94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,351–5,400 of 94,138 · page 108 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89733 | CVE-2026-89733 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() … |
| CVE-2026-89732 | CVE-2026-89732 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent deadlock during ep0 read loop Currently, ffs_ep0_read() holds … |
| CVE-2026-89731 | CVE-2026-89731 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read cxl_rch_get_aer_info(… |
| CVE-2026-89730 | CVE-2026-89730 | In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path … |
| CVE-2026-8973 | CVE-2026-8973 CVSS 8.8mozilla | Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
| CVE-2026-89729 | CVE-2026-89729 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature sensor_hub_get_feature… |
| CVE-2026-89728 | CVE-2026-89728 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Fix out-of-bounds access for newdevs mask When software initiates DAA (Dyna… |
| CVE-2026-89727 | CVE-2026-89727 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID vgic_v2_deactivate() passes … |
| CVE-2026-89726 | CVE-2026-89726 | In the Linux kernel, the following vulnerability has been resolved: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() Patch series "lib/ucs2_string… |
| CVE-2026-89725 | CVE-2026-89725 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32_rx_done() appends eac… |
| CVE-2026-89724 | CVE-2026-89724 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: vicodec: fix out-of-bounds write in FWHT encoder vidioc_s_fmt_vid_out() sizes the … |
| CVE-2026-89723 | CVE-2026-89723 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation Shuangpeng Bai … |
| CVE-2026-89722 | CVE-2026-89722 | In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() pci_write_legacy_io() loads 4 … |
| CVE-2026-89721 | CVE-2026-89721 | In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max_register The PHY register block is 64KB… |
| CVE-2026-89720 | CVE-2026-89720 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifs_sb_verify_signature() bound… |
| CVE-2026-8972 | CVE-2026-8972 CVSS 8.8mozilla | Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89719 | CVE-2026-89719 | In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in read_block_state() read_block_state() calculates nr_pag… |
| CVE-2026-89718 | CVE-2026-89718 | In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store() Patch series "zram: fix stale scan bo… |
| CVE-2026-89717 | CVE-2026-89717 | In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch series "zram: fix zram… |
| CVE-2026-89716 | CVE-2026-89716 | In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pa… |
| CVE-2026-89715 | CVE-2026-89715 | In the Linux kernel, the following vulnerability has been resolved: NFS/localio: fix ref leak on nfs_uuid_add_file failure When nfs_uuid_add_file() races wit… |
| CVE-2026-89714 | CVE-2026-89714 | In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails nfs4_server_com… |
| CVE-2026-89713 | CVE-2026-89713 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsd_setattr() checks whether a size upd… |
| CVE-2026-89712 | CVE-2026-89712 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock nfsd4_ssc_expire_umount… |
| CVE-2026-89711 | CVE-2026-89711 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check The header for commit e75b23f9e323 … |
| CVE-2026-89710 | CVE-2026-89710 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path When the server… |
| CVE-2026-8971 | CVE-2026-8971 CVSS 6.5mozilla | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89709 | CVE-2026-89709 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsvc_ops is published by nfsd_lockd_init()… |
| CVE-2026-89708 | CVE-2026-89708 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown After a DESTROY… |
| CVE-2026-89707 | CVE-2026-89707 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error nfsd_cross_mnt() initializes a local struc… |
| CVE-2026-89706 | CVE-2026-89706 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn->writev… |
| CVE-2026-89705 | CVE-2026-89705 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch()… |
| CVE-2026-89704 | CVE-2026-89704 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop _nfsd_copy_file_range() sample… |
| CVE-2026-89703 | CVE-2026-89703 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations nfsd4_drop_revoked_s… |
| CVE-2026-89702 | CVE-2026-89702 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_locallen The nfsd_fh_verify and nfsd_fh_… |
| CVE-2026-89701 | CVE-2026-89701 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode paths The xdrgen-based TIME_DELEG_ACCESS and… |
| CVE-2026-89700 | CVE-2026-89700 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener_set nfsd_sock_nl_policy declares NF… |
| CVE-2026-8970 | CVE-2026-8970 CVSS 8.8mozilla | Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-89699 | CVE-2026-89699 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4_decode_create() accepts an unb… |
| CVE-2026-89698 | CVE-2026-89698 | In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage struct nfsd_genl_rqstp dec… |
| CVE-2026-89697 | CVE-2026-89697 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME… |
| CVE-2026-89696 | CVE-2026-89696 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIG_NFSD_V4_… |
| CVE-2026-89695 | CVE-2026-89695 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4_decode_posixacl() reads a u32 … |
| CVE-2026-89694 | CVE-2026-89694 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOAD_CANCEL … |
| CVE-2026-89693 | CVE-2026-89693 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the … |
| CVE-2026-89692 | CVE-2026-89692 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue nfsd_break_one_deleg() set… |
| CVE-2026-89691 | CVE-2026-89691 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4_release_compoundargs(… |
| CVE-2026-89690 | CVE-2026-89690 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status UAF The rpc_status netlink dumpit wal… |
| CVE-2026-8969 | CVE-2026-8969 CVSS 8.1mozilla | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89689 | CVE-2026-89689 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very s… |