October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,480
Critical
1,344
High
5,906
Medium
6,283
Low
651
Severity not reported
3,296
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1320), google (757), oracle (180), ibm (140), adobe (138), broadcom (61), apple (59), langflow (57), apache (47), freerdp (42)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-86929 An out-of-bounds write issue was addressed with improved bounds checking. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-86916 A use after free issue was addressed with improved memory management. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84627 A buffer overflow was addressed with improved bounds checking. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84604 A stack buffer overflow was addressed through improved input validation. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
| CVE-2026-84599 The issue was addressed with improved memory handling. |
high | 7.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-65327 A logic issue was addressed with improved checks. |
high | 8.4 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-113947 This issue was addressed with improved access restrictions. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-30 |
| CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112688 A memory corruption issue was addressed with improved memory handling. |
high | 8.8 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112484 This issue was addressed with improved file handling. |
high | 7.8 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112457 A double free issue was addressed with improved memory management. |
high | 7.1 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112438 A logic issue was addressed with improved state management. |
high | 8.8 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-112427 An authentication issue was addressed with improved state management. |
high | 8.1 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-86948 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-30 |
| CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-29 |
| CVE-2026-86961 A race condition was addressed with additional validation. |
high | 7.8 | — | Apple / ipados | 2026-10-20 | 2026-11-02 |
| CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. |
high | 7.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-86987 An authorization issue was addressed with improved entitlement checks. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-10-30 |
| CVE-2026-86971 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86954 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-86925 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-86920 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / iphone os | 2026-10-26 | 2026-11-02 |
| CVE-2026-84634 A race condition was addressed with additional validation. |
medium | 6.3 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84614 A logic issue was addressed with improved checks. |
medium | 4.6 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84594 A logic issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84595 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-84496 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-113943 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-113939 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-113913 An input validation issue was addressed with improved input validation. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113914 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113907 A buffer overflow issue was addressed with improved memory handling. |
medium | 6.1 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-113908 A privacy issue was addressed by removing sensitive data. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112708 A race condition was addressed with improved locking. |
medium | 5.3 | — | Apple / macos | 2026-10-26 | 2026-10-29 |
| CVE-2026-113896 A race condition was addressed with additional validation. |
medium | 4.7 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112701 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112706 A permissions issue was addressed with additional restrictions. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112614 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112616 An authorization issue was addressed with improved access control. |
medium | 5.5 | — | Apple / ipados | 2026-10-26 | 2026-11-02 |
| CVE-2026-112617 An information disclosure issue was addressed with improved logic. |
medium | 5.5 | — | Apple / macos | 2026-10-26 | 2026-11-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.