October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112484 This issue was addressed with improved file handling. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112485 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112486 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112487 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112477 A race condition was addressed with improved locking. |
high | 7.0 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112480 A permissions issue was addressed with additional restrictions. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112482 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.1 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112469 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112470 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112473 An authorization issue was addressed with improved state management. |
high | 7.4 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112474 A use-after-free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112476 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112461 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112464 An out-of-bounds write issue was addressed with improved input validation. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112466 An out-of-bounds read was addressed with improved input validation. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-04 |
| CVE-2026-112453 A path handling issue was addressed with improved validation. |
high | 7.7 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112454 The issue was addressed with improved memory handling. |
high | 8.2 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112456 An out-of-bounds write issue was addressed with improved input validation. |
high | 7.8 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112457 A double free issue was addressed with improved memory management. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112459 A race condition was addressed with improved state handling. |
high | 7.0 | — | Apple / ipados | 2026-10-26 | 2026-11-03 |
| CVE-2026-112449 An integer overflow was addressed with improved input validation. |
high | 7.5 | — | — | 2026-10-26 | 2026-11-03 |
| CVE-2026-112451 An out-of-bounds read was addressed with improved bounds checking. |
high | 8.2 | — | — | 2026-10-26 | 2026-11-04 |
| CVE-2026-112434 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112437 A logic issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112438 A logic issue was addressed with improved state management. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112424 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112427 An authentication issue was addressed with improved state management. |
high | 8.1 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112430 An authentication issue was addressed with improved validation of user attribute... |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-112417 An integer overflow was addressed with improved input validation. |
high | 7.8 | — | Apple / visionos | 2026-10-26 | 2026-11-03 |
| CVE-2026-112410 A double free issue was addressed with improved memory management. |
high | 7.5 | — | Apple / macos | 2026-10-26 | 2026-11-04 |
| CVE-2026-115924 Rembg is a tool to remove images background. |
high | 8.6 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-104596 libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplem... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-104597 libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initializat... |
high | 7.5 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-104598 libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY... |
high | 7.5 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2014-125135 A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116638 The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attac... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-30 |
| CVE-2026-104591 libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_paylo... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-104593 osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_nam... |
high | 7.5 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-104594 libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-30 |
| CVE-2026-72756 Routinator exits when an rsync URI for a file obtained over RRDP contains a path... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.