October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-105713 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an auth... |
medium | 5.7 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-105719 Improper input validation in Microsoft Office SharePoint allows an authorized at... |
medium | 6.5 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-105006 Use after free in HID class driver allows an unauthorized attacker to elevate pr... |
medium | 6.4 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-104343 Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that co... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103856 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could l... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103857 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could l... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103576 Url redirection to untrusted site ('open redirect') in Active Directory Federati... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-103578 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker... |
medium | 6.8 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-26 |
| CVE-2026-103560 Improper authorization in DNS Server allows an authorized attacker to perform ta... |
medium | 5.5 | — | Microsoft / windows server 2012 | 2026-10-13 | 2026-10-16 |
| CVE-2026-103567 Buffer over-read in Windows Broadcast DVR User Service allows an authorized atta... |
medium | 5.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102865 Incorrect authorization in Microsoft Office SharePoint allows an authorized atta... |
medium | 6.5 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102867 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to d... |
medium | 6.5 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-14 |
| CVE-2026-102859 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 4.6 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102864 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 4.6 | — | Microsoft / sharepoint server | 2026-10-13 | 2026-10-14 |
| CVE-2026-102851 Incorrect privilege assignment in Visual Studio Code allows an authorized attack... |
medium | 6.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-102229 Improper limitation of a pathname to a restricted directory ('path traversal') i... |
medium | 6.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-102221 No cwe for this issue in Windows Secure Boot allows an authorized attacker to by... |
medium | 4.4 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102206 Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unaut... |
medium | 6.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102198 Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attac... |
medium | 5.3 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102199 Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauth... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102187 Use of uninitialized resource in Windows Kernel allows an authorized attacker to... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102188 Untrusted pointer dereference in Windows Storage Port Driver allows an unauthori... |
medium | 6.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-102186 Untrusted pointer dereference in Windows Network File System allows an authorize... |
medium | 4.7 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-20 |
| CVE-2026-93294 A user with query access to an Azure Monitor data source can use its resource pr... |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-95502 A Git server that Grafana's Git Sync (provisioning) is configured to use can exh... |
medium | 5.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-15577 A user or service account with read-only access to Git Sync (provisioning) conne... |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-23706 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje... |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-22 |
| CVE-2026-33374 The Prometheus rule conversion API endpoints in Grafana do not limit request bod... |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-106170 An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSan... |
medium | 4.9 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-106171 A improper neutralization of special elements used in an os command ('os command... |
medium | 6.1 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-106172 A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2... |
medium | 5.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-88833 A flaw was found in BusyBox's udhcpc DHCP client. |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-88838 A flaw was found in BusyBox's mount utility. |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-85733 FrankenPHP is a modern application server for PHP. |
medium | 5.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-69226 A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts... |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-19940 The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/... |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-19939 The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in av... |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-110125 Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnera... |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110126 waynboot-mall through 2.0.0 contains an insecure direct object reference vulnera... |
medium | 5.4 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110127 waynboot-mall through 2.0.0 contains an insecure direct object reference vulnera... |
medium | 4.3 | — | — | 2026-10-13 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.