October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-59273 Improper access control in Azure Event Grid allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / azure event grid | 2025-10-23 | 2026-10-08 |
| CVE-2025-59503 Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthoriz... |
critical | 9.8 | — | Microsoft / azure compute resource provider | 2025-10-23 | 2026-10-08 |
| CVE-2026-65669 Improper neutralization of special elements in output used by a downstream compo... |
critical | 9.6 | — | Microsoft / sql server management studio | 2026-09-08 | 2026-10-07 |
| CVE-2026-62874 Insufficient verification of data authenticity in Azure Billing allows an unauth... |
critical | 9.8 | — | Microsoft / azure billing | 2026-09-18 | 2026-10-07 |
| CVE-2026-70341 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker... |
high | 8.8 | — | Microsoft / edge | 2026-09-11 | 2026-10-28 |
| CVE-2026-70354 Out-of-bounds write in .NET allows an unauthorized attacker to execute code loca... |
high | 7.8 | — | Microsoft / visual studio 2022 | 2026-08-11 | 2026-10-28 |
| CVE-2026-62886 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevat... |
high | 7.8 | — | Microsoft / visual studio 2022 | 2026-08-11 | 2026-10-28 |
| CVE-2026-62898 Use after free in Microsoft QUIC allows an unauthorized attacker to disclose inf... |
high | 7.5 | — | Microsoft / visual studio 2022 | 2026-08-11 | 2026-10-28 |
| CVE-2026-62871 Out-of-bounds write in .NET allows an unauthorized attacker to execute code loca... |
high | 7.8 | — | Microsoft / .net | 2026-08-11 | 2026-10-28 |
| CVE-2026-62752 Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-08-11 | 2026-10-28 |
| CVE-2026-100208 Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorize... |
high | 8.1 | — | Microsoft / 365 apps | 2026-09-25 | 2026-10-28 |
| CVE-2026-85933 Use after free in Windows Print Spooler Components allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-85934 Use after free in Windows AppX Deployment Service allows an authorized attacker... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-28 |
| CVE-2026-85936 Double free in Windows Shell allows an unauthorized attacker to execute code ove... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-85941 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-85945 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87691 Use after free in Windows Management Services allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87693 Use after free in Windows Installer allows an authorized attacker to elevate pri... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87700 Use after free in Windows Installer allows an authorized attacker to elevate pri... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87702 Integer overflow or wraparound in Windows Resource Management (MRM) allows an au... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87704 Use after free in Windows Installer allows an authorized attacker to elevate pri... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87705 Improper verification of source of a communication channel in Windows Hyper-V al... |
high | 7.4 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87706 Heap-based buffer overflow in Windows Storage Spaces Controller allows an author... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-69414 Microsoft is aware of an elevation of privilege in the Microsoft Malware Protect... |
high | 7.8 | — | Microsoft / malware protection engine | 2026-08-14 | 2026-10-28 |
| CVE-2026-68807 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta... |
high | 7.8 | — | Microsoft / 365 apps | 2026-08-11 | 2026-10-28 |
| CVE-2026-62897 Integer overflow or wraparound in .NET Framework allows an unauthorized attacker... |
high | 7.0 | — | Microsoft / .net framework | 2026-08-11 | 2026-10-28 |
| CVE-2026-62901 Unchecked input for loop condition in .NET allows an unauthorized attacker to de... |
high | 7.5 | — | Microsoft / visual studio 2022 | 2026-08-11 | 2026-10-28 |
| CVE-2026-62909 Uncaught exception in .NET allows an authorized attacker to elevate privileges l... |
high | 7.8 | — | Microsoft / visual studio 2022 | 2026-08-11 | 2026-10-28 |
| CVE-2026-62877 Stack-based buffer overflow in Windows Win32K allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-08-11 | 2026-10-28 |
| CVE-2026-57108 Access of resource using incompatible type ('type confusion') in .NET Core allow... |
high | 7.5 | — | Microsoft / .net | 2026-07-14 | 2026-10-28 |
| CVE-2026-56170 Allocation of resources without limits or throttling in ASP.NET Core allows an u... |
high | 7.5 | — | Microsoft / .net | 2026-07-14 | 2026-10-28 |
| CVE-2026-50651 Allocation of resources without limits or throttling in .NET allows an unauthori... |
high | 7.5 | — | Microsoft / .net | 2026-07-14 | 2026-10-28 |
| CVE-2026-50528 Incorrect authorization in .NET allows an unauthorized attacker to bypass a secu... |
high | 8.2 | — | Microsoft / .net | 2026-07-14 | 2026-10-28 |
| CVE-2026-50646 Protection mechanism failure in .NET Framework allows an unauthorized attacker t... |
high | 7.8 | — | Microsoft / .net framework | 2026-07-14 | 2026-10-28 |
| CVE-2026-50648 Allocation of resources without limits or throttling in .NET Framework allows an... |
high | 7.5 | — | Microsoft / .net framework | 2026-07-14 | 2026-10-28 |
| CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to exe... |
high | 7.8 | — | Microsoft / .net framework | 2026-07-14 | 2026-10-28 |
| CVE-2026-50650 Improper control of generation of code ('code injection') in .NET Framework allo... |
high | 7.8 | — | Microsoft / .net framework | 2026-07-14 | 2026-10-28 |
| CVE-2026-50524 Improper validation of specified type of input in .NET Framework allows an unaut... |
high | 7.5 | — | Microsoft / .net | 2026-07-14 | 2026-10-28 |
| CVE-2026-50525 Allocation of resources without limits or throttling in .NET allows an unauthori... |
high | 7.5 | — | Microsoft / .net framework | 2026-07-14 | 2026-10-28 |
| CVE-2026-50527 Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to... |
high | 7.5 | — | Microsoft / .net framework | 2026-07-14 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.