94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,101–5,150 of 94,138 · page 103 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89964 | CVE-2026-89964 | In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is p… |
| CVE-2026-89963 | CVE-2026-89963 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Fix null-ptr-def in extra size calculation A static Sashiko AI review… |
| CVE-2026-89962 | CVE-2026-89962 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Prevent kexec range truncation Sashiko AI review pointed out the foll… |
| CVE-2026-89961 | CVE-2026-89961 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population vmemmap_populate_c… |
| CVE-2026-89960 | CVE-2026-89960 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() In vfio_ap_m… |
| CVE-2026-8996 | CVE-2026-8996 CVSS 6.5 | The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 vi… |
| CVE-2026-89959 | CVE-2026-89959 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove The vfio_ap_config_re… |
| CVE-2026-89958 | CVE-2026-89958 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL The ap_driver st… |
| CVE-2026-89957 | CVE-2026-89957 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfio_ap_m… |
| CVE-2026-89956 | CVE-2026-89956 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects In order… |
| CVE-2026-89955 | CVE-2026-89955 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in status_show() during queue probe When vfio_ap_mdev_probe_… |
| CVE-2026-89954 | CVE-2026-89954 CVSS 8.0 | In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer[8] to locate the im… |
| CVE-2026-89953 | CVE-2026-89953 | In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoops: free page bitmap when the backing MTD is removed mtdoops_notify_add() alloc… |
| CVE-2026-89952 | CVE-2026-89952 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: validate ONFI extended parameter page sections nand_flash_detect_ext_param_… |
| CVE-2026-89951 | CVE-2026-89951 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the s… |
| CVE-2026-89950 | CVE-2026-89950 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadv_mcast_forw_packet() and … |
| CVE-2026-8995 | CVE-2026-8995 CVSS 4.3 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and includin… |
| CVE-2026-89949 | CVE-2026-89949 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of t… |
| CVE-2026-89948 | CVE-2026-89948 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is gett… |
| CVE-2026-89947 | CVE-2026-89947 CVSS 8.0 | In the Linux kernel, the following vulnerability has been resolved: clk: meson: align gxbb_32k_clk_sel number of parents with actual count The following out-… |
| CVE-2026-89946 | CVE-2026-89946 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l33: drain threaded IRQ before runtime suspend cs35l33_runtime_suspend() curren… |
| CVE-2026-89945 | CVE-2026-89945 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l34: drain threaded IRQ before runtime suspend cs35l34_runtime_suspend() curren… |
| CVE-2026-89944 | CVE-2026-89944 | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdac_hda: Fix hlink refcount leak on component registration failure hdac_hda_dev_pr… |
| CVE-2026-89943 | CVE-2026-89943 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongson_card_parse_acpi()… |
| CVE-2026-89942 | CVE-2026-89942 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix potential use-after-free in anonymous buffer release An anonymous buffer… |
| CVE-2026-89941 | CVE-2026-89941 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Make IIO DMA fence release RCU-safe The `dma_fence` documentation states tha… |
| CVE-2026-89940 | CVE-2026-89940 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The `iio_dma_fence` implementat… |
| CVE-2026-89939 | CVE-2026-89939 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlas_buffer_post… |
| CVE-2026-89938 | CVE-2026-89938 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF The atlas dr… |
| CVE-2026-89937 | CVE-2026-89937 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthread_run() can fail and retur… |
| CVE-2026-89936 | CVE-2026-89936 | In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332_set_value() enables the … |
| CVE-2026-89935 | CVE-2026-89935 | In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() … |
| CVE-2026-89934 | CVE-2026-89934 | In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acqu… |
| CVE-2026-89933 | CVE-2026-89933 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enum… |
| CVE-2026-89932 | CVE-2026-89932 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first u… |
| CVE-2026-89931 | CVE-2026-89931 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and c… |
| CVE-2026-89930 | CVE-2026-89930 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flu… |
| CVE-2026-8993 | CVE-2026-8993 CVSS 6.5 | D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handler… |
| CVE-2026-89929 | CVE-2026-89929 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, … |
| CVE-2026-89928 | CVE-2026-89928 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk __kvm_rmap_lock() d… |
| CVE-2026-89927 | CVE-2026-89927 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock Fix an issue where userspace o… |
| CVE-2026-89926 | CVE-2026-89926 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix length check __import_wp_info() struct kvm_hw_breakpoint::len is a __u64 t… |
| CVE-2026-89925 | CVE-2026-89925 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory leak in guest debug handling bp_data is freed only for the error ca… |
| CVE-2026-89924 | CVE-2026-89924 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix old_data leak in guest debug error path __import_wp_info() allocates a per… |
| CVE-2026-89923 | CVE-2026-89923 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvm_s390_clear_bp_data() is only called … |
| CVE-2026-89922 | CVE-2026-89922 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data __import_wp_info() backs up the origi… |
| CVE-2026-89921 | CVE-2026-89921 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for inject_pfault_token __kvm_inject_pfault_to… |
| CVE-2026-89920 | CVE-2026-89920 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem d… |
| CVE-2026-8992 | CVE-2026-8992 CVSS 8.8ivanti | An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary cod… |
| CVE-2026-89919 | CVE-2026-89919 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: keyop: use mmu_lock to read gmap->asce Every other dat_* consumer in this file… |