October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,412
High
6,177
Medium
6,472
Low
662
Severity not reported
2,758
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (336), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112596 An integer overflow was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112599 A use-after-free issue was addressed with improved memory management. |
medium | 6.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112601 An integer overflow was addressed with improved input validation. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112604 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112606 A type confusion issue was addressed with improved memory handling. |
medium | 6.2 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112571 A memory initialization issue was addressed with improved memory handling. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112575 The issue was addressed with improved handling of secure input state. |
medium | 6.2 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112576 A memory integrity issue was addressed with improved handling of copy-on-write p... |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112577 A privacy issue was addressed by moving sensitive data. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112563 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112566 A null pointer dereference was addressed with improved validation. |
medium | 4.6 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112568 A logic issue was addressed with improved checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112556 A race condition was addressed with additional validation. |
medium | 4.8 | — | Apple / macos | 2026-10-26 | 2026-10-30 |
| CVE-2026-112557 The issue was addressed with improved checks. |
medium | 5.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112559 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112560 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112561 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112550 A type confusion issue was addressed with improved memory handling. |
medium | 5.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112551 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112544 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112547 A type confusion issue was addressed with improved checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112535 A race condition was addressed with improved handling of symbolic links. |
medium | 4.7 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112537 This issue was addressed with improved data protection. |
medium | 4.0 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112540 An integer overflow was addressed with improved input validation. |
medium | 5.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112533 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112522 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112523 This issue was addressed with improved handling of symlinks. |
medium | 5.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112516 A use-after-free issue was addressed with improved memory management. |
medium | 6.2 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112518 An issue with signature validation was addressed with improved checks. |
medium | 6.3 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112511 A path handling issue was addressed with improved logic. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112512 A path handling issue was addressed with improved validation. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112500 A logic issue was addressed with improved restrictions. |
medium | 5.3 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112501 A race condition was addressed with improved state handling. |
medium | 6.2 | — | Apple / ipados | 2026-10-26 | 2026-11-05 |
| CVE-2026-112504 A parsing issue in the handling of directory paths was addressed with improved p... |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112506 A permissions issue was addressed with improved validation. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112491 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112494 A file quarantine bypass was addressed with additional checks. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-05 |
| CVE-2026-112483 A path handling issue was addressed with improved validation. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112488 A buffer overflow issue was addressed with improved memory handling. |
medium | 5.4 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112479 An out-of-bounds read was addressed with improved bounds checking. |
medium | 5.2 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.