October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,456
Critical
1,335
High
5,835
Medium
6,248
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-110157 Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110158 Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a re... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110144 Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.80... |
high | 8.6 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110145 Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a re... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110147 Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110148 Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110151 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110137 Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110138 Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed... |
high | 8.3 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-110139 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-14 |
| CVE-2026-110140 Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-13 | 2026-10-15 |
| CVE-2026-105902 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-106627 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-104345 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103297 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103296 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100136 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnera... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100137 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100138 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100139 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100119 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100120 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100121 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100122 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100123 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-100124 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100135 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100114 CAI Content Credentials is affected by an Improper Access Control vulnerability... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100115 CAI Content Credentials is affected by an Improper Access Control vulnerability... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100117 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100118 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-100113 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-97312 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-96956 Stack-based buffer overflow in SQL Server allows an authorized attacker to eleva... |
high | 8.0 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-96521 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-28 |
| CVE-2026-96522 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-96523 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-95639 Photoshop Desktop is affected by an Incorrect Authorization vulnerability that c... |
high | 8.6 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95641 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95696 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could all... |
high | 7.5 | — | Ibm / websphere application server | 2026-10-13 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.