October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,407
High
6,171
Medium
6,470
Low
662
Severity not reported
2,771
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (334), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112672 The issue was addressed with improved checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112673 A type confusion issue was addressed with improved state handling. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112658 This issue was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112666 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112646 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112647 An access issue was addressed with additional sandbox restrictions. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112652 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112653 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112654 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112634 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112642 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112627 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112628 This issue was addressed with improved data access restriction. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112629 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112632 An uninitialized memory issue was addressed with improved memory handling. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112633 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112624 This issue was addressed with improved checks. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112614 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112615 A use-after-free issue was addressed with improved memory management. |
medium | 4.3 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112616 An authorization issue was addressed with improved access control. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112617 An information disclosure issue was addressed with improved logic. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112618 An access issue was addressed with improved access restrictions. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112608 An out-of-bounds read was addressed with improved bounds checking. |
medium | 4.3 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112609 This issue was addressed with improved checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112610 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112611 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112612 A path handling issue was addressed with improved validation. |
medium | 6.2 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112596 An integer overflow was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112599 A use-after-free issue was addressed with improved memory management. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112601 An integer overflow was addressed with improved input validation. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112604 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112606 A type confusion issue was addressed with improved memory handling. |
medium | 6.2 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112571 A memory initialization issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112575 The issue was addressed with improved handling of secure input state. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112576 A memory integrity issue was addressed with improved handling of copy-on-write p... |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112577 A privacy issue was addressed by moving sensitive data. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112563 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112566 A null pointer dereference was addressed with improved validation. |
medium | 4.6 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112568 A logic issue was addressed with improved checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112556 A race condition was addressed with additional validation. |
medium | 4.8 | — | Apple / macos | 2026-10-26 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.