October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,140
Critical
1,303
High
5,710
Medium
6,092
Low
636
Severity not reported
3,399
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (128), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112535 A race condition was addressed with improved handling of symbolic links. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112536 An out-of-bounds write issue was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112537 This issue was addressed with improved data protection. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112539 A permissions issue was addressed with additional restrictions. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112540 An integer overflow was addressed with improved input validation. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112541 A parsing issue in the handling of directory paths was addressed with improved p... |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112529 An out-of-bounds read was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112530 A logic issue was addressed with improved checks. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112531 A use after free issue was addressed with improved memory management. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112532 The issue was addressed with improved memory handling. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112534 This issue was addressed with improved access restrictions. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112521 A buffer overflow was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112522 An out-of-bounds write issue was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112523 This issue was addressed with improved handling of symlinks. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112524 A use-after-free issue was addressed with improved memory management. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112525 An out-of-bounds read was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112526 A buffer overflow was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112514 A use-after-free issue was addressed with improved memory management. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112515 An out-of-bounds read was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112516 A use-after-free issue was addressed with improved memory management. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112517 A use after free issue was addressed with improved memory management. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112518 An issue with signature validation was addressed with improved checks. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112519 An integer overflow was addressed with improved input validation. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112507 An out-of-bounds write issue was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112508 An out-of-bounds read was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112510 An out-of-bounds write issue was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112511 A path handling issue was addressed with improved logic. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112512 A path handling issue was addressed with improved validation. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112513 This issue was addressed with improved validation of symlinks. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112498 An access issue was addressed with additional sandbox restrictions. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112500 A logic issue was addressed with improved restrictions. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112501 A race condition was addressed with improved state handling. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112502 A buffer overflow was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112504 A parsing issue in the handling of directory paths was addressed with improved p... |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112505 An out-of-bounds write issue was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112491 An out-of-bounds read was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112492 A race condition was addressed with additional validation. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112493 A downgrade issue was addressed with additional version checks. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112494 A file quarantine bypass was addressed with additional checks. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112495 An out-of-bounds read was addressed with improved bounds checking. |
not reported | — | — | — | 2026-10-26 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.