October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,596
Critical
3,297
High
7,980
Medium
7,645
Low
740
Severity not reported
4,934
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85850 Release of invalid pointer or reference in Windows Kernel allows an authorized a... |
high | 7.8 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85851 Use after free in Windows SmartScreen allows an authorized attacker to elevate p... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85853 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85854 Use after free in Windows DWM Core Library allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85855 Use after free in Windows DWM Core Library allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85856 Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows a... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85858 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85860 Use after free in Windows Message Queuing Queue Manager allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85861 Use after free in Windows Clipboard User Service allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-85863 Use after free in Windows Clipboard User Service allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-92386 When writing a long cookie name and value to a Netscape cookie jar, a remote
HTT... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-92387 By permanently omitting the final control-response line, a malicious FTP,
IMAP,... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-97206 NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-ov... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-29 |
| CVE-2026-92287 Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and Py... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91223 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86409 Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication,
c... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86410 A flaw in the curl command line tool's logic makes it only set SSH host
verifica... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86412 A remote HTTP server can set a cookie that curl accepts and writes to a
Netscape... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-65591 n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator... |
high | 8.8 | — | N8n / n8n | 2026-07-22 | 2026-10-29 |
| CVE-2026-65015 n8n versions before 2.30.1 contain a privilege escalation vulnerability in the A... |
high | 8.8 | — | N8n / n8n | 2026-07-22 | 2026-10-29 |
| CVE-2026-65016 n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation... |
high | 8.8 | — | N8n / n8n | 2026-07-22 | 2026-10-29 |
| CVE-2026-58205 GRR is a resource management and reservation application. |
high | 8.1 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-59158 Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applicat... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-59164 NORA is a self-hosted artifact registry and pull-through cache. |
high | 7.1 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-59179 OpenHop is a tool for creating interactive data-flow diagrams. |
high | 8.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-59257 n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL... |
high | 8.8 | — | N8n / n8n | 2026-07-08 | 2026-10-29 |
| CVE-2026-58202 OpenReception's appointment booking software provides an end-to-end encrypted ap... |
high | 8.3 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-56776 n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the... |
high | 7.4 | — | N8n / n8n | 2026-07-08 | 2026-10-29 |
| CVE-2026-118659 Happy DOM is a JavaScript implementation of a web browser without its graphical... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116009 Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows us... |
high | 8.8 | — | — | 2026-10-24 | 2026-10-29 |
| CVE-2026-115969 A flaw has been found in Travisun Opptrix 0.4.0. |
high | 7.3 | — | — | 2026-10-24 | 2026-10-29 |
| CVE-2026-108086 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity referen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-108087 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-63889 In the Linux kernel, the following vulnerability has been resolved:
scsi: scsi_... |
high | 8.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-29 |
| CVE-2026-83749 Use after free in Windows Overlay Filter allows an authorized attacker to elevat... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83750 Time-of-check time-of-use (toctou) race condition in Windows Error Reporting all... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83751 Use after free in Windows MIDI Service Module allows an authorized attacker to e... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83752 Use after free in Windows Installer allows an authorized attacker to elevate pri... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83753 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an auth... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-29 |
| CVE-2026-83754 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.