October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,595
Critical
3,298
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83931 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-26 |
| CVE-2026-83932 Heap-based buffer overflow in Windows Group Policy allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability |
high | 8.8 | Listed | Microsoft / SharePoint | 2026-08-11 | 2026-10-26 |
| CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Thre... |
high | 8.6 | Listed | Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 2026-10-26 |
| CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerabi... |
high | 7.0 | Listed | Microsoft / Windows Ancillary Function Driver for WinSock | 2026-08-11 | 2026-10-26 |
| CVE-2026-113220 Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-97024 A path traversal vulnerability in Flatpak's handling of the files/etc directory... |
high | 7.1 | — | — | 2026-09-29 | 2026-10-26 |
| CVE-2026-80465 A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All v... |
high | 8.7 | — | — | 2026-09-03 | 2026-10-26 |
| CVE-2026-97023 A path traversal vulnerability in Flatpak's handling of the export/bin directory... |
high | 7.1 | — | — | 2026-09-28 | 2026-10-26 |
| CVE-2026-20236 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-98945 In the Linux kernel, the following vulnerability has been resolved:
HID: steam:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98911 In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switc... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98899 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98889 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98895 In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: H... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98436 In the Linux kernel, the following vulnerability has been resolved:
accel/amdxd... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-26 |
| CVE-2023-7356 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability |
high | 8.8 | Listed | Zyxel / GS1900 Series Switches | 2026-06-16 | 2026-10-25 |
| CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability |
high | 8.4 | Listed | Langflow / Langflow | 2026-06-23 | 2026-10-25 |
| CVE-2026-70197 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-25 |
| CVE-2026-102870 Improper control of generation of code ('code injection') in ASP.NET Core allows... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-25 |
| CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability |
high | 8.2 | Listed | BerriAI / LiteLLM | 2026-07-08 | 2026-10-25 |
| CVE-2026-116208 YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability i... |
high | 8.1 | — | — | 2026-10-25 | 2026-10-25 |
| CVE-2026-116204 YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the... |
high | 8.1 | — | — | 2026-10-25 | 2026-10-25 |
| CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability |
high | 7.2 | Listed | SonicWall / SMA1000 Appliances | 2026-07-14 | 2026-10-24 |
| CVE-2026-112863 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-112852 Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-112850 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99064 In the Linux kernel, the following vulnerability has been resolved:
cipso: adju... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99030 In the Linux kernel, the following vulnerability has been resolved:
net: skbuff... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99042 In the Linux kernel, the following vulnerability has been resolved:
io_uring/ne... |
high | 8.4 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99046 In the Linux kernel, the following vulnerability has been resolved:
gve: fix XS... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99050 In the Linux kernel, the following vulnerability has been resolved:
gpio: mpsse... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99051 In the Linux kernel, the following vulnerability has been resolved:
fsverity: R... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99011 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99013 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99014 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99016 In the Linux kernel, the following vulnerability has been resolved:
riscv: fute... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99017 In the Linux kernel, the following vulnerability has been resolved:
riscv: erra... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99018 In the Linux kernel, the following vulnerability has been resolved:
riscv: entr... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.