96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,751–5,800 of 96,609 · page 116 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89669 | CVE-2026-89669 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished in… |
| CVE-2026-89668 | CVE-2026-89668 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init(… |
| CVE-2026-89667 | CVE-2026-89667 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC w… |
| CVE-2026-89666 | CVE-2026-89666 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an N… |
| CVE-2026-89665 | CVE-2026-89665 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder conver… |
| CVE-2026-89664 | CVE-2026-89664 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_release nfsd4_decode_createhow4() calls nfsd… |
| CVE-2026-89663 | CVE-2026-89663 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids li… |
| CVE-2026-89662 | CVE-2026-89662 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() release… |
| CVE-2026-89661 | CVE-2026-89661 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem Writing a filesystem path… |
| CVE-2026-89660 | CVE-2026-89660 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a … |
| CVE-2026-8966 | CVE-2026-8966 CVSS 7.5mozilla | Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89659 | CVE-2026-89659 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds o… |
| CVE-2026-89658 | CVE-2026-89658 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40_clean_admi… |
| CVE-2026-89657 | CVE-2026-89657 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd_client.c:osd_sparse_… |
| CVE-2026-89656 | CVE-2026-89656 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by ar… |
| CVE-2026-89655 | CVE-2026-89655 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_for_each_ent… |
| CVE-2026-89654 | CVE-2026-89654 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates … |
| CVE-2026-89653 | CVE-2026-89653 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets … |
| CVE-2026-89652 | CVE-2026-89652 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the M… |
| CVE-2026-89651 | CVE-2026-89651 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode in handle_session() handle_session() decod… |
| CVE-2026-89650 | CVE-2026-89650 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/m… |
| CVE-2026-8965 | CVE-2026-8965 CVSS 7.5mozilla | Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89649 | CVE-2026-89649 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the MDS-suppl… |
| CVE-2026-89648 | CVE-2026-89648 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_deleg_inos() decode… |
| CVE-2026-89647 | CVE-2026-89647 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_cap_reclaim_work() … |
| CVE-2026-89646 | CVE-2026-89646 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount ceph_dirty_folio() takes a … |
| CVE-2026-89645 | CVE-2026-89645 | In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, eac… |
| CVE-2026-89644 | CVE-2026-89644 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_… |
| CVE-2026-89643 | CVE-2026-89643 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule() is used … |
| CVE-2026-89642 | CVE-2026-89642 | In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending cifs_setsize() cal… |
| CVE-2026-89641 | CVE-2026-89641 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() When the else branch of… |
| CVE-2026-89640 | CVE-2026-89640 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 With len == 0 (clone … |
| CVE-2026-8964 | CVE-2026-8964 CVSS 7.5mozilla | Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89639 | CVE-2026-89639 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC cifs_do_truncate() is… |
| CVE-2026-89638 | CVE-2026-89638 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions W… |
| CVE-2026-89637 | CVE-2026-89637 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 Wh… |
| CVE-2026-89636 | CVE-2026-89636 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tgts() When free_tgts() frees all structures in ce… |
| CVE-2026-89635 | CVE-2026-89635 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbd_reopen_durab… |
| CVE-2026-89634 | CVE-2026-89634 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_data() error context loop The check added by… |
| CVE-2026-89633 | CVE-2026-89633 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2(… |
| CVE-2026-89632 | CVE-2026-89632 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() reparse_buf_p… |
| CVE-2026-89631 | CVE-2026-89631 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon() boun… |
| CVE-2026-89630 | CVE-2026-89630 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the data_offset bound in is_valid_oplock_break() Commit 83bfbd0bb902… |
| CVE-2026-8963 | CVE-2026-8963 CVSS 7.5mozilla | Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89629 | CVE-2026-89629 | In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed… |
| CVE-2026-89628 | CVE-2026-89628 | In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcd_debug_eeprom_r… |
| CVE-2026-89627 | CVE-2026-89627 | In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() duplicate… |
| CVE-2026-89626 | CVE-2026-89626 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attri… |
| CVE-2026-89625 | CVE-2026-89625 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind For GHL (Guitar Hero Live… |
| CVE-2026-89624 | CVE-2026-89624 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universal_pidff_prob… |