October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,229
Critical
3,102
High
7,094
Medium
6,630
Low
674
Severity not reported
4,729
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106353 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106354 Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106355 Missing authorization in Media in Google Chrome on on Windows prior to 155.0.805... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106356 Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote att... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106359 Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106360 Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106361 Incorrect provision of specified functionality in Mobile in Google Chrome on on... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106362 Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowe... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106364 Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allow... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106365 Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106366 Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106368 UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106369 Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allow... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106370 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-110146 Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110143 Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 1... |
medium | 4.3 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110160 Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 all... |
medium | 4.2 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110170 Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106327 Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106287 Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106425 Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allo... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106266 Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106267 Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106286 Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106331 Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106385 Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106381 Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106297 Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 al... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106418 Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106208 Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-11 |
| CVE-2026-106261 Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106280 Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.805... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106289 Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106389 Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106397 Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106422 Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106216 Cross-site request forgery in ReadingList in Google Chrome on on Android prior t... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106376 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106333 Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106384 Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.