94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,151–5,200 of 94,138 · page 104 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89918 | CVE-2026-89918 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly handle end of VA space TLBI invalidation Our TLB invalidation by VA… |
| CVE-2026-89917 | CVE-2026-89917 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping While VNCR T… |
| CVE-2026-89916 | CVE-2026-89916 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry A VNCR TLB inval… |
| CVE-2026-89915 | CVE-2026-89915 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Remove VM-wide VNCR mapping counter The global VNCR mapping counter is used t… |
| CVE-2026-89914 | CVE-2026-89914 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decode_range_tlbi()… |
| CVE-2026-89913 | CVE-2026-89913 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables vgic_v3_save_pe… |
| CVE-2026-89912 | CVE-2026-89912 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops… |
| CVE-2026-89911 | CVE-2026-89911 CVSS 7.9 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range ha… |
| CVE-2026-89910 | CVE-2026-89910 CVSS 7.3 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector[] is … |
| CVE-2026-8991 | CVE-2026-8991 CVSS 4.4 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_… |
| CVE-2026-89909 | CVE-2026-89909 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Free init resources if kvm_init() fails kvm_loongarch_init() calls kvm_lo… |
| CVE-2026-89908 | CVE-2026-89908 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY kvm_arch_prepare_memory_… |
| CVE-2026-89907 | CVE-2026-89907 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate MSI data before routing it to EIOINTC pch_msi_set_irq() passes e… |
| CVE-2026-89906 | CVE-2026-89906 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmp_off… |
| CVE-2026-89905 | CVE-2026-89905 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout pl… |
| CVE-2026-89904 | CVE-2026-89904 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpi_package_ids[] array overflow With LoongArch virt machine, a typical s… |
| CVE-2026-89903 | CVE-2026-89903 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook tra… |
| CVE-2026-89902 | CVE-2026-89902 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Avoid preempt count underflow without probe LoongArch uses break 11 for the br… |
| CVE-2026-89901 | CVE-2026-89901 | In the Linux kernel, the following vulnerability has been resolved: media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref airspy_d… |
| CVE-2026-89900 | CVE-2026-89900 | In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rc_free_device() call The commit dccc0c3ddf8… |
| CVE-2026-89899 | CVE-2026-89899 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cec_transmit_msg_… |
| CVE-2026-89898 | CVE-2026-89898 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.m… |
| CVE-2026-89897 | CVE-2026-89897 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusiv… |
| CVE-2026-89896 | CVE-2026-89896 | In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrus_init_ctrls() In cedrus_init_ctrls(), the V4L2 co… |
| CVE-2026-89895 | CVE-2026-89895 | In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data twice snd_cobalt_card_create() stores cobs… |
| CVE-2026-89894 | CVE-2026-89894 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: reject geometry changes while the VBI queue is busy vidioc_s_fmt_vid_cap(… |
| CVE-2026-89893 | CVE-2026-89893 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netup_ci_exit() frees a netup_ci_sta… |
| CVE-2026-89892 | CVE-2026-89892 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers exte… |
| CVE-2026-89891 | CVE-2026-89891 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free of dev_next->devlist on disconnect When a device with h… |
| CVE-2026-89890 | CVE-2026-89890 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007_snd_init() already takes… |
| CVE-2026-8989 | CVE-2026-8989 CVSS 6.8autel | Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attac… |
| CVE-2026-89889 | CVE-2026-89889 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: imx415: Release runtime PM reference on VBLANK error The VBLANK path returned… |
| CVE-2026-89888 | CVE-2026-89888 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10_check_hwcfg() functi… |
| CVE-2026-89887 | CVE-2026-89887 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov7740: fix use-after-destroy in remove The ov7740_remove() function had a se… |
| CVE-2026-89886 | CVE-2026-89886 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isys_notifier_init() ca… |
| CVE-2026-89885 | CVE-2026-89885 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdp_probe() first tries to get the … |
| CVE-2026-89884 | CVE-2026-89884 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity che… |
| CVE-2026-89883 | CVE-2026-89883 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rc_register_device() su… |
| CVE-2026-89882 | CVE-2026-89882 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow st_ref_pic_set_predicti… |
| CVE-2026-89881 | CVE-2026-89881 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak rtl2832_s… |
| CVE-2026-89880 | CVE-2026-89880 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure rtl2832_… |
| CVE-2026-8988 | CVE-2026-8988 CVSS 6.8autel | Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot… |
| CVE-2026-89879 | CVE-2026-89879 | In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255_fillbuff() memcp… |
| CVE-2026-89878 | CVE-2026-89878 | In the Linux kernel, the following vulnerability has been resolved: media: s2255: check firmware size before reading trailing marker s2255_probe() reads a 4-… |
| CVE-2026-89877 | CVE-2026-89877 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164_dev_setup() adds the d… |
| CVE-2026-89876 | CVE-2026-89876 | In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable … |
| CVE-2026-89875 | CVE-2026-89875 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recover… |
| CVE-2026-89874 | CVE-2026-89874 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2_async_match_notif… |
| CVE-2026-89873 | CVE-2026-89873 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the shor… |
| CVE-2026-89872 | CVE-2026-89872 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link In v4l2_fwnode_parse_link()… |