October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,229
Critical
3,102
High
7,094
Medium
6,630
Low
674
Severity not reported
4,729
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-95326 Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed... |
high | 8.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95314 Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a... |
high | 8.1 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95285 Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8... |
high | 8.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95278 Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowe... |
high | 8.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95380 Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95381 Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 al... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95372 Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a r... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95373 Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-102299 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102301 Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a rem... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102302 Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95301 Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allo... |
high | 8.1 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95344 Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a rem... |
high | 8.0 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95376 Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037... |
high | 8.0 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95362 Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 a... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95365 Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95369 Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allo... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2023-0697 Inappropriate implementation in Full screen mode in Google Chrome on Android pri... |
medium | 6.5 | — | Google / chrome | 2023-02-07 | 2026-10-28 |
| CVE-2023-0704 Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481... |
medium | 6.5 | — | Google / chrome | 2023-02-07 | 2026-10-28 |
| CVE-2023-20627 In pqframework, there is a possible out of bounds write due to a missing bounds... |
medium | 6.7 | — | Google / android | 2023-03-07 | 2026-10-28 |
| CVE-2023-2462 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63... |
medium | 4.3 | — | Google / chrome | 2023-05-03 | 2026-10-28 |
| CVE-2023-2468 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0... |
medium | 4.3 | — | Google / chrome | 2023-05-03 | 2026-10-28 |
| CVE-2026-113077 Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113082 Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113209 Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113224 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113157 Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113054 Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113047 Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113050 Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113051 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113102 Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113151 Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113178 Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 all... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113159 Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113193 Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113199 Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113201 Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113223 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113225 Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.