October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,229
Critical
3,102
High
7,094
Medium
6,630
Low
674
Severity not reported
4,729
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92072 Incorrect boundary conditions in the Safe Browsing component. |
high | 8.0 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92073 Privilege escalation in the Enterprise Policies component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92074 Mitigation bypass in the Popup Blocker component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92076 Incorrect boundary conditions in the Networking component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92058 Use-after-free in the Graphics component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92060 Use-after-free in the Internationalization component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92062 Privilege escalation in the Session Restore component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92064 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 compone... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92065 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 compone... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92047 Privilege escalation in the Crash Reporting component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92049 Use-after-free in the Widget: Win32 component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92052 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL co... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92053 Privilege escalation in the Graphics: CanvasWebGL component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92054 Privilege escalation in the Memory component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92055 Privilege escalation in the DevTools component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92056 Use-after-free in the Graphics: Text component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92033 Privilege escalation in Firefox for Android. |
high | 8.8 | — | Mozilla / firefox mobile | 2026-09-15 | 2026-10-05 |
| CVE-2026-92040 Use-after-free in the JavaScript: WebAssembly component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92042 Race condition in the DOM: Content Processes component. |
high | 7.5 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92043 Privilege escalation due to incorrect boundary conditions in the Audio/Video com... |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92044 Information disclosure in the Networking: HTTP component. |
high | 7.5 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-92046 Use-after-free in the Graphics component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-15 | 2026-10-05 |
| CVE-2026-100813 Invalid pointer in the JavaScript Engine: JIT component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100814 Incorrect boundary conditions in the JavaScript Engine: JIT component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100815 Use-after-free in the CSS Parsing and Computation component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100816 Site isolation issue in the DOM: Networking component. |
high | 8.1 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100777 Use-after-free in the Graphics: Canvas2D component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100779 Use-after-free in the XSLT component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100780 Use-after-free in the DOM: Core & HTML component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100808 Mitigation bypass in the DOM: Service Workers component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100809 Same-origin policy bypass in the DevTools component. |
high | 8.1 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100820 Privilege escalation in the Address Bar component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100832 Use-after-free in the Graphics: Canvas2D component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100782 Privilege escalation due to incorrect boundary conditions in the Graphics compon... |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100784 Use-after-free in the Layout: Text and Fonts component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100785 Use-after-free in the DOM: Core & HTML component. |
high | 8.8 | — | Mozilla / firefox | 2026-09-29 | 2026-10-05 |
| CVE-2026-100799 Uninitialized memory in the Graphics: WebGPU component. |
medium | 4.3 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
| CVE-2026-100802 Uninitialized memory in the Graphics: WebGPU component. |
medium | 4.3 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
| CVE-2026-100806 Uninitialized memory in the Graphics: WebGPU component. |
medium | 4.3 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
| CVE-2026-100793 JIT miscompilation in the JavaScript Engine component. |
medium | 6.5 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.