarantine bypass was addressed with additional checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84594 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84595 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84590 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84542 An access issue was addressed with improved access restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84496 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-84498 The issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84493 An authentication issue was addressed with improved state management. |
medium | 4.4 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.