October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,204
Critical
1,207
High
5,399
Medium
5,731
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google... |
critical | 9.8 | Listed | Google / brotli | 2026-10-22 | 2026-10-28 |
| CVE-2026-113336 Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113342 Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113328 Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113300 Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113283 Memory corruption in CredentialProvider in Google Chrome on on Windows prior to... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113263 Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113270 Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113261 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113252 Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113235 Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113222 Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113211 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113186 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113189 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113169 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113171 Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113138 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allo... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113126 Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113116 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113084 Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113089 Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.4... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113078 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113072 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113056 Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113023 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113014 Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113020 Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113007 Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-112992 Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-110916 Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 all... |
critical | 9.6 | — | Google / chrome | 2026-10-15 | 2026-10-19 |
| CVE-2026-110161 Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remo... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110165 Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 all... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110152 Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 a... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110159 Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allow... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110149 Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remo... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110136 Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110142 Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-106414 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106417 Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remo... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.