October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,412
High
6,177
Medium
6,472
Low
662
Severity not reported
2,758
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (336), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98954 In the Linux kernel, the following vulnerability has been resolved:
net: always... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98955 In the Linux kernel, the following vulnerability has been resolved:
flow_dissec... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98956 In the Linux kernel, the following vulnerability has been resolved:
ASoC: adau1... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98942 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98943 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98946 In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: Di... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98947 In the Linux kernel, the following vulnerability has been resolved:
vsock: Fix... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98948 In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spec... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98933 In the Linux kernel, the following vulnerability has been resolved:
usb: hub: u... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98934 In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: u... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98935 In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: z... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98936 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98937 In the Linux kernel, the following vulnerability has been resolved:
perf/core:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98938 In the Linux kernel, the following vulnerability has been resolved:
rust: irq:... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98939 In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Dro... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98940 In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom:... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98924 In the Linux kernel, the following vulnerability has been resolved:
fs: avoid r... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98925 In the Linux kernel, the following vulnerability has been resolved:
bpf, sockma... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98926 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98928 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98929 In the Linux kernel, the following vulnerability has been resolved:
macsec: ini... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98930 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98931 In the Linux kernel, the following vulnerability has been resolved:
mtd: spinan... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98917 In the Linux kernel, the following vulnerability has been resolved:
parisc: Inc... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98918 In the Linux kernel, the following vulnerability has been resolved:
mm/damon/op... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98919 In the Linux kernel, the following vulnerability has been resolved:
drm/xe: har... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98920 In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98921 In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UA... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98922 In the Linux kernel, the following vulnerability has been resolved:
net: emac:... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-98923 In the Linux kernel, the following vulnerability has been resolved:
arm64: io:... |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-57209 Heimdall is a cloud native Identity Aware Proxy and Access Control Decision serv... |
not reported | — | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-57210 Heimdall is a cloud native Identity Aware Proxy and Access Control Decision serv... |
not reported | — | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-55888 XDG Desktop Portal is a desktop integration portal. |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-55889 XDG Desktop Portal is a desktop integration portal. |
not reported | — | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-54711 pghoard is a PostgreSQL backup daemon and restore tooling that stores backup dat... |
not reported | — | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98909 In the Linux kernel, the following vulnerability has been resolved:
net: cpsw_n... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98910 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98912 In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98913 In the Linux kernel, the following vulnerability has been resolved:
net: thunde... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98914 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.