October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-103628 Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103626 Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 15... |
critical | 9.6 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-95284 Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 a... |
critical | 9.6 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-118359 Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118352 Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118353 Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118354 Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowe... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118356 Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118357 Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118358 Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118346 Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118347 Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118348 Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowe... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118349 Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118350 Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118351 Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118336 Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 al... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118338 Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118339 Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118341 Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118343 Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118344 Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118329 Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.807... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118331 Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 all... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118334 Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118315 Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118317 Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118320 Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118327 Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118328 Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allo... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118314 Improper input validation in UI in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2023-0698 Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a r... |
high | 8.8 | — | Google / chrome | 2023-02-07 | 2026-10-28 |
| CVE-2026-118345 Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-28 |
| CVE-2026-113076 Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113079 Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113080 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113083 Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113344 Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113220 Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113217 Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.