October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,456
Critical
1,335
High
5,835
Medium
6,248
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-94512 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-95635 Photoshop Desktop is affected by a Double Free vulnerability that could result i... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95636 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95637 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95638 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-93905 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allo... |
high | 8.2 | — | Ibm / websphere application server | 2026-10-13 | 2026-10-22 |
| CVE-2026-88088 Integer overflow or wraparound in SQL Server allows an authorized attacker to el... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-88081 Out-of-bounds read in SQL Server allows an authorized attacker to disclose infor... |
high | 7.7 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-88082 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevat... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-88083 Stack-based buffer overflow in SQL Server allows an unauthorized attacker to exe... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-85919 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevat... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-85886 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-85888 Out-of-bounds read in SQL Server allows an authorized attacker to disclose infor... |
high | 7.7 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-85876 Use after free in SQL Server allows an authorized attacker to elevate privileges... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-83965 Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d sampler | 2026-10-13 | 2026-10-20 |
| CVE-2026-83966 Substance3D - Sampler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d sampler | 2026-10-13 | 2026-10-20 |
| CVE-2026-83661 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-75748 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 7.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-75995 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.4 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-75996 ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability tha... |
high | 7.5 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-76001 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 7.1 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-71385 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.4 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-65674 Deserialization of untrusted data in SQL Server allows an authorized attacker to... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-67625 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-68883 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevat... |
high | 8.5 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-62840 Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an auth... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-34633 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 7.7 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-34634 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-106618 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106623 ColdFusion is affected by an Incorrect Authorization vulnerability that could le... |
high | 7.5 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-17 |
| CVE-2026-106089 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106090 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106613 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106614 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 7.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106615 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106616 ColdFusion is affected by an Improper Restriction of XML External Entity Referen... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106617 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105897 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105898 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.2 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-105900 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 7.5 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.