October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,544
Critical
3,297
High
7,958
Medium
7,628
Low
740
Severity not reported
4,921
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69898 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85918 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an a... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85920 Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85922 Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass... |
high | 7.4 | — | Microsoft / azure-keyvault-administration | 2026-10-13 | 2026-10-16 |
| CVE-2026-85802 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85925 Improper restriction of communication channel to intended endpoints in Azure Key... |
high | 8.2 | — | Microsoft / azure-keyvault-administration | 2026-10-13 | 2026-10-16 |
| CVE-2026-70033 Missing release of memory after effective lifetime in Remote Desktop Gateway Ser... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85803 Use after free in Windows Camera Frame Server Monitor allows an authorized attac... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-70021 Use after free in Windows Direct Composition allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85804 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-69942 Buffer over-read in Windows Overlay Filter allows an authorized attacker to exec... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-69934 Integer overflow or wraparound in Windows Spaceport.sys allows an authorized att... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-69923 Uncontrolled search path element in Windows AI allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85926 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85327 Heap-based buffer overflow in Windows Print Spooler Components allows an authori... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-88182 Use after free in Microsoft Windows Search Component allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-106614 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 7.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106615 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-88188 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-70079 Improper enforcement of behavioral workflow in Windows DNS allows an unauthorize... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-88189 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-16 |
| CVE-2026-70082 Uncaught exception in Windows DNS allows an unauthorized attacker to deny servic... |
high | 7.5 | — | Microsoft / windows server 2012 | 2026-10-13 | 2026-10-16 |
| CVE-2026-88191 Improper link resolution before file access ('link following') in Microsoft Wind... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-88194 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85322 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-70127 Use after free in DNS Server allows an unauthorized attacker to execute code ove... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85902 Heap-based buffer overflow in Windows Direct Composition allows an authorized at... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-70155 Missing release of memory after effective lifetime in Windows DNS allows an unau... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85324 Memory allocation with excessive size value in Active Directory Federation Servi... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-106613 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-85904 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85901 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85837 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate pr... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85836 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-109347 Adminer before 6.1.1 contains a remote code execution vulnerability that allows... |
high | 7.2 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-106616 ColdFusion is affected by an Improper Restriction of XML External Entity Referen... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106617 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-108976 GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via... |
high | 7.8 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-87690 The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is a... |
high | 8.8 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-103903 An incorrect authorization vulnerability in the WinBox
authentication flow of Mi... |
high | 8.8 | — | — | 2026-10-12 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.