October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113100 Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113101 Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113085 Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113086 Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113087 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113088 Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.4... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113090 Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113091 Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113092 Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.4... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113075 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113076 Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113079 Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113080 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113081 Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113083 Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113067 Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113068 Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113069 Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113071 Use after free in Notifications in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113073 Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113074 Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113057 Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113058 Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113059 Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113060 Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113061 Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113062 Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113063 Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113064 Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113065 Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113048 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113049 Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113052 Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113053 Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113055 Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113040 Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113041 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113042 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113043 Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113044 Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.