CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- imagination technologies graphics ddkGPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading3.3 Low
- imagination technologies graphics ddkGPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()7.0 High
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: chunkreader message length permits chunk-size overflow6.5 Medium
- apple xcodeThis issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2....3.3 Low
- apple xcodeAn authorization issue was addressed with improved state management. This issue is fixed in Xcode...3.3 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback5.8 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: required actions bypassed via kc_action parameter5.4 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: authorization bypass via uma resource registration idor4.3 Medium
- google chromeOut of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote...4.3 Medium
- google chromeUse after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a...8.8 High
- google chromeUse after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote...9.6 Critical
- google chromeUse after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker...8.8 High
- google chromeMemory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote...9.6 Critical
- google chromeUse after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote...4.3 Medium
- google chromeMemory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote...6.5 Medium
- No product listedCross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote...6.1 Medium
- No product listedBitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.6.5 Medium
- No product listedBitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.5.3 Medium
- No product listedBitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit7.5 High
- No product listedAn issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of...7.5 High
- No product listedA path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows...7.5 High
- No product listedAn authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component...5.4 Medium
- No product listedSkuul School Management System through version 2.6.5 is vulnerable to incorrect access control in...6.5 Medium
phodavDebianchezdav-3.2-1.1 on GA mediaNo scorephodavDebianchezdav-3.2-1.1 on GA mediaNo scorephodavDebianchezdav-3.2-1.1 on GA mediaNo scoreglib-networkingopenSUSEglib-networking-2.90.1-1.1 on GA mediaNo scoreglib-networkingopenSUSEglib-networking-2.90.1-1.1 on GA mediaNo scoreglib-networkingopenSUSEglib-networking-2.90.1-1.1 on GA mediaNo scoreglib-networkingopenSUSEglib-networking-2.90.1-1.1 on GA mediaNo score- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service7.5 High
- No product listedAn issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its...9.8 Critical
request-tracker5Debian[Unknown description]No scorerequest-tracker5Debian[Unknown description]No score- Show moreLoading…