112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 13,701–13,750 of 112,666 · page 275 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-80763 | CVE-2026-80763 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate LE Set CIG Parameters response The Command Complete dispat… |
| CVE-2026-80762 | CVE-2026-80762 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept list UAF during suspend hci_update_event_filter_sync() wa… |
| CVE-2026-80761 | CVE-2026-80761 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname iso_sock_getname() fills… |
| CVE-2026-80760 | CVE-2026-80760 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 mgmt_hci_cmd_sync() checks that… |
| CVE-2026-80759 | CVE-2026-80759 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengths aml_download_firmware() reads two l… |
| CVE-2026-80758 | CVE-2026-80758 | In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futex_private_hash_put() drops the … |
| CVE-2026-80757 | CVE-2026-80757 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common security_get_permissi… |
| CVE-2026-80756 | CVE-2026-80756 | In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started sel_write_load() calls seli… |
| CVE-2026-80755 | CVE-2026-80755 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the class permission count perm_read() bound… |
| CVE-2026-80754 | CVE-2026-80754 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detect… |
| CVE-2026-80753 | CVE-2026-80753 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose … |
| CVE-2026-80752 | CVE-2026-80752 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the control… |
| CVE-2026-80751 | CVE-2026-80751 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() r… |
| CVE-2026-80750 | CVE-2026-80750 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_node_put() scpsys_get_bus_protection_lega… |
| CVE-2026-8075 | CVE-2026-8075 CVSS 6.5mattermost | Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user … |
| CVE-2026-80749 | CVE-2026-80749 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given a… |
| CVE-2026-80748 | CVE-2026-80748 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_da… |
| CVE-2026-80747 | CVE-2026-80747 CVSS 8.0 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the s… |
| CVE-2026-80746 | CVE-2026-80746 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK Eliza EVK (e… |
| CVE-2026-80745 | CVE-2026-80745 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNEG voltage selector table The VPOSNEG_table[] mapping does … |
| CVE-2026-80744 | CVE-2026-80744 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path In nft_flow_… |
| CVE-2026-80743 | CVE-2026-80743 | In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers The irq handlers take a st… |
| CVE-2026-80742 | CVE-2026-80742 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd(). syzbot reported a WARNING in __dev… |
| CVE-2026-80741 | CVE-2026-80741 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() access… |
| CVE-2026-80740 | CVE-2026-80740 | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough… |
| CVE-2026-8074 | CVE-2026-8074 CVSS 3.8mattermost | Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a Use… |
| CVE-2026-80739 | CVE-2026-80739 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case __mlx5e_add_fdb… |
| CVE-2026-80738 | CVE-2026-80738 CVSS 7.3 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bpf_tcp_gen_syncookie and b… |
| CVE-2026-80737 | CVE-2026-80737 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengine_terminate_all() does not wait for … |
| CVE-2026-80736 | CVE-2026-80736 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range fro… |
| CVE-2026-80735 | CVE-2026-80735 CVSS 7.3 | In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref sk_user_data Some subsystems, like BPF … |
| CVE-2026-80734 | CVE-2026-80734 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes [BUG] When running generic/795 wi… |
| CVE-2026-80733 | CVE-2026-80733 | In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be called for sockets that … |
| CVE-2026-80732 | CVE-2026-80732 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a reference… |
| CVE-2026-80731 | CVE-2026-80731 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header dev_validate_header() reads… |
| CVE-2026-80730 | CVE-2026-80730 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_stop() In test_ringbuffer()'s out_free … |
| CVE-2026-8073 | CVE-2026-8073 CVSS 7.5 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path val… |
| CVE-2026-80729 | CVE-2026-80729 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before folio split xas_try_split() adds __GFP… |
| CVE-2026-80728 | CVE-2026-80728 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devr… |
| CVE-2026-80727 | CVE-2026-80727 | In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my … |
| CVE-2026-80726 | CVE-2026-80726 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-80725 | CVE-2026-80725 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate p… |
| CVE-2026-80724 | CVE-2026-80724 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() re… |
| CVE-2026-80723 | CVE-2026-80723 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan… |
| CVE-2026-80722 | CVE-2026-80722 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_t… |
| CVE-2026-80721 | CVE-2026-80721 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_del(), ISO … |
| CVE-2026-80720 | CVE-2026-80720 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that… |
| CVE-2026-80719 | CVE-2026-80719 | In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker ba… |
| CVE-2026-80718 | CVE-2026-80718 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_ch… |
| CVE-2026-80717 | CVE-2026-80717 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication par… |