96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,951–6,000 of 96,609 · page 120 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89483 | CVE-2026-89483 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup_discard() always maps sizeof(struct nvme_… |
| CVE-2026-89482 | CVE-2026-89482 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone Commit 25e5cb780e62… |
| CVE-2026-89481 | CVE-2026-89481 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_r2t() does… |
| CVE-2026-89480 | CVE-2026-89480 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvme_tcp_recv_data() completes a r… |
| CVE-2026-8948 | CVE-2026-8948 CVSS 9.1mozilla | Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89479 | CVE-2026-89479 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctp_endpoint_bh_rcv() loo… |
| CVE-2026-89478 | CVE-2026-89478 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed sctp_rcv() resolves the transport once pe… |
| CVE-2026-89477 | CVE-2026-89477 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp_process_strreset_outreq(), s… |
| CVE-2026-89476 | CVE-2026-89476 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream->outcnt underflow on duplicate RECONF responses A cached RECONF chunk ma… |
| CVE-2026-89475 | CVE-2026-89475 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-manag… |
| CVE-2026-89474 | CVE-2026-89474 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb_work before freeing the charger The USB-PHY notifier qu… |
| CVE-2026-89473 | CVE-2026-89473 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power_supply reference leak bq25890_fw_probe() acquires a ref… |
| CVE-2026-89472 | CVE-2026-89472 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger_manager… |
| CVE-2026-89471 | CVE-2026-89471 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd-charger: bound the EC-reported port count cros_usbpd_charger_pr… |
| CVE-2026-89470 | CVE-2026-89470 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS Currently the cros_us… |
| CVE-2026-8947 | CVE-2026-8947 CVSS 7.3mozilla | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, a… |
| CVE-2026-89469 | CVE-2026-89469 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8727: fix use-after-free in lp8727_release_irq() lp8727_isr_func(), the … |
| CVE-2026-89468 | CVE-2026-89468 | In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flush… |
| CVE-2026-89467 | CVE-2026-89467 | In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notify() queues enable_w… |
| CVE-2026-89466 | CVE-2026-89466 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: terminate the strings from firmware The qcom_battmgr_sc8280x… |
| CVE-2026-89465 | CVE-2026-89465 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can … |
| CVE-2026-89464 | CVE-2026-89464 | In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030_charger: cancel workers via devm bci is devm-allocated. Two worker… |
| CVE-2026-89463 | CVE-2026-89463 | In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 has no remove callback, so u… |
| CVE-2026-89462 | CVE-2026-89462 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040_get_vcell() and max17040… |
| CVE-2026-89461 | CVE-2026-89461 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040_work() requeue… |
| CVE-2026-89460 | CVE-2026-89460 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cyc… |
| CVE-2026-8946 | CVE-2026-8946 CVSS 7.5mozilla | Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Th… |
| CVE-2026-89459 | CVE-2026-89459 CVSS 7.0 | In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIY_PERCPU() with older binutils Commit a737737cdb9c ("s390/percpu: Inf… |
| CVE-2026-89458 | CVE-2026-89458 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd_int_handler() completes a… |
| CVE-2026-89457 | CVE-2026-89457 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysf… |
| CVE-2026-89456 | CVE-2026-89456 CVSS 7.0 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_posta… |
| CVE-2026-89455 | CVE-2026-89455 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix use-after-free of event IRQs during teardown plda_pcie_irq_domain_deinit()… |
| CVE-2026-89454 | CVE-2026-89454 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_in… |
| CVE-2026-89453 | CVE-2026-89453 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommu_call_iopf_notifier() looks up t… |
| CVE-2026-89452 | CVE-2026-89452 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm_iommu_probe() adds its devm-man… |
| CVE-2026-89451 | CVE-2026-89451 | In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev before the SVA handle is visible iommu_attach_device_pasid() i… |
| CVE-2026-89450 | CVE-2026-89450 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field tegra241_vintf_init_vs… |
| CVE-2026-8945 | CVE-2026-8945 CVSS 7.5mozilla | Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. |
| CVE-2026-89449 | CVE-2026-89449 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add iommu_moc… |
| CVE-2026-89448 | CVE-2026-89448 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of reques… |
| CVE-2026-89447 | CVE-2026-89447 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_notify_unmap() skips… |
| CVE-2026-89446 | CVE-2026-89446 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_iova_rwsem() takes a… |
| CVE-2026-89445 | CVE-2026-89445 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_IOPF borrows an atta… |
| CVE-2026-89444 | CVE-2026-89444 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set_attribute() p… |
| CVE-2026-89443 | CVE-2026-89443 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and … |
| CVE-2026-89442 | CVE-2026-89442 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clos_assoc() validates… |
| CVE-2026-89441 | CVE-2026-89441 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and free… |
| CVE-2026-89440 | CVE-2026-89440 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq() registers the SD… |
| CVE-2026-8944 | CVE-2026-8944 CVSS 4.3 | The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. This… |
| CVE-2026-89439 | CVE-2026-89439 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent with other places, a… |