By publication date

Exploited and new serious CVEs: October 2026

8,744 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 40 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-49950No exploit	Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Poolxorbitsai · xoscar · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	0.8%	Oct 13, 2026
28Monitor	CVE-2026-62840No exploit	Linux Kernel Elevation of Privilege Vulnerabilitymicrosoft · linux 3p (third party) distros · CWE-367 Local privilege escalation Race condition	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-65674No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2019 · CWE-502 RCE Deserialization	High8.8	—	1.6%	Oct 13, 2026
34Monitor	CVE-2026-67625No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.5	—	0.5%	Oct 13, 2026
34Monitor	CVE-2026-68883No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-122 Memory safety	High8.5	—	0.5%	Oct 13, 2026
33Monitor	CVE-2026-71385No exploit	ColdFusion \| Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 RCE Broken access control (IDOR)	High8.4	—	0.3%	Oct 13, 2026
30Monitor	CVE-2026-75748No exploit	ColdFusion \| Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 SSRF	High7.6	—	0.4%	Oct 13, 2026
38Monitor	CVE-2026-75994No exploit	ColdFusion \| Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-75995No exploit	ColdFusion \| Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 RCE	High8.4	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-75996No exploit	ColdFusion \| Uncontrolled Resource Consumption (CWE-400)adobe · coldfusion · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 13, 2026
28Monitor	CVE-2026-76001No exploit	ColdFusion \| Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 SSRF	High7.1	—	0.4%	Oct 13, 2026
31Monitor	CVE-2026-83661No exploit	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-83965No exploit	Substance3D - Sampler \| Stack-based Buffer Overflow (CWE-121)adobe · substance 3d sampler · CWE-121 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-83966No exploit	Substance3D - Sampler \| Out-of-bounds Write (CWE-787)adobe · substance 3d sampler · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
28Monitor	CVE-2026-85876No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2019 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.1%	Oct 13, 2026
34Monitor	CVE-2026-85886No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-85888No exploit	Microsoft SQL Server Information Disclosure Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-125 Memory safety	High7.7	—	0.7%	Oct 13, 2026
28Monitor	CVE-2026-85919No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2019 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-88081No exploit	Microsoft SQL Server Information Disclosure Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-125 Memory safety	High7.7	—	0.7%	Oct 13, 2026
28Monitor	CVE-2026-88082No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2019 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-88083No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2022 · CWE-121 pre-auth RCE Memory safety	High7.5	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-88088No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2019 · CWE-190 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
37Monitor	CVE-2026-90530No exploit	ColdFusion \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · coldfusion 2025 · CWE-22 Path traversal	Critical9.3	—	0.3%	Oct 13, 2026
36Monitor	CVE-2026-93895No exploit	IBM WebSphere Application Server Liberty Improper Access Controlibm · websphere application server · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-93905No exploit	IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted dataibm · websphere application server · CWE-502 Pre-auth Deserialization	High8.2	—	0.3%	Oct 13, 2026
36Monitor	CVE-2026-93909No exploit	IBM WebSphere Application Server Liberty is affected by an authentication bypassibm · websphere application server · CWE-384 Pre-auth Auth bypass	Critical9.1	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-94512No exploit	SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.6%	Oct 13, 2026
31Monitor	CVE-2026-95635No exploit	Photoshop Desktop \| Double Free (CWE-415)adobe · photoshop · CWE-415 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-95636No exploit	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-95637No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-95638No exploit	Photoshop Desktop \| Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
34Monitor	CVE-2026-95639No exploit	Photoshop Desktop \| Incorrect Authorization (CWE-863)adobe · photoshop · CWE-863 RCE Broken access control (IDOR)	High8.6	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-95641No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
36Monitor	CVE-2026-95695No exploit	IBM WebSphere Application Server Liberty Incorrect Authorizationibm · websphere application server · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.3%	Oct 13, 2026
30Monitor	CVE-2026-95696No exploit	IBM WebSphere Application Server Liberty Denial of Serviceibm · websphere application server · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-96521No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-96522No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-96523No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
32Monitor	CVE-2026-96956No exploit	SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-121 Memory safety	High8.0	—	0.5%	Oct 13, 2026
31Monitor	CVE-2026-97312No exploit	Photoshop Desktop \| Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-100113No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-100114No exploit	CAI Content Credentials \| Improper Access Control (CWE-284)adobe · c2pa · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-100115No exploit	CAI Content Credentials \| Improper Access Control (CWE-284)adobe · c2pa · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-100117No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-100118No exploit	CAI Content Credentials \| Improper Certificate Validation (CWE-295)adobe · c2pa · CWE-295 Pre-auth Weak crypto	High7.5	—	0.3%	Oct 13, 2026
30Monitor	CVE-2026-100119No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-100120No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-100121No exploit	CAI Content Credentials \| Improper Certificate Validation (CWE-295)adobe · c2pa · CWE-295 Pre-auth Weak crypto	High7.5	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-100122No exploit	CAI Content Credentials \| Improper Certificate Validation (CWE-295)adobe · c2pa · CWE-295 Pre-auth Weak crypto	High7.5	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-100123No exploit	CAI Content Credentials \| Improper Certificate Validation (CWE-295)adobe · c2pa · CWE-295 Pre-auth Weak crypto	High7.5	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-100124No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-100135No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-100136No exploit	CAI Content Credentials \| Integer Overflow or Wraparound (CWE-190)adobe · c2pa · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-100137No exploit	CAI Content Credentials \| Uncontrolled Resource Consumption (CWE-400)adobe · c2pa · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-100138No exploit	CAI Content Credentials \| Uncontrolled Resource Consumption (CWE-400)adobe · c2pa · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-100139No exploit	CAI Content Credentials \| Uncontrolled Resource Consumption (CWE-400)adobe · c2pa · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-103296No exploit	CAI Content Credentials \| Improper Verification of Cryptographic Signature (CWE-347)adobe · c2pa · CWE-347 Pre-auth Weak crypto	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-103297No exploit	CAI Content Credentials \| Improper Verification of Cryptographic Signature (CWE-347)adobe · c2pa · CWE-347 Pre-auth Weak crypto	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-104345No exploit	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Pre-auth	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-105902No exploit	CAI Content Credentials \| Uncontrolled Resource Consumption (CWE-400)adobe · c2pa · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-106627No exploit	CAI Content Credentials \| Uncontrolled Resource Consumption (CWE-400)adobe · c2pa · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Oct 13, 2026
38Monitor	CVE-2026-110136No exploit	Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a google · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-110137No exploit	Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-110138No exploit	Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-416 pre-auth RCE Memory safety	High8.3	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110139No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110140No exploit	Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-110142No exploit	Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-110144No exploit	Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrgoogle · chrome · CWE-863 RCE Broken access control (IDOR)	High8.6	—	0.1%	Oct 13, 2026
33Monitor	CVE-2026-110145No exploit	Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to exgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.3	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110147No exploit	Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-110148No exploit	Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-110149No exploit	Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-110151No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-110152No exploit	Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary cogoogle · chrome · CWE-122 pre-auth RCE Memory safety	Critical9.6	—	0.5%	Oct 13, 2026
35Monitor	CVE-2026-110153No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110154No exploit	Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110155No exploit	Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox viagoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-110156No exploit	Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromisedgoogle · chrome · CWE-706 pre-auth RCE	High8.3	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110157No exploit	Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-110158No exploit	Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to exgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.3	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-110159No exploit	Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sagoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.2%	Oct 13, 2026
38Monitor	CVE-2026-110161No exploit	Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-110162No exploit	Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox viagoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-110163No exploit	Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-110164No exploit	Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sangoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
38Monitor	CVE-2026-110165No exploit	Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary codegoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-110166No exploit	Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox google · chrome · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110167No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110168No exploit	Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110169No exploit	Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110171No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-110172No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-77206No exploit	IKEv2 pre-authentication Null Pointer Dereference in EAP codethe libreswan project · libreswan · CWE-476 pre-auth RCE Memory safety Denial of service	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-77207No exploit	Null Pointer Dereference in PKCS#7 bundle with no certificatesthe libreswan project · libreswan · CWE-252 pre-auth RCE Denial of service	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-84790No exploit	OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldopenvpn · openvpn · CWE-158	High7.6	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-94453No exploit	IKEv2 Use-After-Free bug when using IKE-over-TCPthe libreswan project · libreswan · CWE-416 pre-auth RCE Memory safety Denial of service	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-95632No exploit	CAI Content Credentials \| Improper Verification of Cryptographic Signature (CWE-347)adobe · c2pa · CWE-347 Pre-auth Weak crypto	High7.5	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-95633No exploit	CAI Content Credentials \| Improper Verification of Cryptographic Signature (CWE-347)adobe · c2pa · CWE-347 Pre-auth Weak crypto	High7.5	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-95634No exploit	CAI Content Credentials \| Server-Side Request Forgery (SSRF) (CWE-918)adobe · c2pa · CWE-918 Pre-auth SSRF	High8.6	—	0.5%	Oct 13, 2026
39Monitor	CVE-2026-97381No exploit	Legacy Update ActiveX control accepts unauthorized hosting originslegacyupdate · legacyupdate · CWE-346	Critical9.9	—	0.2%	Oct 13, 2026

CVE-2026-49950
37Monitor
Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Deserialization
xorbitsai · xoscarOct 13, 2026
CVE-2026-62840
28Monitor
Linux Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · linux 3p (third party) distrosOct 13, 2026
CVE-2026-65674
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Deserialization
microsoft · sql server 2019Oct 13, 2026
CVE-2026-67625
34Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Oct 13, 2026
CVE-2026-68883
34Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
microsoft · sql server 2017Oct 13, 2026
CVE-2026-71385
33Monitor
ColdFusion | Incorrect Authorization (CWE-863)
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
adobe · coldfusionOct 13, 2026
CVE-2026-75748
30Monitor
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HighCVSS 7.6No exploitEPSS 0%
- SSRF
adobe · coldfusionOct 13, 2026
CVE-2026-75994
38Monitor
ColdFusion | Incorrect Authorization (CWE-863)
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
adobe · coldfusionOct 13, 2026
CVE-2026-75995
33Monitor
ColdFusion | Improper Input Validation (CWE-20)
HighCVSS 8.4No exploitEPSS 0%
- RCE
adobe · coldfusionOct 13, 2026
CVE-2026-75996
30Monitor
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
adobe · coldfusionOct 13, 2026
CVE-2026-76001
28Monitor
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HighCVSS 7.1No exploitEPSS 0%
- SSRF
adobe · coldfusionOct 13, 2026
CVE-2026-83661
31Monitor
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-83965
31Monitor
Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerOct 13, 2026
CVE-2026-83966
31Monitor
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerOct 13, 2026
CVE-2026-85876
28Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · sql server 2019Oct 13, 2026
CVE-2026-85886
34Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Oct 13, 2026
CVE-2026-85888
30Monitor
Microsoft SQL Server Information Disclosure Vulnerability
HighCVSS 7.7No exploitEPSS 0%
- Memory safety
microsoft · microsoft sql server 2017 (gdr)Oct 13, 2026
CVE-2026-85919
28Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · sql server 2019Oct 13, 2026
CVE-2026-88081
30Monitor
Microsoft SQL Server Information Disclosure Vulnerability
HighCVSS 7.7No exploitEPSS 0%
- Memory safety
microsoft · microsoft sql server 2017 (gdr)Oct 13, 2026
CVE-2026-88082
28Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · sql server 2019Oct 13, 2026
CVE-2026-88083
30Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · sql server 2022Oct 13, 2026
CVE-2026-88088
28Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · sql server 2019Oct 13, 2026
CVE-2026-90530
37Monitor
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CriticalCVSS 9.3No exploitEPSS 0%
- Path traversal
adobe · coldfusion 2025Oct 13, 2026
CVE-2026-93895
36Monitor
IBM WebSphere Application Server Liberty Improper Access Control
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ibm · websphere application serverOct 13, 2026
CVE-2026-93905
32Monitor
IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Deserialization
ibm · websphere application serverOct 13, 2026
CVE-2026-93909
36Monitor
IBM WebSphere Application Server Liberty is affected by an authentication bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
ibm · websphere application serverOct 13, 2026
CVE-2026-94512
35Monitor
SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Oct 13, 2026
CVE-2026-95635
31Monitor
Photoshop Desktop | Double Free (CWE-415)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-95636
31Monitor
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-95637
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-95638
31Monitor
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-95639
34Monitor
Photoshop Desktop | Incorrect Authorization (CWE-863)
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
adobe · photoshopOct 13, 2026
CVE-2026-95641
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-95695
36Monitor
IBM WebSphere Application Server Liberty Incorrect Authorization
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ibm · websphere application serverOct 13, 2026
CVE-2026-95696
30Monitor
IBM WebSphere Application Server Liberty Denial of Service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · websphere application serverOct 13, 2026
CVE-2026-96521
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-96522
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-96523
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-96956
32Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · sql server 2017Oct 13, 2026
CVE-2026-97312
31Monitor
Photoshop Desktop | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopOct 13, 2026
CVE-2026-100113
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-100114
30Monitor
CAI Content Credentials | Improper Access Control (CWE-284)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · c2paOct 13, 2026
CVE-2026-100115
30Monitor
CAI Content Credentials | Improper Access Control (CWE-284)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
adobe · c2paOct 13, 2026
CVE-2026-100117
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-100118
30Monitor
CAI Content Credentials | Improper Certificate Validation (CWE-295)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-100119
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-100120
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-100121
30Monitor
CAI Content Credentials | Improper Certificate Validation (CWE-295)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-100122
30Monitor
CAI Content Credentials | Improper Certificate Validation (CWE-295)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-100123
30Monitor
CAI Content Credentials | Improper Certificate Validation (CWE-295)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-100124
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-100135
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-100136
30Monitor
CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
adobe · c2paOct 13, 2026
CVE-2026-100137
30Monitor
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
adobe · c2paOct 13, 2026
CVE-2026-100138
30Monitor
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
adobe · c2paOct 13, 2026
CVE-2026-100139
30Monitor
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
adobe · c2paOct 13, 2026
CVE-2026-103296
30Monitor
CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-103297
30Monitor
CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-104345
30Monitor
CAI Content Credentials | Improper Input Validation (CWE-20)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
adobe · c2paOct 13, 2026
CVE-2026-105902
30Monitor
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
adobe · c2paOct 13, 2026
CVE-2026-106627
30Monitor
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
adobe · c2paOct 13, 2026
CVE-2026-110136
38Monitor
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110137
35Monitor
Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110138
33Monitor
Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110139
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110140
35Monitor
Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 13, 2026
CVE-2026-110142
38Monitor
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110144
34Monitor
Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitr
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
google · chromeOct 13, 2026
CVE-2026-110145
33Monitor
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110147
35Monitor
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110148
35Monitor
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110149
38Monitor
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110151
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110152
38Monitor
Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary co
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110153
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110154
35Monitor
Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110155
35Monitor
Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110156
33Monitor
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 13, 2026
CVE-2026-110157
35Monitor
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110158
33Monitor
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110159
38Monitor
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sa
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chromeOct 13, 2026
CVE-2026-110161
38Monitor
Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110162
35Monitor
Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110163
35Monitor
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110164
35Monitor
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the san
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110165
38Monitor
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110166
35Monitor
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110167
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110168
35Monitor
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110169
35Monitor
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110171
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-110172
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 13, 2026
CVE-2026-77206
30Monitor
IKEv2 pre-authentication Null Pointer Dereference in EAP code
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
the libreswan project · libreswanOct 13, 2026
CVE-2026-77207
30Monitor
Null Pointer Dereference in PKCS#7 bundle with no certificates
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Denial of service
the libreswan project · libreswanOct 13, 2026
CVE-2026-84790
30Monitor
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field
HighCVSS 7.6No exploitEPSS 0%
openvpn · openvpnOct 13, 2026
CVE-2026-94453
30Monitor
IKEv2 Use-After-Free bug when using IKE-over-TCP
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
the libreswan project · libreswanOct 13, 2026
CVE-2026-95632
30Monitor
CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-95633
30Monitor
CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
adobe · c2paOct 13, 2026
CVE-2026-95634
34Monitor
CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SSRF
adobe · c2paOct 13, 2026
CVE-2026-97381
39Monitor
Legacy Update ActiveX control accepts unauthorized hosting origins
CriticalCVSS 9.9No exploitEPSS 0%
legacyupdate · legacyupdateOct 13, 2026