96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,801–5,850 of 96,609 · page 117 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89623 | CVE-2026-89623 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hid_hw_stop Quiesce device IO at the start of the dev… |
| CVE-2026-89622 | CVE-2026-89622 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp_i2c_smbus_read() stores … |
| CVE-2026-89621 | CVE-2026-89621 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221_raw_event() mcp2221_raw_event() never valid… |
| CVE-2026-89620 | CVE-2026-89620 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy write_cmd_to_txdma()… |
| CVE-2026-8962 | CVE-2026-8962 CVSS 8.1mozilla | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-89619 | CVE-2026-89619 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer quicks… |
| CVE-2026-89618 | CVE-2026-89618 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei->children and ei->list in init_ei() eventfs_create_dir() allocates… |
| CVE-2026-89617 | CVE-2026-89617 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIR_PAGE_ENTRY ends in a page_lcns… |
| CVE-2026-89616 | CVE-2026-89616 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() ni_read_frame() dec… |
| CVE-2026-89615 | CVE-2026-89615 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log record The copy_lcns loop and the redo short… |
| CVE-2026-89614 | CVE-2026-89614 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume vol->lcn_empty_bits_per_page is si… |
| CVE-2026-89613 | CVE-2026-89613 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if … |
| CVE-2026-89612 | CVE-2026-89612 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MF… |
| CVE-2026-89611 | CVE-2026-89611 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs_attr_update_meta() shifts the attribut… |
| CVE-2026-89610 | CVE-2026-89610 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates tha… |
| CVE-2026-8961 | CVE-2026-8961 CVSS 6.5mozilla | Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-89609 | CVE-2026-89609 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs_exorcise_daemon() dr… |
| CVE-2026-89608 | CVE-2026-89608 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a po… |
| CVE-2026-89607 | CVE-2026-89607 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet parse_tag_3_packet() … |
| CVE-2026-89606 | CVE-2026-89606 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed … |
| CVE-2026-89605 | CVE-2026-89605 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a … |
| CVE-2026-89604 | CVE-2026-89604 | In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may be called by unprivi… |
| CVE-2026-89603 | CVE-2026-89603 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the followin… |
| CVE-2026-89602 | CVE-2026-89602 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advan… |
| CVE-2026-89601 | CVE-2026-89601 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had … |
| CVE-2026-89600 | CVE-2026-89600 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify_pre_content() builds its file_ra… |
| CVE-2026-89599 | CVE-2026-89599 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm_probe() reg… |
| CVE-2026-89598 | CVE-2026-89598 | In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks ma… |
| CVE-2026-89597 | CVE-2026-89597 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_init() registers th… |
| CVE-2026-89596 | CVE-2026-89596 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv_suspend() and nv_… |
| CVE-2026-89595 | CVE-2026-89595 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent mark updates When a mark gets a new even… |
| CVE-2026-89594 | CVE-2026-89594 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI dri… |
| CVE-2026-89593 | CVE-2026-89593 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, __… |
| CVE-2026-89592 | CVE-2026-89592 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() rocket_job_p… |
| CVE-2026-89591 | CVE-2026-89591 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocket_ioctl_submit_job() releas… |
| CVE-2026-89590 | CVE-2026-89590 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocket_job_run() In rocket_job_run(), after taki… |
| CVE-2026-8959 | CVE-2026-8959 CVSS 9.6 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbir… |
| CVE-2026-89589 | CVE-2026-89589 | In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks The CXL CPER work registration… |
| CVE-2026-89588 | CVE-2026-89588 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_er… |
| CVE-2026-89587 | CVE-2026-89587 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in query_capability() query_capability() copi… |
| CVE-2026-89586 | CVE-2026-89586 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata_scsi_write_sam… |
| CVE-2026-89585 | CVE-2026-89585 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL… |
| CVE-2026-89584 | CVE-2026-89584 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessar… |
| CVE-2026-89583 | CVE-2026-89583 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_data() eir_get_service_data() walks the a… |
| CVE-2026-89582 | CVE-2026-89582 | In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_firmware() frees bp… |
| CVE-2026-89581 | CVE-2026-89581 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the… |
| CVE-2026-89580 | CVE-2026-89580 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() returns a per-CPU perf_ca… |
| CVE-2026-8958 | CVE-2026-8958 CVSS 8.6 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderb… |
| CVE-2026-89579 | CVE-2026-89579 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom_map_alloc() has two … |
| CVE-2026-89578 | CVE-2026-89578 | In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM_IO_BIO requests, do_regi… |