October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,595
Critical
3,298
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113344 Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-96868 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105009 Incorrect default permissions in Windows Server Update Service allows an authori... |
high | 7.5 | — | Microsoft / windows server 2012 | 2026-10-13 | 2026-10-26 |
| CVE-2026-94380 Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSA... |
high | 8.1 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-84823 A flaw was found in WildFly. |
high | 7.1 | — | — | 2026-10-16 | 2026-10-26 |
| CVE-2026-113345 Electronic delivery item Inspection Support System provided by Japan's Ministry... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107897 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107898 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107899 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107900 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107894 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107895 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107896 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-103568 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-103569 Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to d... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105004 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105005 Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execu... |
high | 8.1 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102218 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102220 Use after free in Windows VHD miniport driver allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102225 Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to ex... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an aut... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-115975 Broken access control in JiraController in Cervantes version v1.3-beta could all... |
high | 7.1 | — | — | 2026-10-24 | 2026-10-26 |
| CVE-2026-79885 An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8... |
high | 8.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79886 An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of... |
high | 8.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79887 A vulnerability in the web interface of AOS-8 could allow an unauthenticated rem... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79888 A vulnerability in a certain web interface endpoint of AOS-8 devices could allow... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79889 Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79890 There are command injection vulnerabilities in AOS-8 that could lead to unauthen... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79891 A buffer overflow vulnerability exists in the command line interface of AOS-8 th... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79892 A memory corruption vulnerability exists in AOS-8 that could allow an authentica... |
high | 7.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79893 Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remot... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79894 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI prot... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79895 Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticat... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79955 An unauthenticated memory corruption vulnerability exists in a service accessed... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79956 A vulnerability in the CLI command handling of the AOS-8 web interface could all... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95704 A vulnerability in the web-based management interface of wireless network manage... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95705 Command injection vulnerabilities in the affected interface of AOS-8 could allow... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95706 Command injection vulnerabilities in the affected interface of AOS-8 could allow... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95707 A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an aut... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95708 Command injection vulnerabilities exist in the affected interface of AOS-10 that... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.