October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,212
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,270
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106420 Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106405 Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.... |
medium | 6.0 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106406 Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.3... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106407 Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106408 Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106410 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106413 Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106396 Improper input validation in Omnibox in Google Chrome on on Android prior to 155... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-15 |
| CVE-2026-106397 Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106398 Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106400 Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106402 Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 al... |
medium | 4.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106404 Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 al... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106388 Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106389 Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106390 Incorrect provision of specified functionality in SanitizerAPI in Google Chrome... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106391 Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106392 Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106394 Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106395 Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.805... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106379 Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106380 UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106381 Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106384 Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106385 Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106386 Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106370 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106376 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106361 Incorrect provision of specified functionality in Mobile in Google Chrome on on... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106362 Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowe... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106364 Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allow... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106365 Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106366 Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106368 UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106369 Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allow... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106353 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106354 Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106355 Missing authorization in Media in Google Chrome on on Windows prior to 155.0.805... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106356 Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote att... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106359 Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.