October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,979
Critical
1,280
High
5,617
Medium
5,999
Low
633
Severity not reported
3,450
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1302), google (733), ibm (140), adobe (128), oracle (120), broadcom (61), langflow (56), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98481 In the Linux kernel, the following vulnerability has been resolved:
nfc: port10... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98482 In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98483 In the Linux kernel, the following vulnerability has been resolved:
nfc: fix us... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98467 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98468 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98470 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98472 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: F... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98473 In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-a... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98474 In the Linux kernel, the following vulnerability has been resolved:
s390/pci: F... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98457 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98458 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98459 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98460 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98461 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98462 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98463 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98447 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix wi... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98448 In the Linux kernel, the following vulnerability has been resolved:
xfs: releas... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98449 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98450 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98452 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98453 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98455 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98444 In the Linux kernel, the following vulnerability has been resolved:
xfs: drop d... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98445 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98446 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98433 In the Linux kernel, the following vulnerability has been resolved:
KVM: PPC: B... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98434 In the Linux kernel, the following vulnerability has been resolved:
sysctl: Che... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98435 In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98437 In the Linux kernel, the following vulnerability has been resolved:
media: qcom... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98438 In the Linux kernel, the following vulnerability has been resolved:
mptcp: opti... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98439 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-10-18 | 2026-10-26 |
| CVE-2026-111997 ip-address before 10.7.4 allows a denial of service (CPU consumption from quadra... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-105391 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-107274 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-107345 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-107772 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-108117 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-106549 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-16 | 2026-10-18 |
| CVE-2026-107346 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-16 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.