October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,081
Critical
3,182
High
7,360
Medium
6,922
Low
714
Severity not reported
4,903
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1394), google (802), ibm (323), mozilla (182), oracle (157), adobe (147), linux (129), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106413 Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106253 Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 al... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106251 UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106415 Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106416 Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106420 Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-28667 In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due t... |
medium | 5.5 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-103627 Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote... |
medium | 6.5 | — | Google / chrome | 2026-10-02 | 2026-10-06 |
| CVE-2026-103629 Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103621 Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-95275 Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.80... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95303 Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95374 Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allow... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95382 Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowe... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95384 Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57... |
medium | 5.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95385 Inappropriate implementation in PlatformIntegration in Google Chrome on on Windo... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95360 Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remo... |
medium | 5.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95361 Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95363 UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allow... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95295 Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 all... |
medium | 4.6 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95330 Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 a... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95358 Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.... |
medium | 4.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102300 Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95290 Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95297 Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.5... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95300 Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowe... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95340 Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95342 Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95366 Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95370 Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allo... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95375 Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 al... |
medium | 6.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95364 Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 a... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95367 Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 5.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95368 Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allo... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95327 Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-110141 Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106399 Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a loc... |
low | 3.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106210 Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106180 Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allo... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106224 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 all... |
low | 3.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.