112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 13,501–13,550 of 112,666 · page 271 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-80953 | CVE-2026-80953 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() r… |
| CVE-2026-80952 | CVE-2026-80952 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_master_unregister_i3c_de… |
| CVE-2026-80951 | CVE-2026-80951 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max_payload_len svc_i3c_master_handl… |
| CVE-2026-80950 | CVE-2026-80950 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver… |
| CVE-2026-8095 | CVE-2026-8095 CVSS 8.1 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due … |
| CVE-2026-80949 | CVE-2026-80949 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf… |
| CVE-2026-80948 | CVE-2026-80948 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_op_mode_dvm_start()… |
| CVE-2026-80947 | CVE-2026-80947 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_wq from th… |
| CVE-2026-80946 | CVE-2026-80946 | In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport co… |
| CVE-2026-80945 | CVE-2026-80945 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics er… |
| CVE-2026-80944 | CVE-2026-80944 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands ke… |
| CVE-2026-80943 | CVE-2026-80943 CVSS 7.6 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92du_tx_fill_desc() uses … |
| CVE-2026-80942 | CVE-2026-80942 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() The memory a… |
| CVE-2026-80941 | CVE-2026-80941 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hc… |
| CVE-2026-80940 | CVE-2026-80940 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtw_pci_probe() allocates PCI re… |
| CVE-2026-8094 | CVE-2026-8094 CVSS 9.8mozilla | Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2. |
| CVE-2026-80939 | CVE-2026-80939 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardw… |
| CVE-2026-80938 | CVE-2026-80938 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acqu… |
| CVE-2026-80937 | CVE-2026-80937 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915_mcu_get_… |
| CVE-2026-80936 | CVE-2026-80936 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo_pm_work on stop mt7925 queues mlo_pm_work with a 5 second … |
| CVE-2026-80935 | CVE-2026-80935 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996_mcu_get_… |
| CVE-2026-80934 | CVE-2026-80934 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the f… |
| CVE-2026-80933 | CVE-2026-80933 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is … |
| CVE-2026-80932 | CVE-2026-80932 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtio_vsock_remove() stops the virtqueues … |
| CVE-2026-80931 | CVE-2026-80931 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1_f19_i2c_master_transfer() … |
| CVE-2026-80930 | CVE-2026-80930 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the… |
| CVE-2026-8093 | CVE-2026-8093 CVSS 8.1mozilla | Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these cou… |
| CVE-2026-80929 | CVE-2026-80929 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] cad_pid is globa… |
| CVE-2026-80928 | CVE-2026-80928 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask() When inspecting the credentials of ano… |
| CVE-2026-80927 | CVE-2026-80927 | In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the auxiliar… |
| CVE-2026-80926 | CVE-2026-80926 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2_oplock_break_noti() reads opi… |
| CVE-2026-80925 | CVE-2026-80925 | In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN … |
| CVE-2026-80924 | CVE-2026-80924 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encrypti… |
| CVE-2026-80923 | CVE-2026-80923 | In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_register_driver() failure If tty_register_driver() fa… |
| CVE-2026-80922 | CVE-2026-80922 | In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs … |
| CVE-2026-80921 | CVE-2026-80921 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 … |
| CVE-2026-80920 | CVE-2026-80920 | In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when queued from a wakeup handler io_req_local_work_add… |
| CVE-2026-8092 | CVE-2026-8092 CVSS 8.1mozilla | Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we pr… |
| CVE-2026-80919 | CVE-2026-80919 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format When dumping IB c… |
| CVE-2026-80918 | CVE-2026-80918 | In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_item() is called by… |
| CVE-2026-80917 | CVE-2026-80917 | In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems t… |
| CVE-2026-80916 | CVE-2026-80916 | In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is reporting KCOV stat… |
| CVE-2026-80915 | CVE-2026-80915 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested… |
| CVE-2026-80914 | CVE-2026-80914 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready iso_conn_ready() … |
| CVE-2026-80913 | CVE-2026-80913 | In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined p_bools.nprim comes from the policy im… |
| CVE-2026-80912 | CVE-2026-80912 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in security_get_classes() security_get_classes()… |
| CVE-2026-80911 | CVE-2026-80911 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If either tplg_ops->d… |
| CVE-2026-80910 | CVE-2026-80910 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four … |
| CVE-2026-8091 | CVE-2026-8091 CVSS 9.8mozilla | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thund… |
| CVE-2026-80909 | CVE-2026-80909 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, … |