96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,501–5,550 of 96,609 · page 111 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89898 | CVE-2026-89898 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.m… |
| CVE-2026-89897 | CVE-2026-89897 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusiv… |
| CVE-2026-89896 | CVE-2026-89896 | In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrus_init_ctrls() In cedrus_init_ctrls(), the V4L2 co… |
| CVE-2026-89895 | CVE-2026-89895 | In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data twice snd_cobalt_card_create() stores cobs… |
| CVE-2026-89894 | CVE-2026-89894 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: reject geometry changes while the VBI queue is busy vidioc_s_fmt_vid_cap(… |
| CVE-2026-89893 | CVE-2026-89893 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netup_ci_exit() frees a netup_ci_sta… |
| CVE-2026-89892 | CVE-2026-89892 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers exte… |
| CVE-2026-89891 | CVE-2026-89891 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free of dev_next->devlist on disconnect When a device with h… |
| CVE-2026-89890 | CVE-2026-89890 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007_snd_init() already takes… |
| CVE-2026-8989 | CVE-2026-8989 CVSS 6.8autel | Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attac… |
| CVE-2026-89889 | CVE-2026-89889 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: imx415: Release runtime PM reference on VBLANK error The VBLANK path returned… |
| CVE-2026-89888 | CVE-2026-89888 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10_check_hwcfg() functi… |
| CVE-2026-89887 | CVE-2026-89887 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov7740: fix use-after-destroy in remove The ov7740_remove() function had a se… |
| CVE-2026-89886 | CVE-2026-89886 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isys_notifier_init() ca… |
| CVE-2026-89885 | CVE-2026-89885 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdp_probe() first tries to get the … |
| CVE-2026-89884 | CVE-2026-89884 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity che… |
| CVE-2026-89883 | CVE-2026-89883 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rc_register_device() su… |
| CVE-2026-89882 | CVE-2026-89882 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow st_ref_pic_set_predicti… |
| CVE-2026-89881 | CVE-2026-89881 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak rtl2832_s… |
| CVE-2026-89880 | CVE-2026-89880 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure rtl2832_… |
| CVE-2026-8988 | CVE-2026-8988 CVSS 6.8autel | Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot… |
| CVE-2026-89879 | CVE-2026-89879 | In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255_fillbuff() memcp… |
| CVE-2026-89878 | CVE-2026-89878 | In the Linux kernel, the following vulnerability has been resolved: media: s2255: check firmware size before reading trailing marker s2255_probe() reads a 4-… |
| CVE-2026-89877 | CVE-2026-89877 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164_dev_setup() adds the d… |
| CVE-2026-89876 | CVE-2026-89876 | In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable … |
| CVE-2026-89875 | CVE-2026-89875 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recover… |
| CVE-2026-89874 | CVE-2026-89874 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2_async_match_notif… |
| CVE-2026-89873 | CVE-2026-89873 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the shor… |
| CVE-2026-89872 | CVE-2026-89872 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link In v4l2_fwnode_parse_link()… |
| CVE-2026-89871 | CVE-2026-89871 | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure kthread_ru… |
| CVE-2026-89870 | CVE-2026-89870 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init_video_device() ins… |
| CVE-2026-8987 | CVE-2026-8987 CVSS 8.8autel | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An aut… |
| CVE-2026-89869 | CVE-2026-89869 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disable_irq() during power-off The IRQ is registered as a threaded… |
| CVE-2026-89868 | CVE-2026-89868 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called… |
| CVE-2026-89867 | CVE-2026-89867 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued Decoder inst… |
| CVE-2026-89866 | CVE-2026-89866 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag tal… |
| CVE-2026-89865 | CVE-2026-89865 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers s… |
| CVE-2026-89864 | CVE-2026-89864 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers struct qla_i2c_access carries a 16-b… |
| CVE-2026-89863 | CVE-2026-89863 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qla_chk_edif_rx_sa_dele… |
| CVE-2026-89862 | CVE-2026-89862 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix BSG job leak on validate flash image error path qla28xx_validate_flash… |
| CVE-2026-89861 | CVE-2026-89861 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() In the format 1 pa… |
| CVE-2026-89860 | CVE-2026-89860 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla… |
| CVE-2026-8986 | CVE-2026-8986 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromi… |
| CVE-2026-89859 | CVE-2026-89859 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00_do_dport_diagnost… |
| CVE-2026-89858 | CVE-2026-89858 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() qla2x00_update_fru_vers… |
| CVE-2026-89857 | CVE-2026-89857 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qla_nvme_ls_reject_iocb() allo… |
| CVE-2026-89856 | CVE-2026-89856 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha->msix_count is u16… |
| CVE-2026-89855 | CVE-2026-89855 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions w… |
| CVE-2026-89854 | CVE-2026-89854 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown qla84xx_put_chip() drops the la… |
| CVE-2026-89853 | CVE-2026-89853 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump qla2x00_free_fce_trace()… |