October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,407
High
6,171
Medium
6,469
Low
659
Severity not reported
2,775
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (421), apple (331), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-86989 An authorization issue was addressed with improved state management. |
medium | 5.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86990 An access issue was addressed with improved access restrictions. |
medium | 5.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86984 A file access issue existed with certain home folder files. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86970 An out-of-bounds read was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-86971 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86973 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86966 This issue was addressed with improved handling of symlinks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86954 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86937 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86939 A permissions issue was addressed with additional restrictions. |
medium | 4.9 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-86941 A file quarantine bypass was addressed with additional checks. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86942 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-86931 A privacy issue was addressed with improved memory management. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86925 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86920 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86877 A path traversal issue was addressed with improved path validation. |
medium | 6.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-86880 This issue was addressed with additional entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-84634 A race condition was addressed with additional validation. |
medium | 6.3 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84614 A logic issue was addressed with improved checks. |
medium | 4.6 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84610 A file quarantine bypass was addressed with additional checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84594 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84595 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84590 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84542 An access issue was addressed with improved access restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84496 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-84498 The issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84493 An authentication issue was addressed with improved state management. |
medium | 4.4 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-65392 A permissions issue was addressed with additional restrictions. |
medium | 4.4 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-65397 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-65368 A logic issue was addressed with improved validation. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-64789 This issue was addressed with improved validation of file attributes. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-64750 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-43736 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-116582 Seroval facilitates JavaScript value stringification, including complex structur... |
medium | 4.7 | — | — | 2026-10-26 | 2026-10-30 |
| CVE-2026-116579 Autobahn Python is a WebSocket and WAMP implementation for Python that supports... |
medium | 5.9 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116577 Tornado is a Python web framework and asynchronous networking library. |
medium | 5.3 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116575 Mem0 provides persistent memory infrastructure for AI agents and applications. |
medium | 6.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116502 A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. |
medium | 4.4 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-113948 A permissions issue was addressed with additional restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113950 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.4 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.