October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,573
Critical
3,295
High
7,972
Medium
7,638
Low
740
Severity not reported
4,928
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-93042 In the Linux kernel, the following vulnerability has been resolved:
dmaengine:... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-92389 libcurl's TFTP state machine fails to validate state transitions against the
req... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-90392 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix po... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90398 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90407 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
high | 7.7 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90358 In the Linux kernel, the following vulnerability has been resolved:
bpf, x86: F... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90383 In the Linux kernel, the following vulnerability has been resolved:
misc: sgi-g... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90343 In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90347 In the Linux kernel, the following vulnerability has been resolved:
arm64: ptra... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90301 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: o2hb... |
high | 8.1 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90308 In the Linux kernel, the following vulnerability has been resolved:
RDMA/erdma:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90289 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90234 In the Linux kernel, the following vulnerability has been resolved:
NFS: Return... |
high | 7.5 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90204 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: vali... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90205 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: vali... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90229 In the Linux kernel, the following vulnerability has been resolved:
nvme-apple:... |
high | 7.4 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90174 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90161 In the Linux kernel, the following vulnerability has been resolved:
erofs: fix... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90162 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: defe... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90146 In the Linux kernel, the following vulnerability has been resolved:
bpf, xdp: m... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90149 In the Linux kernel, the following vulnerability has been resolved:
NFSv4/flexf... |
high | 7.5 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90153 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: boun... |
high | 8.1 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90111 In the Linux kernel, the following vulnerability has been resolved:
ip6mr: do n... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90093 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-90041 In the Linux kernel, the following vulnerability has been resolved:
HID: sony:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-90044 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-90045 In the Linux kernel, the following vulnerability has been resolved:
USB: gadget... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89988 In the Linux kernel, the following vulnerability has been resolved:
kprobes: Pr... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89995 In the Linux kernel, the following vulnerability has been resolved:
dma-direct:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-90002 In the Linux kernel, the following vulnerability has been resolved:
ftrace: Tak... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-90013 In the Linux kernel, the following vulnerability has been resolved:
tracing: Ta... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-90016 In the Linux kernel, the following vulnerability has been resolved:
staging: rt... |
high | 7.1 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89960 In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-a... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89980 In the Linux kernel, the following vulnerability has been resolved:
ALSA: harmo... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89912 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.1 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89920 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89870 In the Linux kernel, the following vulnerability has been resolved:
media: zora... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89877 In the Linux kernel, the following vulnerability has been resolved:
media: saa7... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89860 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-30 |
| CVE-2026-89848 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.1 | — | — | 2026-09-16 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.