94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,801–4,850 of 94,138 · page 97 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90246 | CVE-2026-90246 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix integer overflow in verify_tags() bounds check verify_tags() validates the … |
| CVE-2026-90245 | CVE-2026-90245 | In the Linux kernel, the following vulnerability has been resolved: fbdev: kyro: Validate overlay viewport coordinates The overlay viewport end coordinates a… |
| CVE-2026-90244 | CVE-2026-90244 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Restore locking around msi_page_list Unlike a group's default domain, which is… |
| CVE-2026-90243 | CVE-2026-90243 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down copied context entry copied_context_tea… |
| CVE-2026-90242 | CVE-2026-90242 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix iopf_refcount leak on RID domain replacement intel_iommu_attach_device() … |
| CVE-2026-90241 | CVE-2026-90241 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Tear down scalable-mode context on probe failure intel_pasid_setup_sm_context… |
| CVE-2026-90240 | CVE-2026-90240 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down aliases domain_context… |
| CVE-2026-9024 | CVE-2026-9024 CVSS 8.7 | A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x throu… |
| CVE-2026-90239 | CVE-2026-90239 | In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() isp4if_alloc_fw… |
| CVE-2026-90238 | CVE-2026-90238 | In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path isp4sd_pwron_an… |
| CVE-2026-90237 | CVE-2026-90237 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: move custom expectation support to helper Originally, the ct expectati… |
| CVE-2026-90236 | CVE-2026-90236 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Release the export reference when reaping open stateids nfs4_put_stid() releases th… |
| CVE-2026-90235 | CVE-2026-90235 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE xprtsock rep… |
| CVE-2026-90234 | CVE-2026-90234 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: NFS: Return a delegation the client fails to record When an NFS server grants a delegatio… |
| CVE-2026-90233 | CVE-2026-90233 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pool… |
| CVE-2026-90232 | CVE-2026-90232 | In the Linux kernel, the following vulnerability has been resolved: amt: Don't support cross-netns setup. When a lower device is unregistered, amt_device_eve… |
| CVE-2026-90231 | CVE-2026-90231 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already con… |
| CVE-2026-90230 | CVE-2026-90230 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() nvmet_execute_auth_send() al… |
| CVE-2026-90229 | CVE-2026-90229 CVSS 7.4 | In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Destroy the admin queue on removal The admin queue is allocated with blk_mq_a… |
| CVE-2026-90228 | CVE-2026-90228 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() When a host issues… |
| CVE-2026-90227 | CVE-2026-90227 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() Unlike IO_CMD / IO64_CMD, NVME_IOCTL_… |
| CVE-2026-90226 | CVE-2026-90226 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: avoid userspace overflow on invalid optlen nfc_llcp_getsockopt() casts optval … |
| CVE-2026-90225 | CVE-2026-90225 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: read llcp_sock->local under the socket lock in getsockopt nfc_llcp_getsockopt(… |
| CVE-2026-90224 | CVE-2026-90224 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix double completion race in nci_data_exchange_complete nci_close_device() and… |
| CVE-2026-90223 | CVE-2026-90223 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound SNL TLV parsing to the skb and add length checks nfc_llcp_recv_snl() wal… |
| CVE-2026-90222 | CVE-2026-90222 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: hold a reference to the request skb during send_frame __pn533_send_async() pu… |
| CVE-2026-90221 | CVE-2026-90221 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing nci_core_init_rsp_pack… |
| CVE-2026-90220 | CVE-2026-90220 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounce_error_e… |
| CVE-2026-9022 | CVE-2026-9022 CVSS 6.4 | The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, and including, 1.7… |
| CVE-2026-90219 | CVE-2026-90219 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc() creates the per-device debu… |
| CVE-2026-90218 | CVE-2026-90218 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix WARNING in res_to_rt syzbot reported a WARN_ON(!res->dev) in res_to_rt() tr… |
| CVE-2026-90217 | CVE-2026-90217 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEM_RCU or… |
| CVE-2026-90216 | CVE-2026-90216 | In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubi_init_attach() rolls back module ini… |
| CVE-2026-90215 | CVE-2026-90215 | In the Linux kernel, the following vulnerability has been resolved: mtd: ubi: Release device reference on busy detach ubi_detach_mtd_dev() obtains a device r… |
| CVE-2026-90214 | CVE-2026-90214 | In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error In xlnx_formatter_pcm_ope… |
| CVE-2026-90213 | CVE-2026-90213 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix memory leak in error path of build_tree() In the error path of build_… |
| CVE-2026-90212 | CVE-2026-90212 | In the Linux kernel, the following vulnerability has been resolved: arm64/efi: Avoid voluntary preemption with efi_mm installed Gus reports a bad kernel memo… |
| CVE-2026-90211 | CVE-2026-90211 | In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear a… |
| CVE-2026-90210 | CVE-2026-90210 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure When bpf_trampoline_up… |
| CVE-2026-9021 | CVE-2026-9021 CVSS 5.3 | The Easy Invoice plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.19. This is due to the plugin registering th… |
| CVE-2026-90209 | CVE-2026-90209 | In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix deadlock during unregister Unregistering an s390dbf debug area while one … |
| CVE-2026-90208 | CVE-2026-90208 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Samsung PWM timer might be… |
| CVE-2026-90207 | CVE-2026-90207 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize input teardown with event_input snd_midi_input_event() must no… |
| CVE-2026-90206 | CVE-2026-90206 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix max_qid race between configfs and controller allocation The function nvmet_sub… |
| CVE-2026-90205 | CVE-2026-90205 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series "ocfs2: validate active orphan… |
| CVE-2026-90204 | CVE-2026-90204 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read [BUG] A corrupted append-DIO dinode (hi… |
| CVE-2026-90203 | CVE-2026-90203 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If a negative offset is read off disk (for e… |
| CVE-2026-90202 | CVE-2026-90202 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers _base_release_memory_pools() un… |
| CVE-2026-90201 | CVE-2026-90201 | In the Linux kernel, the following vulnerability has been resolved: net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race This bug was… |
| CVE-2026-90200 | CVE-2026-90200 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfs_init_from_boot(), the bo… |