94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,301–5,350 of 94,138 · page 107 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89779 | CVE-2026-89779 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef->size covers the record's name and value When an EA record has a no… |
| CVE-2026-89778 | CVE-2026-89778 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofs_uncompress_block(… |
| CVE-2026-89777 | CVE-2026-89777 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily… |
| CVE-2026-89776 | CVE-2026-89776 | In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter en… |
| CVE-2026-89775 | CVE-2026-89775 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Computing the effe… |
| CVE-2026-89774 | CVE-2026-89774 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready sk deref in sco_conn_ready must be don… |
| CVE-2026-89773 | CVE-2026-89773 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not ha… |
| CVE-2026-89772 | CVE-2026-89772 | In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb ("btrfs: unify foli… |
| CVE-2026-89771 | CVE-2026-89771 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffer readers trace_buffer subbuf_size is … |
| CVE-2026-89770 | CVE-2026-89770 | In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fs_bio_integrity_alloc might not a… |
| CVE-2026-8977 | CVE-2026-8977 CVSS 6.4 | The WP GDPR Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ninja_gdpr_ajax_actions' AJAX action in versions up to, a… |
| CVE-2026-89769 | CVE-2026-89769 CVSS 7.4 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path When cpuhp_setu… |
| CVE-2026-89768 | CVE-2026-89768 | In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing_file_open() derives the path to be stor… |
| CVE-2026-89767 | CVE-2026-89767 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-mismatch path ovl_create_real() releases t… |
| CVE-2026-89766 | CVE-2026-89766 | In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace ioctl The PIDFD_GET_*_NAMESPACE ioctls in p… |
| CVE-2026-89765 | CVE-2026-89765 | In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct… |
| CVE-2026-89764 | CVE-2026-89764 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition wh… |
| CVE-2026-89763 | CVE-2026-89763 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering trusted_tpm_exit() drops the TPM chip reference … |
| CVE-2026-89762 | CVE-2026-89762 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin_current_label_crit_section() AppArmor's begin_curr… |
| CVE-2026-89761 | CVE-2026-89761 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa_vec_unique() null … |
| CVE-2026-89760 | CVE-2026-89760 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm, swap: don't free a hibernation slot that is in the swap cache A slot with a folio in … |
| CVE-2026-8976 | CVE-2026-8976 CVSS 4.3 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in … |
| CVE-2026-89759 | CVE-2026-89759 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup when scanning task stacks Patch series "mm/kmemleak: avoid… |
| CVE-2026-89758 | CVE-2026-89758 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-… |
| CVE-2026-89757 | CVE-2026-89757 | In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevictable folio handling sort_folio() has a shortcut… |
| CVE-2026-89756 | CVE-2026-89756 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() migrate_pages_batc… |
| CVE-2026-89755 | CVE-2026-89755 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freeing swapcache __migrate_device_pages() r… |
| CVE-2026-89754 | CVE-2026-89754 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() If ->pmd_entry() sets walk-… |
| CVE-2026-89753 | CVE-2026-89753 | In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() I am seeing some rcu_task… |
| CVE-2026-89752 | CVE-2026-89752 | In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operatio… |
| CVE-2026-89751 | CVE-2026-89751 | In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle_in() and handle_out() in arch/x86/coc… |
| CVE-2026-89750 | CVE-2026-89750 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Clear copied tracing state before fork duplication dup_task_struct()… |
| CVE-2026-8975 | CVE-2026-8975 CVSS 8.8mozilla | Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume th… |
| CVE-2026-89749 | CVE-2026-89749 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR_PTR to kthread_stop() event_test_stuff() calls kthread_run… |
| CVE-2026-89748 | CVE-2026-89748 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer reader swap simple_ring_buffer_swap_r… |
| CVE-2026-89747 | CVE-2026-89747 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change Writing to buff… |
| CVE-2026-89746 | CVE-2026-89746 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on diffe… |
| CVE-2026-89745 | CVE-2026-89745 | In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmap_prepare Commit 651fdda8406d ("relay: update relay to… |
| CVE-2026-89744 | CVE-2026-89744 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for_each_child_node() When iterate over chil… |
| CVE-2026-89743 | CVE-2026-89743 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response length nsm_sendrecv_msg_locked() stores the… |
| CVE-2026-89742 | CVE-2026-89742 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: rapidio: mport_cdev: fix use-after-free in dma_req_free() dma_req_free() acquires buf_mut… |
| CVE-2026-89741 | CVE-2026-89741 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in __video_register_device()" This reverts co… |
| CVE-2026-89740 | CVE-2026-89740 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx_uart_ports[] lifetime imx_uart_probe() publishes its devm-allo… |
| CVE-2026-8974 | CVE-2026-8974 CVSS 8.8mozilla | Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effor… |
| CVE-2026-89739 | CVE-2026-89739 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition … |
| CVE-2026-89738 | CVE-2026-89738 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mo… |
| CVE-2026-89737 | CVE-2026-89737 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freeing tbt on remove tbt_altmode_remove() d… |
| CVE-2026-89736 | CVE-2026-89736 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix use-after-free on sound card disconnect g_audio_cleanup() invok… |
| CVE-2026-89735 | CVE-2026-89735 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups on teardown f_midi2_alloc_inst() creat… |
| CVE-2026-89734 | CVE-2026-89734 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init() In uvcg_video_init(),… |