October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,595
Critical
3,298
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116584 Seroval facilitates JavaScript value stringification, including complex structur... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116580 Seroval facilitates JavaScript value stringification, including complex structur... |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116576 systeminformation is a System and OS information library for node.js. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-109556 EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnera... |
high | 8.0 | — | — | 2026-10-12 | 2026-10-26 |
| CVE-2026-109422 NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-26 |
| CVE-2026-109361 MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in n... |
high | 7.3 | — | — | 2026-10-12 | 2026-10-26 |
| CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability |
high | 8.6 | Listed | Adobe / Acrobat and Reader | 2026-04-11 | 2026-10-26 |
| CVE-2026-77692 An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS reque... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-26 |
| CVE-2026-81736 If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is the... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-26 |
| CVE-2026-19666 On a resolver configured to use ``dns64``, if an applicable answer from the auth... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-26 |
| CVE-2026-76163 If BIND is loaded with a "`named.conf`" file that contains no global "`options`"... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-26 |
| CVE-2026-80274 If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-26 |
| CVE-2025-70517 The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce a... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-26 |
| CVE-2025-70522 The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce a... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-26 |
| CVE-2025-61560 A race condition vulnerability in the SessionManager of CNCF: Cloud Native Compu... |
high | 8.1 | — | — | 2026-10-09 | 2026-10-26 |
| CVE-2026-56386 Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-19630 In a BIND resolver, inbound DNS protocol messages with a particular structure wi... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-94300 Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`name... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-96888 A BIND resolver that is configured with both a "redirect" zone and "qname-minimi... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-97313 A recursive BIND server that receives a query with recursion desired (RD=1) foll... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-112394 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112396 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112392 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-85911 Use after free in Windows StateRepository API allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-85912 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-70112 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-70113 Integer overflow or wraparound in Windows Client for NFS allows an authorized at... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-70008 Integer overflow or wraparound in Windows IP Over USB Service allows an authoriz... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-26 |
| CVE-2026-70010 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implem... |
high | 7.1 | — | Cisco / enterprise nfv infrastructure software | 2026-09-08 | 2026-10-26 |
| CVE-2026-69765 Use after free in Windows Storport Miniport Driver allows an unauthorized attack... |
high | 8.8 | — | Microsoft / windows server 2025 | 2026-10-13 | 2026-10-26 |
| CVE-2026-69766 Use after free in Windows Storage allows an authorized attacker to elevate privi... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-69783 External control of file name or path in Windows Update allows an authorized att... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-26 |
| CVE-2026-69795 Null pointer dereference in Windows Clipboard Server allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-91527 Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91515 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91517 Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Ora... |
high | 8.0 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91520 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91521 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-69798 Use after free in Windows Wired AutoConfig Service allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.