October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-95634 CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vuln... |
high | 8.6 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100124 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-106618 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-100136 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnera... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100120 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100117 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100115 CAI Content Credentials is affected by an Improper Access Control vulnerability... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100119 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100114 CAI Content Credentials is affected by an Improper Access Control vulnerability... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100137 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100122 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-19480 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-75632 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-104345 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103297 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100138 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100139 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-105902 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-106627 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103296 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2023-22231 Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected... |
medium | 5.5 | — | Adobe / bridge | 2023-02-17 | 2026-10-28 |
| CVE-2026-106628 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106631 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-95640 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that c... |
medium | 5.5 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2025-64542 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64584 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64588 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64589 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64610 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64618 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64830 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64838 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64854 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64866 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2025-64868 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-10-19 |
| CVE-2026-103294 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
medium | 5.9 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-105896 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that c... |
medium | 5.5 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-103822 Substance3D - Designer is affected by an out-of-bounds read vulnerability that c... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103823 Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerabilit... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103824 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.