October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,594
Critical
3,297
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101796 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101783 Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101786 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101744 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101746 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 7.3 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101757 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101758 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101759 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101768 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101719 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101739 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 7.0 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101742 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101707 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business S... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101708 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101712 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101694 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101698 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101699 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101703 Vulnerability in the Pasta product of Oracle E-Business Suite (component: Intern... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101705 Vulnerability in the Oracle Common Applications product of Oracle E-Business Sui... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101688 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101690 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-114045 FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side r... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114050 vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache iden... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114055 vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vuln... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-113040 Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113041 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113042 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113044 Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113046 Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113048 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113049 Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113052 Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113081 Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113085 Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113086 Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113087 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113100 Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113101 Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113103 Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.