October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,212
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,270
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113199 Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113178 Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 all... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113157 Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113159 Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113151 Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113139 Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113142 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113144 Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113129 Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 al... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113122 Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a re... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113102 Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113098 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowe... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113077 Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113082 Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113066 Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113070 Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113050 Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113051 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113054 Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113045 Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113047 Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113035 Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remo... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113038 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113026 Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 a... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113010 Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113002 Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.... |
medium | 6.5 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-110917 Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-15 | 2026-10-19 |
| CVE-2026-110918 Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remo... |
medium | 4.3 | — | Google / chrome | 2026-10-15 | 2026-10-19 |
| CVE-2026-110170 Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110160 Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 all... |
medium | 4.2 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110143 Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 1... |
medium | 4.3 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110146 Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110150 Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8... |
medium | 5.5 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-106422 Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106424 Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.0 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106425 Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allo... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106427 Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allo... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106415 Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106416 Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106418 Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.