October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113344 Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113704 A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113727 OpenChoreo is a developer platform for Kubernetes. |
high | 7.4 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-113728 Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113729 Moov signedxml is a pure Go library for processing signed XML documents. |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113335 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113337 Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113338 Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113339 Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113327 Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113330 Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113331 Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113332 Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113334 Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113317 Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.807... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113318 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113319 Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113320 Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.4... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113321 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113323 Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113324 Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113308 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113311 Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113312 Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113313 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113314 Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113315 Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113316 Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113299 Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113301 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113302 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113303 Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113305 Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113306 Improper input validation in Network in Google Chrome prior to 156.0.8078.47 all... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113307 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113290 Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113291 Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113292 Improper input validation in Omnibox in Google Chrome on on Android prior to 156... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113293 Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.