October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,212
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,270
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-55266 In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write du... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-55269 In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety is... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49937 In multiple functions of MessageQueueBase.h, there is a possible out of bounds r... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28641 In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28647 In updateState of DeviceAdminAppsPreferenceController.java, there is a possible... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28648 In Settings, there is a possible permission bypass due to a confused deputy. |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-45524 In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due... |
high | 8.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49878 In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out... |
high | 7.2 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49880 In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds wri... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49885 In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49933 In handle_le_monitor_device_event of msft.cc, there is a possible control-flow h... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28625 In multiple locations, there is a possible permission bypass due to a logic erro... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28640 In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java,... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-103631 Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-06 |
| CVE-2026-103622 Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103623 Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-06 |
| CVE-2026-103624 Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0... |
high | 8.3 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-103625 Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-02 | 2026-10-05 |
| CVE-2026-113340 Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113341 Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113326 Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113329 Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113333 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113322 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113325 Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 al... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113309 Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113310 Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113304 Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113295 Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113296 Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113297 Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113277 Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113246 Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113237 Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113223 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113224 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113225 Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113201 Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113209 Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.4... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113193 Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.