October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,209
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113094 Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113095 Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113096 Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113097 Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113099 Improper input validation in Omnibox in Google Chrome on on Android prior to 156... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113100 Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113101 Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113085 Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113086 Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113087 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113088 Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.4... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113090 Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allow... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113091 Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113092 Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.4... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-113075 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113076 Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113079 Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113080 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113081 Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113083 Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113067 Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113068 Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113069 Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113071 Use after free in Notifications in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113073 Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113074 Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 al... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113057 Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113058 Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113059 Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113060 Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113061 Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113062 Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113063 Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113064 Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113065 Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113048 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113049 Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113052 Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113053 Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113055 Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.