October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,204
Critical
1,207
High
5,399
Medium
5,731
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87347 Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com... |
critical | 9.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87337 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87302 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87251 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-83396 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-83397 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-83399 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-81212 IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to pe... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-60432 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113336 Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113342 Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113328 Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113300 Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113283 Memory corruption in CredentialProvider in Google Chrome on on Windows prior to... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113263 Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113270 Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113261 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113252 Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113235 Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113222 Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113211 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113186 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113189 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113169 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113171 Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113138 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allo... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113126 Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113116 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113084 Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113089 Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.4... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113078 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113072 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113056 Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113023 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113014 Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113020 Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113007 Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-112992 Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-101808 Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101809 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.