October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,476
Critical
1,339
High
5,869
Medium
6,255
Low
648
Severity not reported
3,365
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-103558 Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthori... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-103565 Use after free in Windows Broadcast DVR User Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-103568 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102866 Improper verification of cryptographic signature in Microsoft Office SharePoint... |
high | 8.1 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102869 Access of resource using incompatible type ('type confusion') in .NET and Visual... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-102870 Improper control of generation of code ('code injection') in ASP.NET Core allows... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-25 |
| CVE-2026-103553 Out-of-bounds read in Windows Partition Management Driver allows an authorized a... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-103554 Use after free in Windows Broadcast DVR User Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102857 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized atta... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-102858 Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized at... |
high | 8.8 | — | Microsoft / microsoft 365 | 2026-10-13 | 2026-10-15 |
| CVE-2026-102860 Improper access control in Microsoft Office SharePoint allows an authorized atta... |
high | 8.8 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102861 Missing authorization in Microsoft Office SharePoint allows an authorized attack... |
high | 8.8 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102862 Incorrect authorization in Microsoft Office SharePoint allows an authorized atta... |
high | 8.8 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102863 Improper control of generation of code ('code injection') in Microsoft Office Sh... |
high | 8.8 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102599 Socket.IO enables bidirectional and low-latency communication for every platform... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-17 |
| CVE-2026-102849 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-102850 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized att... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-102856 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized atta... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-102225 Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to ex... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102226 Improper limitation of a pathname to a restricted directory ('path traversal') i... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an aut... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102231 Improper resolution of path equivalence in Visual Studio Code allows an unauthor... |
high | 7.7 | — | Microsoft / visual studio code | 2026-10-13 | 2026-10-27 |
| CVE-2026-102232 Incorrect authorization in Visual Studio Code allows an unauthorized attacker to... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-102233 Missing authorization in Visual Studio Code allows an unauthorized attacker to b... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-102215 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102216 Access of resource using incompatible type ('type confusion') in Windows StateRe... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102217 Improper resolution of path equivalence in WebDAV allows an authorized attacker... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102218 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102220 Use after free in Windows VHD miniport driver allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102207 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102208 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102209 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized... |
high | 7.0 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102211 Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102214 Use after free in Windows Hyper-V allows an authorized attacker to execute code... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-102201 Use after free in Microsoft Windows Media Foundation allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102202 Improper access control in Windows Container Isolation FS Filter Driver (unionfs... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102203 Access of resource using incompatible type ('type confusion') in RPC Runtime all... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsys... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-20 |
| CVE-2026-102205 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102194 Use after free in Windows Graphics Kernel allows an authorized attacker to eleva... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.