October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,591
Critical
3,297
High
7,976
Medium
7,646
Low
740
Severity not reported
4,932
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-93442 IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-114245 A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5... |
high | 7.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-114085 Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the... |
high | 7.9 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-113704 A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113613 FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113137 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-100134 Acrobat for Edge is affected by an out-of-bounds write vulnerability that could... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113130 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113131 Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113132 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113133 Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113135 Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113136 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-106576 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106578 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106579 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106580 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 8.2 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-83853 Use after free in Windows Hello allows an authorized attacker to elevate privile... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83855 Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unautho... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
high | 7.8 | Listed | EG Secure Solutions / SiteGuard Server Edition | 2026-10-14 | 2026-10-21 |
| CVE-2026-107209 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-83856 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attac... |
high | 8.1 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83857 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83859 Use after free in Windows NTFS allows an authorized attacker to elevate privileg... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83860 Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to de... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83861 Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authoriz... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83866 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70095 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to e... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70102 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70103 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-70104 Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an author... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-101409 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101422 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101427 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101434 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101438 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 8.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101447 Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101451 Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (componen... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101452 Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diag... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101457 Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (c... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.