94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,851–4,900 of 94,138 · page 98 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90199 | CVE-2026-90199 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_attr() In mi_enum_attr(), the start/end VCN… |
| CVE-2026-90198 | CVE-2026-90198 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in snd_card_do_free() A use-after-free was detected in snd… |
| CVE-2026-90197 | CVE-2026-90197 | In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don't write an uninitialized value to unhandled usages fill_effect_buf() ini… |
| CVE-2026-90196 | CVE-2026-90196 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer… |
| CVE-2026-90195 | CVE-2026-90195 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI… |
| CVE-2026-90194 | CVE-2026-90194 | In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() failures When device_add() fails after acp… |
| CVE-2026-90193 | CVE-2026-90193 | In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler qcom_cpucp_mbox_irq_fn()… |
| CVE-2026-90192 | CVE-2026-90192 | In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: handle NULL data in send_data callback mailbox_clear_channel() calls… |
| CVE-2026-90191 | CVE-2026-90191 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls… |
| CVE-2026-90190 | CVE-2026-90190 | In the Linux kernel, the following vulnerability has been resolved: null_blk: use DEFINE_MUTEX for the file-scope mutex In null_init(), mutex_init(&lock) cur… |
| CVE-2026-9019 | CVE-2026-9019 CVSS 6.4 | The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_ur… |
| CVE-2026-90189 | CVE-2026-90189 | In the Linux kernel, the following vulnerability has been resolved: null_blk: register configfs subsystem after creating default devices In null_init(), conf… |
| CVE-2026-90188 | CVE-2026-90188 | In the Linux kernel, the following vulnerability has been resolved: null_blk: free global tag_set on init error path If shared_tags is enabled, null_setup_ta… |
| CVE-2026-90187 | CVE-2026-90187 | In the Linux kernel, the following vulnerability has been resolved: null_blk: free zones array on device power-off null_init_zoned_dev() allocates dev->zones… |
| CVE-2026-90186 | CVE-2026-90186 | In the Linux kernel, the following vulnerability has been resolved: null_blk: reject per-device queue resize for shared tag set When shared_tags is enabled, … |
| CVE-2026-90185 | CVE-2026-90185 | In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute stores with the lock The NULLB_DEVICE_ATTR _store … |
| CVE-2026-90184 | CVE-2026-90184 | In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute updates with device setup The attribute store meth… |
| CVE-2026-90183 | CVE-2026-90183 | In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing policy data io.latency can throttle a group… |
| CVE-2026-90182 | CVE-2026-90182 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocg_kick_delay() turns sufficient… |
| CVE-2026-90181 | CVE-2026-90181 | In the Linux kernel, the following vulnerability has been resolved: ublk: avoid teardown retry loop on xarray allocation failure __ublk_shmem_remove_ranges()… |
| CVE-2026-90180 | CVE-2026-90180 | In the Linux kernel, the following vulnerability has been resolved: block: mtip32xx: synchronize ioctls with device removal The ioctl handlers only test REMO… |
| CVE-2026-9018 | CVE-2026-9018 CVSS 8.8 | The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1… |
| CVE-2026-90179 | CVE-2026-90179 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode change_hat The use of change_hat when in complain… |
| CVE-2026-90178 | CVE-2026-90178 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix core_data leak on CPUs without PTS pdata->core_data is allocated in… |
| CVE-2026-90177 | CVE-2026-90177 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instr… |
| CVE-2026-90176 | CVE-2026-90176 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges check_lock_range() uses inclusive r… |
| CVE-2026-90175 | CVE-2026-90175 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer Free it unconditio… |
| CVE-2026-90174 | CVE-2026-90174 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() ksmbd_alloc_user() copies resp->… |
| CVE-2026-90173 | CVE-2026-90173 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ib_free_cq() smbdirect_connection_destroy_qp(… |
| CVE-2026-90172 | CVE-2026-90172 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdma_accept_failed e… |
| CVE-2026-90171 | CVE-2026-90171 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: release pending child sockets outside the handler lock smbdirect_socket_d… |
| CVE-2026-90170 | CVE-2026-90170 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ipc response length before dereferencing its fields ipc_validate_msg() co… |
| CVE-2026-9017 | CVE-2026-9017 CVSS 5.3 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. Thi… |
| CVE-2026-90169 | CVE-2026-90169 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichannel binding preserv… |
| CVE-2026-90168 | CVE-2026-90168 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-90167 | CVE-2026-90167 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pending break ownership close may abort an in-flight o… |
| CVE-2026-90166 | CVE-2026-90166 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() See the procedure belo… |
| CVE-2026-90165 | CVE-2026-90165 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() See the pro… |
| CVE-2026-90164 | CVE-2026-90164 | In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbd_server_init() calls ksmbd_pr… |
| CVE-2026-90163 | CVE-2026-90163 | In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_proc_cleanup() on module init failure When a later initializer fai… |
| CVE-2026-90162 | CVE-2026-90162 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2_lock(), mid… |
| CVE-2026-90161 | CVE-2026-90161 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should… |
| CVE-2026-90160 | CVE-2026-90160 | In the Linux kernel, the following vulnerability has been resolved: lwt_bpf: Restore reserved headroom after xmit program ip_finish_output2() expands an skb … |
| CVE-2026-9016 | CVE-2026-9016 CVSS 5.3 | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions u… |
| CVE-2026-90159 | CVE-2026-90159 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks _bpf_setsockopt() and _bp… |
| CVE-2026-90158 | CVE-2026-90158 | In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call console_is_registered() in nfcon_device() Since 7c2af0f634f1 ("t… |
| CVE-2026-90157 | CVE-2026-90157 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt hook A cgroup getsockopt BPF program can… |
| CVE-2026-90156 | CVE-2026-90156 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks When vfs_lock_file() defers a lock, smb… |
| CVE-2026-90155 | CVE-2026-90155 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing A file_lock retained by ksmbd for byte… |
| CVE-2026-90154 | CVE-2026-90154 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn_set_status() treat… |