October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-103825 Substance3D - Designer is affected by an out-of-bounds read vulnerability that c... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103826 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103827 Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerabilit... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103828 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-103829 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability t... |
medium | 5.5 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-100116 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
medium | 5.9 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-48378 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-48377 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100125 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.9 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-75633 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-75634 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 4.3 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-75638 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 6.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-76194 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 4.3 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-89277 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnera... |
medium | 5.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-102501 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-102502 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
medium | 5.3 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103820 CAI Content Credential is affected by an Improper Limitation of a Pathname to a... |
medium | 5.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.