October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113198 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113183 Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113184 Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113185 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113187 Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113188 Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113190 Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113191 Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113174 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113175 Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113176 Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113177 Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113179 Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113180 Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113181 Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113182 Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113164 Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113165 Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113166 Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113167 Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113168 Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113170 Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113172 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113173 Improper input validation in UI in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113155 Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113156 Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113158 Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113160 Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113161 Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113162 Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113163 Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113147 Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113148 Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113149 Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113150 Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113152 Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113153 Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113154 Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113140 Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113141 Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.