October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,375
High
6,013
Medium
6,372
Low
653
Severity not reported
3,068
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (277), apple (206), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106570 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 6.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106571 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 5.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106568 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 5.3 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-106564 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 5.3 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-106566 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 4.4 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-105083 ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability... |
medium | 4.2 | — | Imagemagick / imagemagick | 2026-10-03 | 2026-10-14 |
| CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caus... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116157 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick t... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116159 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in t... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116160 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffe... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116150 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX enco... |
low | 3.1 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116151 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in t... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116153 ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-... |
low | 2.5 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116142 ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116143 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116144 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recur... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116145 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy... |
low | 3.9 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116146 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in t... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116147 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer der... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116148 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulne... |
low | 3.6 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-116140 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-25 | 2026-11-03 |
| CVE-2026-109282 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion f... |
low | 2.5 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109277 ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -scrip... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109278 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in t... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109279 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronizatio... |
low | 2.5 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in... |
low | 2.5 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109270 ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process... |
low | 3.3 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109271 ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109274 ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vu... |
low | 2.5 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109264 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recur... |
low | 3.7 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
| CVE-2026-109266 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection v... |
low | 3.6 | — | Imagemagick / imagemagick | 2026-10-12 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.