October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106340 Missing authorization in CredentialProvider in Google Chrome on on Windows prior... |
medium | 4.6 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106343 Improper state validation in Autofill AI in Google Chrome on on Android prior to... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106344 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106327 Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106328 Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.805... |
medium | 5.9 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106330 Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remo... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106331 Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106332 Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106333 Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106317 UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106320 Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106321 Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a re... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106322 Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a r... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106324 Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior t... |
medium | 6.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106325 Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 a... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106326 Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allo... |
medium | 4.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106310 Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106311 Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowe... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106312 Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106313 Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0... |
medium | 5.1 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106316 UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106300 Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106302 UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.3... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106303 Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106304 Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a re... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106305 UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.805... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106306 Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allo... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106307 Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allow... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106295 Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.805... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106296 Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.80... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106297 Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 al... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106299 Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 al... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106284 Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.805... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106285 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106286 Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106287 Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remot... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-13 |
| CVE-2026-106288 Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106289 Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106290 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106275 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059... |
medium | 4.7 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.