94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,901–4,950 of 94,138 · page 99 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90153 | CVE-2026-90153 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size smb_check_perm_dacl() validates… |
| CVE-2026-90152 | CVE-2026-90152 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbd_session_register() See the procedure below: smb2… |
| CVE-2026-90151 | CVE-2026-90151 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4_alloc_client() allocat… |
| CVE-2026-90150 | CVE-2026-90150 | In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure bl_parse_concat() and bl_parse_stripe… |
| CVE-2026-90149 | CVE-2026-90149 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0 … |
| CVE-2026-90148 | CVE-2026-90148 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() When nfs4… |
| CVE-2026-90147 | CVE-2026-90147 | In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() devm_clk_get_option… |
| CVE-2026-90146 | CVE-2026-90146 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install() bpf_xdp_link_update() calls dev_xdp_i… |
| CVE-2026-90145 | CVE-2026-90145 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed Previ… |
| CVE-2026-90144 | CVE-2026-90144 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() during teardown race When the last owner of a d… |
| CVE-2026-90143 | CVE-2026-90143 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcm_parse_func_strparser() calls bp… |
| CVE-2026-90142 | CVE-2026-90142 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached, the virtnet_rx_re… |
| CVE-2026-90141 | CVE-2026-90141 CVSS 7.3 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ip_vs_ftp_get_addrport() ac… |
| CVE-2026-90140 | CVE-2026-90140 | In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad ("fuse: fix… |
| CVE-2026-90139 | CVE-2026-90139 | In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_super_submount fuse_iget() can return NULL w… |
| CVE-2026-90138 | CVE-2026-90138 | In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in vsock_accept() Syzbot reported an issue which… |
| CVE-2026-90137 | CVE-2026-90137 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWD_ENCODINGS … |
| CVE-2026-90136 | CVE-2026-90136 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon hsmp_hwmon_write() takes… |
| CVE-2026-90135 | CVE-2026-90135 | In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that t… |
| CVE-2026-90134 | CVE-2026-90134 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local_page() usage in compress Several compressed I/O paths discard the ad… |
| CVE-2026-90133 | CVE-2026-90133 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() ntfs_ir_to_ib copies all entries f… |
| CVE-2026-90132 | CVE-2026-90132 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX* xattrs Reject setxattr of the reserved … |
| CVE-2026-90131 | CVE-2026-90131 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize resident iomap reads with mrec_lock ntfs_read_iomap_begin_resident() walk… |
| CVE-2026-90130 | CVE-2026-90130 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix cleanup after worker creation failure vdpasim_create() leaves vdpasim->work… |
| CVE-2026-9013 | CVE-2026-9013 CVSS 4.3 | The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the bogo_rest_create_post_transla… |
| CVE-2026-90129 | CVE-2026-90129 | In the Linux kernel, the following vulnerability has been resolved: virtio_balloon: quiesce balloon work before device shutdown Commit 8bd2fa086a04 ("virtio:… |
| CVE-2026-90128 | CVE-2026-90128 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), … |
| CVE-2026-90127 | CVE-2026-90127 | In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: time out alarm requests RTC class operations run with rtc_device.ops_lock he… |
| CVE-2026-90126 | CVE-2026-90126 | In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind pcf8563_clkout_register_clk() registers t… |
| CVE-2026-90125 | CVE-2026-90125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix request buffer leak in smb2_new_read_req() smb2_new_read_req() allocates… |
| CVE-2026-90124 | CVE-2026-90124 | In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2l_clear_irq_int() and rzg2l_clear_tint_i… |
| CVE-2026-90123 | CVE-2026-90123 | In the Linux kernel, the following vulnerability has been resolved: irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback The interrup… |
| CVE-2026-90122 | CVE-2026-90122 | In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Make sure clk_init_data is fully initialized The clk_init_data structure c… |
| CVE-2026-90121 | CVE-2026-90121 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS po… |
| CVE-2026-90120 | CVE-2026-90120 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing In gic_acpi… |
| CVE-2026-9012 | CVE-2026-9012 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-90119 | CVE-2026-90119 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup snd_ice1712_probe()… |
| CVE-2026-90118 | CVE-2026-90118 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one page overflow in ntfs_decompress() The per-token range check in ntfs… |
| CVE-2026-90117 | CVE-2026-90117 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate usa_ofs before preserving the update sequence number When ntfs_mft_record_… |
| CVE-2026-90116 | CVE-2026-90116 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mtpav: shut down output timer before card teardown snd_mtpav_output_timer() rearms … |
| CVE-2026-90115 | CVE-2026-90115 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in __xsk_rcv() In the __xsk_rcv() multi-buffer path, xs… |
| CVE-2026-90114 | CVE-2026-90114 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel ranges A pair of descending VLAN and tunnel ID… |
| CVE-2026-90113 | CVE-2026-90113 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: update queue NAPI association on queue reset In netdevsim, receive queues (str… |
| CVE-2026-90112 | CVE-2026-90112 | In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads di… |
| CVE-2026-90111 | CVE-2026-90111 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ip6mr: do not clone dst in ip6mr_cache_report() IPv6 input attaches a non-refcounted (NOR… |
| CVE-2026-90110 | CVE-2026-90110 CVSS 9.4 | In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting syst… |
| CVE-2026-9011 | CVE-2026-9011 CVSS 7.5 | The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65… |
| CVE-2026-90109 | CVE-2026-90109 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gred_enqueue(), bfifo… |
| CVE-2026-90108 | CVE-2026-90108 | In the Linux kernel, the following vulnerability has been resolved: net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition When… |
| CVE-2026-90107 | CVE-2026-90107 | In the Linux kernel, the following vulnerability has been resolved: net/smc: free pending qentry in smc_llc_flow_stop() before memset smc_llc_flow_stop() res… |