October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,229
Critical
3,102
High
7,094
Medium
6,630
Low
674
Severity not reported
4,729
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-100761 Privilege escalation due to use-after-free in the Graphics: WebGPU component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-100764 Privilege escalation due to incorrect boundary conditions in the Graphics: WebGP... |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-100765 Use-after-free in the JavaScript: WebAssembly component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-100824 Privilege escalation in the Places component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-100825 Use-after-free in the JavaScript Engine: JIT component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-100830 Mitigation bypass in the DOM: Navigation component. |
high | 8.1 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-100831 Use-after-free in the DOM: UI Events & Focus Handling component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-13 |
| CVE-2026-92025 Use-after-free in the DOM: Navigation component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92026 Use-after-free in the Networking component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92027 Use-after-free in the DOM: Streams component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92028 Use-after-free in the DOM: Core & HTML component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92029 Use-after-free in the SVG component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92006 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92007 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92008 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92009 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92010 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92011 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92012 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92013 Privilege escalation due to incorrect boundary conditions in the Graphics: Canva... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92014 Privilege escalation due to incorrect boundary conditions in the Graphics compon... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92015 Privilege escalation in the WebExtensions component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92016 Use-after-free in the Disability Access APIs component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92017 Privilege escalation in the DOM: Service Workers component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92019 Mitigation bypass in the Remote Settings Client component. |
high | 8.1 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92020 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRe... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92021 Use-after-free in the JavaScript Engine: JIT component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92022 Use-after-free in the DOM: HTML Parser component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-92023 Use-after-free in the XML component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-100756 Incorrect boundary conditions in the Audio/Video: Playback component. |
high | 8.1 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100767 Use-after-free in the Networking: Cache component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100768 Use-after-free in the Graphics: WebGPU component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100769 Use-after-free in the JavaScript: WebAssembly component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100771 Undefined behavior in the DOM: Streams component. |
high | 8.1 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-92024 Use-after-free in the SVG component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-06 |
| CVE-2026-100772 Use-after-free in the DOM: Core & HTML component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100773 Use-after-free in the Storage: IndexedDB component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100774 Use-after-free in the DOM: Core & HTML component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-100776 Use-after-free in the JavaScript: WebAssembly component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-06 |
| CVE-2026-92067 Use-after-free in the Widget: Gtk component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.