October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,859
Critical
1,275
High
5,585
Medium
5,949
Low
622
Severity not reported
3,428
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1296), google (733), ibm (140), oracle (120), adobe (120), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113211 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113186 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113189 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113169 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113171 Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113138 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allo... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113126 Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113116 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113084 Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113089 Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.4... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113078 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113072 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113056 Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113023 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113014 Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113020 Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113007 Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-112992 Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-101808 Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101809 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101767 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101763 Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101765 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101634 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101590 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101537 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utilit... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101528 Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Or... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101529 Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Or... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101521 Vulnerability in Oracle APEX (component: General). |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101499 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101501 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101503 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101484 Vulnerability in Oracle Secure Backup (component: Backup and Restore). |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101446 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101420 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
critical | 9.6 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-9827 A arbitrary file write vulnerability exists in the boa formUploadFile functional... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-9869 A stack-based buffer overflow vulnerability exists in the boa formTR069Config fu... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-9659 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the bo... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-9660 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the bo... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-9814 An OS command injection vulnerability exists in the boa formWizard newPass funct... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.