October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,591
Critical
3,297
High
7,976
Medium
7,646
Low
740
Severity not reported
4,932
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101687 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101676 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business S... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101680 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101681 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101640 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (compon... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101660 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113058 Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113059 Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113060 Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113073 Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113075 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-98149 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix pe... |
high | 7.8 | — | Linux / linux kernel | 2026-09-25 | 2026-10-21 |
| CVE-2026-98150 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix BP... |
high | 7.0 | — | Linux / linux kernel | 2026-09-25 | 2026-10-21 |
| CVE-2026-95168 An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary cod... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-102214 Use after free in Windows Hyper-V allows an authorized attacker to execute code... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102215 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102216 Access of resource using incompatible type ('type confusion') in Windows StateRe... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102217 Improper resolution of path equivalence in WebDAV allows an authorized attacker... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-113074 Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113071 Use after free in Notifications in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113055 Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113053 Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113043 Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113031 Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113032 Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113033 Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113034 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113036 Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113037 Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113039 Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-70285 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorize... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-90959 A path traversal vulnerability was found in pulpcore. |
high | 8.1 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-16460 A flaw was found in bootc and ostree. |
high | 7.4 | — | — | 2026-10-19 | 2026-10-21 |
| CVE-2026-101658 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101661 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101662 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101643 Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (com... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101645 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101646 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101647 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.