October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116837 A malicious actor with access to the adjacent network could exploit a Heap-based... |
high | 8.8 | — | — | 2026-10-27 | 2026-11-03 |
| CVE-2026-116838 A malicious actor who lures an authenticated user to a malicious page could expl... |
high | 8.8 | — | — | 2026-10-27 | 2026-11-03 |
| CVE-2024-58400 llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_dec... |
high | 8.2 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116818 OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vuln... |
high | 8.2 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116819 OpenPanel before 3.0.0 contains an information disclosure vulnerability that all... |
high | 8.5 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-116811 OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116808 OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authe... |
high | 7.2 | — | — | 2026-10-27 | 2026-11-02 |
| CVE-2026-111422 In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the va... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-116747 Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that a... |
high | 8.1 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116748 Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in hand... |
high | 8.8 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116738 VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode funct... |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116724 FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::l... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116587 Go JOSE provides an implementation of the Javascript Object Signing and Encrypti... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116723 FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BM... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-86991 A buffer overflow was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86992 The issue was addressed with improved memory handling. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86986 A use-after-free issue was addressed with improved memory management. |
high | 7.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86972 A buffer overflow was addressed with improved size validation. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86974 A type confusion issue was addressed with improved checks. |
high | 7.5 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-86964 A null pointer dereference was addressed with improved input validation. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-86968 An access issue was addressed with improved access control. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86969 An out-of-bounds write was addressed with improved input validation. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-86943 The issue was addressed with improved memory handling. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-86945 This issue was addressed with improved checks. |
high | 7.1 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-86946 A use-after-free issue was addressed with improved memory management. |
high | 7.7 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-86936 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-86929 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-86916 A use after free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86896 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-84627 A buffer overflow was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-84604 A stack buffer overflow was addressed through improved input validation. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-84599 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84545 A use after free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-84494 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-84495 A use-after-free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-65384 An out-of-bounds read issue was addressed with improved input validation. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-65385 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-65373 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-65363 The issue was addressed with improved checks. |
high | 8.4 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-65350 A use-after-free issue was addressed with improved memory management. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.