October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,478
Critical
1,340
High
5,869
Medium
6,255
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-109753 Incorrect boundary conditions in the Layout component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109754 Incorrect boundary conditions in the DOM: Editor component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109756 Privilege escalation in the DOM: Navigation component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109757 Sandbox escape due to race condition in the Networking component. |
high | 8.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109759 Site isolation issue in the Networking component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109760 Mitigation bypass in the Networking: HTTP component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109743 Privilege escalation in the Panning and Zooming component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109744 Other issue in the DOM: File component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109746 Mitigation bypass in the DOM: Security component. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109747 Other issue in the Address Bar component. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109736 Frame poisoning in the Layout component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109737 Mitigation bypass in the Enterprise Policies component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109739 Privilege escalation in the WebExtensions component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109730 Integer overflow in the Graphics component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109734 Mitigation bypass in the DOM: Security component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109716 Incorrect boundary conditions in the JavaScript Engine component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component. |
high | 7.1 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-109722 JIT miscompilation in the JavaScript Engine: JIT component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109709 Information disclosure, privilege escalation in the Security: Process Sandboxing... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109712 Sandbox escape due to uninitialized memory in the Graphics component. |
high | 7.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109715 Incorrect boundary conditions in the JavaScript Engine component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109704 Privilege escalation in the Application Update component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109405 A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109403 A vulnerability was determined in conductor-oss conductor up to 3.32.5. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109832 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-89197 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-89198 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-89199 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-89201 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-72895 A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01... |
high | 7.7 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-78556 A vulnerability has been identified in Industrial Edge App Publisher (All versio... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-78557 A vulnerability has been identified in Industrial Edge App Publisher (All versio... |
high | 8.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-85114 A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webser... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-89196 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-59241 A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATI... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-102073 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 8.2 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102074 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102075 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102076 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.