October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,370
Critical
1,327
High
5,803
Medium
6,212
Low
648
Severity not reported
3,380
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113030 Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-30 |
| CVE-2026-113015 Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113016 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113017 Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113018 Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113019 Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113021 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113006 Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113008 Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113009 Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113011 Use after free in CredentialProvider in Google Chrome on on Windows prior to 156... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113012 Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113013 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-112996 Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-112997 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-112998 Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-112999 Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113000 Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113001 Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113003 Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113004 Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113005 Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-112995 Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-112993 Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-112994 Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-23 |
| CVE-2026-101851 Vulnerability in the Installed Base product of Oracle E-Business Suite (componen... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101852 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101853 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101854 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101841 Vulnerability in the Global Order Promising product of Oracle E-Business Suite (... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101842 Vulnerability in the Strategic Network Optimization product of Oracle E-Business... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101847 Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101849 Vulnerability in the Installed Base product of Oracle E-Business Suite (componen... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101830 Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101831 Vulnerability in the Oracle Quality product of Oracle E-Business Suite (componen... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101833 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101834 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101835 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101837 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101840 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.