October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-65327 A logic issue was addressed with improved checks. |
high | 8.4 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-64759 An integer overflow was addressed with improved input validation. |
high | 8.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-116584 Seroval facilitates JavaScript value stringification, including complex structur... |
high | 7.5 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116580 Seroval facilitates JavaScript value stringification, including complex structur... |
high | 7.3 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116581 Seroval facilitates JavaScript value stringification, including complex structur... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116576 systeminformation is a System and OS information library for node.js. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-113947 This issue was addressed with improved access restrictions. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-30 |
| CVE-2026-113949 A type confusion issue was addressed with improved state management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-113941 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113942 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113944 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113946 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-113934 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-113909 A memory corruption issue was addressed with improved input validation. |
high | 8.0 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113900 A race condition was addressed with improved state handling. |
high | 7.0 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112696 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112697 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112688 A memory corruption issue was addressed with improved memory handling. |
high | 8.8 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112689 An out-of-bounds write issue was addressed with improved input validation. |
high | 8.4 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112682 An input validation issue was addressed with improved input validation. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112683 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112676 This issue was addressed with additional entitlement checks. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112677 An authorization issue was addressed with improved access control. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112679 A use-after-free issue was addressed with improved memory management. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112668 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112670 An out-of-bounds write issue was addressed with improved input validation. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112671 A resource exhaustion issue was addressed with improved input validation. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112655 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-02 |
| CVE-2026-112659 A type confusion issue was addressed with improved memory handling. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-02 |
| CVE-2026-112651 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-02 |
| CVE-2026-112637 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112638 A heap buffer overflow was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112639 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112640 A use-after-free issue was addressed with improved memory management. |
high | 7.6 | — | Apple / safari | 2026-10-26 | 2026-11-04 |
| CVE-2026-112620 A denial-of-service issue was addressed with improved input validation. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112621 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112622 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112623 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-02 |
| CVE-2026-112625 An integer underflow was addressed with improved input validation. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.