October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,229
Critical
3,102
High
7,094
Medium
6,630
Low
674
Severity not reported
4,729
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-110156 Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110157 Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110162 Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110151 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110153 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110154 Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110155 Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110145 Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a re... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110147 Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110148 Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110137 Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110138 Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110140 Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110144 Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.80... |
high | 8.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-106341 Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106342 Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106346 Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 al... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106347 Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106349 Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106350 Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allow... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106352 Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 al... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106357 Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106363 Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106367 Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.80... |
high | 8.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-110139 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110158 Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a re... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106334 Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106403 Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106221 Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106199 Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8... |
high | 8.2 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106271 Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106274 Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 15... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106196 Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.80... |
high | 7.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106387 Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.3... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106198 Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.2 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106188 Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39... |
high | 7.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106212 Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106189 Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 a... |
high | 7.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106190 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106191 Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.