October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,457
Critical
1,337
High
5,864
Medium
6,249
Low
648
Severity not reported
3,359
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106381 Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106384 Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106385 Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106386 Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106370 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106376 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.80... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106361 Incorrect provision of specified functionality in Mobile in Google Chrome on on... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106362 Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowe... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106364 Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allow... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106365 Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106366 Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106368 UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106369 Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allow... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106353 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.80... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106354 Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106355 Missing authorization in Media in Google Chrome on on Windows prior to 155.0.805... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106356 Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote att... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106359 Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106360 Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106345 Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allo... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106348 Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106351 Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106336 Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106337 UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106338 UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106340 Missing authorization in CredentialProvider in Google Chrome on on Windows prior... |
medium | 4.6 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106343 Improper state validation in Autofill AI in Google Chrome on on Android prior to... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106344 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106327 Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106328 Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.805... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106330 Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106331 Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106332 Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106333 Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106317 UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106320 Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106321 Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106322 Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106324 Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior t... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106325 Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.