October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112626 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | Apple / safari | 2026-10-26 | 2026-11-03 |
| CVE-2026-112619 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112607 An out-of-bounds read was addressed with improved bounds checking. |
high | 8.2 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112595 This issue was addressed with improved authentication. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112570 An access issue was addressed with additional sandbox restrictions. |
high | 8.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112593 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.7 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112562 A parsing issue in the handling of directory paths was addressed with improved p... |
high | 8.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112565 An integer overflow was addressed with improved input validation. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112567 This issue was addressed with improved checks. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112569 An access issue was addressed with additional sandbox restrictions. |
high | 8.2 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112553 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112554 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112555 A validation issue was addressed with improved input sanitization. |
high | 8.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112542 A permissions issue was addressed with additional restrictions. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112543 A race condition was addressed with additional validation. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112545 A parsing issue in the handling of directory paths was addressed with improved p... |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112546 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112548 A use after free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112536 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.7 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112539 A permissions issue was addressed with additional restrictions. |
high | 7.1 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112541 A parsing issue in the handling of directory paths was addressed with improved p... |
high | 7.8 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112529 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112530 A logic issue was addressed with improved checks. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112531 A use after free issue was addressed with improved memory management. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112532 The issue was addressed with improved memory handling. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112534 This issue was addressed with improved access restrictions. |
high | 8.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112524 A use-after-free issue was addressed with improved memory management. |
high | 7.7 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112525 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112515 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112517 A use after free issue was addressed with improved memory management. |
high | 7.7 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112519 An integer overflow was addressed with improved input validation. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112507 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112508 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112510 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-112513 This issue was addressed with improved validation of symlinks. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112498 An access issue was addressed with additional sandbox restrictions. |
high | 8.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112505 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112492 A race condition was addressed with additional validation. |
high | 7.0 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112493 A downgrade issue was addressed with additional version checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112495 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | — | 2026-10-26 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.