| 2026-10-23 | CVE-2026-31694 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-23 | CVE-2026-16762 | CVE-2026-16762 | 8.7 High | Updated |
| 2026-10-23 | CVE-2026-115486 | CVE-2026-115486 | 7.1 High | Updated |
| 2026-10-23 | CVE-2026-115484 | CVE-2026-115484 | 7.6 High | Updated |
| 2026-10-23 | CVE-2026-111079 | CVE-2026-111079 | 7.4 High | Updated |
| 2026-10-23 | CVE-2026-109619 | CVE-2026-109619 | 8.1 High | Updated |
| 2026-10-23 | CVE-2026-109618 | CVE-2026-109618 | 9.8 Critical | Updated |
| 2026-10-22 | CVE-2026-18963 | Siemens Industrial Edge Management Pro's Keycloak Reset-Credentials Flow Lets an Unauthenticated Attacker Force a Password Reset Without Email Verification, Granting Full Account Takeover, Scoring 9.1 | 9.1 Critical | EPSS-Imminent |
| 2026-10-22 | CVE-2026-96914 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-22 | CVE-2026-96913 | Windows Windows Kernel Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-22 | CVE-2026-96912 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-96911 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-96512 | sudo NOTBEFORE/NOTAFTER Time Window Enforcement Reads the TZ Environment Variable, Allowing Low-Privileged Users to Shift the Clock and Bypass Scheduling Constraints | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-93336 | CVE-2026-93336 | 7.1 High | Updated |
| 2026-10-22 | CVE-2026-89035 | CVE-2026-89035 | 7.4 High | Updated |
| 2026-10-22 | CVE-2026-87095 | CVE-2026-87095 | 9.1 Critical | Updated |
| 2026-10-22 | CVE-2026-71226 | Enterprise Linux Memory Corruption Reachable by Unauthenticated Local Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-22 | CVE-2026-70273 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70271 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70253 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70249 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70236 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70209 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70176 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70160 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70144 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-22 | CVE-2026-70121 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-70117 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-70114 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-70111 | Windows Windows Kernel Untrusted Pointer Dereference Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-22 | CVE-2026-70108 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-58014 | Enterprise Linux GLib Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-22 | CVE-2026-5260 | Red Hat OpenShift AI 3.4 libgnutls Heap Overread Reachable by Unauthenticated Remote Attackers (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-22 | CVE-2026-13599 | CVE-2026-13599 | 7.8 High | Updated |
| 2026-10-22 | CVE-2026-12080 | CVE-2026-12080 | 7.3 High | Updated |
| 2026-10-22 | CVE-2026-105016 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-22 | CVE-2026-103672 | CVE-2026-103672 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-98149 | CVE-2026-98149 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-92925 | Out-of-Bounds Access in Redis community Affects Enterprise Linux 9, Leading to Service Disruption | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-8975 | CVE-2026-8975 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-88924 | Red Hat Enterprise Linux 10 Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-87853 | SSSD Identity Provider OIDC Token Validation Uses a Prefix strncmp, Allowing Low-Privileged Users to Bypass Authentication | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-86320 | flatpak-builder Leaves Git Hooks Active When Applying Patches with use-git-am, Letting a Malicious Patch Source Run Arbitrary Code on the Build Host | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-84268 | Red Hat Enterprise Linux 10 Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-83900 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83899 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83896 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83886 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83883 | Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83882 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83881 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83879 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83876 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83874 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-83873 | Microsoft Windows 11 (version 23H2) Path Traversal Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83872 | Windows Windows TCP/IP stack Incorrect Conversion Between Numeric Types Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83871 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83867 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83866 | Windows Win32k graphics driver Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83861 | Windows Remote Desktop Protocol (RDP) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83860 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-83859 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83857 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83856 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-83855 | Microsoft Windows 11 (version 23H2) Integer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-83853 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-21 | CVE-2026-83768 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83761 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-83756 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-8092 | CVE-2026-8092 | 8.1 High | Updated |
| 2026-10-21 | CVE-2026-80694 | CVE-2026-80694 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-80662 | CVE-2026-80662 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-80614 | CVE-2026-80614 | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-80110 | Red Hat pki-core v2 REST ACL Filter Uses Lexicographic Tie-Breaking for Colliding Literal and Wildcard ACL Keys, Misapplying Access Permissions | 8.1 High | Updated |
| 2026-10-21 | CVE-2026-78410 | CVE-2026-78410 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-78408 | CVE-2026-78408 | 7.9 High | Updated |
| 2026-10-21 | CVE-2026-78002 | rsyslog RainerScript replace() Function Uses an Incorrect Buffer Size, Overflowing the Heap and Crashing the Service on Unauthenticated Log Input | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-76561 | Dogtag PKI FreeIPA ExternalProcessConstraint Passes Arbitrary Environment Variables to External Commands, Enabling Privileged Administrators to Execute Commands as pkiuser | 7.2 High | Updated |
| 2026-10-21 | CVE-2026-74513 | CVE-2026-74513 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-72694 | CVE-2026-72694 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-72367 | CVE-2026-72367 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-72366 | CVE-2026-72366 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-72203 | CVE-2026-72203 | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-72200 | CVE-2026-72200 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-72198 | CVE-2026-72198 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-72162 | CVE-2026-72162 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70303 | Windows Windows Kernel Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70285 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70106 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70104 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70103 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70102 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70095 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-70093 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-70092 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-68471 | CVE-2026-68471 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-68401 | CVE-2026-68401 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-68400 | CVE-2026-68400 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-68083 | CVE-2026-68083 | 9.1 Critical | Updated |
| 2026-10-21 | CVE-2026-64391 | CVE-2026-64391 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-64389 | CVE-2026-64389 | 8.2 High | Updated |
| 2026-10-21 | CVE-2026-64377 | CVE-2026-64377 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-64341 | CVE-2026-64341 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-64305 | CVE-2026-64305 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-64138 | CVE-2026-64138 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-64068 | CVE-2026-64068 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-63857 | CVE-2026-63857 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-63825 | CVE-2026-63825 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-53368 | CVE-2026-53368 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-53330 | CVE-2026-53330 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-53284 | CVE-2026-53284 | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-53277 | CVE-2026-53277 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-53272 | CVE-2026-53272 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53179 | CVE-2026-53179 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-53178 | CVE-2026-53178 | 8.1 High | Updated |
| 2026-10-21 | CVE-2026-53156 | CVE-2026-53156 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53129 | CVE-2026-53129 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53120 | CVE-2026-53120 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53118 | CVE-2026-53118 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53115 | CVE-2026-53115 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53109 | CVE-2026-53109 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53097 | CVE-2026-53097 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-53024 | CVE-2026-53024 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-52983 | CVE-2026-52983 | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-50516 | Microsoft Azure Kubernetes Service's Missing Authentication on a Critical Function Allows Unauthenticated Attackers to Interact with Privileged Cluster Management Endpoints | 9.4 Critical | Updated |
| 2026-10-21 | CVE-2026-46241 | CVE-2026-46241 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-46175 | CVE-2026-46175 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-46157 | CVE-2026-46157 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-46130 | CVE-2026-46130 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-45956 | CVE-2026-45956 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-45943 | CVE-2026-45943 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-45932 | CVE-2026-45932 | 7.3 High | Updated |
| 2026-10-21 | CVE-2026-45893 | CVE-2026-45893 | 7.1 High | Updated |
| 2026-10-21 | CVE-2026-43465 | CVE-2026-43465 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-43464 | CVE-2026-43464 | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-43353 | CVE-2026-43353 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43352 | CVE-2026-43352 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43263 | CVE-2026-43263 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43258 | CVE-2026-43258 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43250 | CVE-2026-43250 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43249 | CVE-2026-43249 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-43185 | CVE-2026-43185 | 9.8 Critical | Updated |
| 2026-10-21 | CVE-2026-43126 | CVE-2026-43126 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43101 | CVE-2026-43101 | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-43059 | CVE-2026-43059 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-43049 | CVE-2026-43049 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-31706 | CVE-2026-31706 | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-31650 | CVE-2026-31650 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-31530 | CVE-2026-31530 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-31506 | CVE-2026-31506 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-31493 | CVE-2026-31493 | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-23459 | CVE-2026-23459 | 8.2 High | Updated |
| 2026-10-21 | CVE-2026-19654 | Privilege Escalation in Enterprise Linux 9, Allowing Privilege Escalation | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-18358 | RHEL gnome-remote-desktop RDP listener bypasses connection throttling allowing pre-authentication connection exhaustion | 7.5 High | Updated |
| 2026-10-21 | CVE-2026-12290 | CVE-2026-12290 | 8.1 High | Updated |
| 2026-10-21 | CVE-2026-11332 | ansible-core Galaxy Role src Field Passes Unsanitized Input to git, Enabling Argument Injection and Code Execution | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-110936 | An Authenticated Local Attacker Can Plant a Crafted DLL in Siemens Software Center's Search Path to Execute Arbitrary Code; CISA's KEV Program Requires Covered Entities to Remediate by November 3rd | 6.7 Medium | KEV |
| 2026-10-21 | CVE-2026-102217 | Microsoft Windows 11 (version 23H2) Improper Resolution Of Path Equivalence Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-102216 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-102215 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-21 | CVE-2026-102214 | Windows Hyper-V Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-21 | CVE-2026-100072 | CVE-2026-100072 | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-98155 | Linux Kernel accel/qaic: Address potential out-of-bounds read in resp_worker() | 7.1 High | Updated |
| 2026-10-20 | CVE-2026-9800 | Red Hat Red Hat build of Keycloak 26.6 Comparison Using Wrong Factors Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-20 | CVE-2026-96856 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-96246 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-96222 | Windows Active Directory Certificate Validation Bypass Reachable by Unauthenticated Network Attackers | 7.4 High | Updated |
| 2026-10-20 | CVE-2026-88219 | Windows Remote Procedure Call (RPC) Untrusted Pointer Dereference Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-20 | CVE-2026-88193 | Windows Windows Scripting Engine Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-88181 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-88180 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-88179 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-88177 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-88168 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-88165 | Windows Active Directory Out-Of-Bounds Write Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-20 | CVE-2026-88161 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-88160 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-87766 | Red Hat Enterprise Linux 10 bubblewrap Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-20 | CVE-2026-58379 | GIMP Paint Shop Pro File Parser Heap Overflow Allows Remote Attacker to Execute Code via a Crafted PSP File | 7.3 High | Updated |
| 2026-10-20 | CVE-2026-5680 | Red Hat Enterprise Linux 9 Undertow Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-44938 | CVE-2026-44938 | 8.8 High | Updated |
| 2026-10-20 | CVE-2026-43858 | CVE-2026-43858 | 8.6 High | Updated |
| 2026-10-20 | CVE-2026-43857 | CVE-2026-43857 | 8.6 High | Updated |
| 2026-10-20 | CVE-2026-43856 | CVE-2026-43856 | 8.6 High | Updated |
| 2026-10-20 | CVE-2026-43855 | CVE-2026-43855 | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-43853 | CVE-2026-43853 | 8.2 High | Updated |
| 2026-10-20 | CVE-2026-43852 | CVE-2026-43852 | 8.2 High | Updated |
| 2026-10-20 | CVE-2026-43851 | CVE-2026-43851 | 8.2 High | Updated |
| 2026-10-20 | CVE-2026-43850 | CVE-2026-43850 | 8.6 High | Updated |
| 2026-10-20 | CVE-2026-43847 | Advantech ADAM-3600's Proprietary Protocol Enforces No Rate Limit on Administrator Password Attempts, Bypassing the SafeEnhancement Feature, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-20 | CVE-2026-43846 | Advantech ADAM-3600 Has a Stack Buffer Overflow in a Non-Functional Feature That an Authenticated Attacker Can Reach to Execute Code, Scoring 8.6 | 8.6 High | Updated |
| 2026-10-20 | CVE-2026-43845 | Advantech ADAM-3600's Password Reset Mechanism Lets an Attacker Bypass Authentication Without Valid Credentials, Scoring 9.2 | 9.2 Critical | Updated |
| 2026-10-20 | CVE-2026-43844 | Advantech ADAM-3600's Proprietary Protocol Has an Authentication Bypass in Its Packet-Handling Path, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-20 | CVE-2026-43839 | Advantech ADAM-3600's Log Management Service Crashes on a NULL Pointer Dereference Reachable Without Authentication, Scoring 8.7 | 8.7 High | Updated |
| 2026-10-20 | CVE-2026-43838 | Advantech ADAM-3600's Login Handler Has a Stack Buffer Overflow Enabling Code Execution via the Authentication Flow, Scoring 9.2 | 9.2 Critical | Updated |
| 2026-10-20 | CVE-2026-43837 | Advantech ADAM-3600's Password Verification Has a Buffer Overflow That Gives a Guest-Level User Code Execution, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-43836 | Advantech ADAM-3600's Proprietary Protocol Accepts Forged Packets That Execute Arbitrary Commands with Maximum Privileges, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-20 | CVE-2026-43835 | Advantech ADAM-3600's Firmware Upgrade Functionality Accepts Forged Upgrade Files from Authenticated Attackers, Potentially Compromising the Device Permanently, Scoring 8.6 | 8.6 High | Updated |
| 2026-10-20 | CVE-2026-43834 | Advantech ADAM-3600's Logs Settings Interface Has a Stack Buffer Overflow That Gives Authenticated Attackers Code Execution, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-43832 | Advantech ADAM-3600's Cookie Parsing Has a Stack Buffer Overflow Reachable Without Authentication When SafeEnhancement Is Enabled, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-43831 | Advantech ADAM-3600's Log Message Handler Has an Unauthenticated Stack Buffer Overflow That Enables Code Execution, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-43830 | Advantech ADAM-3600's Firmware Upgrade File Verification Accepts Command Injection, Enabling Arbitrary Command Execution, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-20 | CVE-2026-43829 | Advantech ADAM-3600's Password Handler Has a Stack Buffer Overflow Reaching Unauthenticated Callers When the SafeEnhancement Feature Is Enabled, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-41050 | CVE-2026-41050 | 9.9 Critical | Updated |
| 2026-10-20 | CVE-2026-17615 | Red Hat Enterprise Linux 8 RESTEasy's Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-20 | CVE-2026-112177 | Red Hat Enterprise Linux 8's Ghostscript Rebase from 9.25 to 9.27 Omitted the CVE-2019-14869 Fix, Letting a Crafted PostScript File Bypass -dSAFER to Access Arbitrary Files or Execute Commands, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-20 | CVE-2026-102211 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102210 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-20 | CVE-2026-102207 | Windows Windows Kernel Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102205 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-102203 | Windows Remote Procedure Call (RPC) Type Confusion Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-20 | CVE-2026-102202 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-102201 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-102197 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102196 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-102195 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102194 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102193 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102191 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-102189 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-100225 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-100222 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-20 | CVE-2026-100220 | Windows Windows Media Heap Buffer Overflow Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-20 | CVE-2026-100219 | Unauthenticated Remote Use-After-Free in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-20 | CVE-2026-100218 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-20 | CVE-2026-100217 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-100216 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-100215 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-20 | CVE-2026-100203 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-100202 | Unauthenticated Remote Use-After-Free in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-20 | CVE-2026-100201 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-20 | CVE-2026-100200 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-98041 | Linux Kernel BPF Verifier Incorrectly Predicts the Outcome of JMP32 Pointer vs. Zero Comparisons, Weakening Bounds Verification | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-98029 | Linux Kernel NFP Ethernet Driver Ntuple Rule Dump Writes Beyond the Caller's Buffer Size | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-98002 | Linux Kernel AMD IOMMU Nested Domain Allocation Error Check Is Ineffective, Leaving Allocation Failures Undetected | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-97971 | Linux Kernel Namespace Tree Takes a Namespace Reference Without First Checking the Caller's Listing Permission | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-97953 | Linux Kernel stmmac Ethernet Driver Mischecks TX Descriptor Availability for TSO Segmented Traffic, Causing Data Loss | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-96442 | Emacs Flymake Mode Executes Arbitrary Code From Files Being Edited During Syntax Checking in Versions Before 31.2 | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93203 | Linux Kernel B.A.T.M.A.N. Advanced Bridge Loop Avoidance Allows Parallel Claim Adds to Corrupt the Backbone CRC | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-93192 | Linux Kernel Broadcom V3D GPU Driver Retains a Stale Active Job Pointer After v3d_fence_create Failure, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93190 | Linux Kernel Chrome OS EC USB Type-C Driver Accepts Out-of-Bounds Power Delivery Capability Counts From the Embedded Controller | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-93189 | Linux Kernel HID Core Does Not Quiesce Input During hid_hw_stop(), Enabling a Use-After-Free When HID Devices Are Removed | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-93178 | Linux Kernel AMDGPU SMU7 Powerplay Does Not Bounds-Check the Voltage Index Before Table Lookup, Enabling Out-of-Bounds Read | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-93177 | Linux Kernel's Drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-19 | CVE-2026-93170 | Linux Kernel Xilinx AXIDMA and MCDMA Engine Drivers Mismanage Channel Idle State in Interrupt Handlers, Causing Stalled Transfers | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93165 | Linux Kernel Chrome OS Sensor Hub Platform Driver Reads Beyond the Ring Buffer Boundary in the Sensor Data Handler | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-93154 | Linux Kernel Intel Ethernet RDMA Driver Lacks Reference Counting on User Ring Memory Regions, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93151 | Linux Kernel NVMe-RDMA Target Leaks Response Buffer Resources When Tearing Down a Queue | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-93147 | Linux Kernel s390 BPF JIT Uses the ly Instruction Where llgf Is Required, Producing Incorrect 32-Bit Data Loads | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93138 | Linux Kernel BPF Has a Race Condition in vmlinux BTF Preparation Inside bpf_get_btf_vmlinux, Enabling a Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93137 | Linux Kernel BPF bpf_find_vma() Has a Use-After-Free on the mm_struct When the Target Process Exits During the Call | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93127 | Linux Kernel BPF Verifier Retains Stale Scalar IDs After Sign-Extending Narrowing Stack Fills, a 7.8 CVSS Type-Confusion Risk | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93121 | Linux Kernel USB FunctionFS Gadget Driver Leaks DMA Buffer Fences on ffs_dmabuf_transfer Error Paths | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-93112 | Linux Kernel bpf_cpumask_populate Accepts Non-BPF cpumask Pointer Arguments, Enabling Out-of-Bounds Writes | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-93111 | Linux Kernel BPF Tracing Multi Trampolines Are Not Marked as ftrace Managed, Creating a Trampoline Lifecycle Bug | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93107 | Linux Kernel RXE Software RDMA Driver Reprocesses the Current Packet After the Queue Pair Transitions to the Error State | 8.2 High | Updated |
| 2026-10-19 | CVE-2026-93095 | Linux Kernel HFS+ File System Does Not Validate Thread Records Before Rebuilding Delete Keys, Enabling Memory Corruption on Malformed Volumes | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93079 | Linux Kernel CXL Features Driver Accepts Get Feature Response Counts Larger Than the Output Buffer | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93074 | Linux Kernel DAX Filesystem Direct Access Passes the Wrong Kernel Virtual Address for Physical Memory in direct_access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93070 | Linux Kernel IPU6 Camera Driver Frees the Auxiliary Device Platform Data After Initialization, Enabling Later Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93063 | Linux Kernel Intel WiFi iwlwifi MEI Interface Reads SAP Messages Without First Validating the Message Length Field | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-93054 | Linux Kernel UIO Framework Leaves a Stale Device Info Pointer After a Failed Device Registration | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-93046 | Linux Kernel Firmware Software Node Framework Does Not Handle Negative Indices in software_node_get_reference_args | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-93045 | Linux Kernel BPF Arena Allocator Does Not Reject Free Operations for Addresses Below the Arena Base | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-93042 | Linux Kernel DesignWare eDMA Engine Driver Does Not Invoke Completion Callbacks When Terminating All DMA Descriptors | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-93039 | Linux Kernel Amlogic ASoC Meson Driver Leaves Dangling DAI Link Pointers After a Reallocation Failure | 7.4 High | Updated |
| 2026-10-19 | CVE-2026-93037 | Linux Kernel Intel HFI1 RDMA Driver Silently Ignores sdma_txinit_ahg Initialization Errors | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-92525 | Linux Kernel RXE Software RDMA Driver Does Not Validate num_sge or cur_sge Before Indexing the WQE DMA SGE Array, Enabling Out-of-Bounds Access | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-92522 | Linux Kernel ACPI Processor Driver Does Not Validate MADT IOAPIC Entry Bounds, Enabling Out-of-Bounds Memory Reads During IOAPIC Enumeration | 7.3 High | Updated |
| 2026-10-19 | CVE-2026-92518 | Linux Kernel RISC-V BPF JIT Corrupts the Kernel Stack in Tail Call Paths When Control Flow Integrity Is Enabled | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-92511 | Linux Kernel RDMA Core ib_destroy_cq_user Potentially Accesses a Completion Queue Object After Freeing It | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-92510 | Linux Kernel RDMA Core Has a Use-After-Free in ib_destroy_srq_user() During Shared Receive Queue Destruction | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-92508 | Linux Kernel RDMA Core ib_free_cq Exposes a Potential Use-After-Free on Completion Queue Teardown | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-92507 | Linux Kernel RDMA Core ib_dealloc_pd_user Exposes a Potential Use-After-Free During Protection Domain Deallocation | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-92504 | Linux Kernel Intel INT3400 Thermal Driver Leaks ODVP Resources When the Probe Fails | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-92489 | Linux Kernel xfrm IPsec Framework Double-Frees a Socket Buffer in xfrm_dev_direct_output, a 9.8 CVSS Memory Safety Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-92488 | Linux Kernel Elastic RDMA Adapter Driver Skips Object Teardown When the Destroy Command Fails, Leaking Resources | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-90435 | Linux Kernel Mellanox mlx5 RDMA Driver Queue Pair Buffer Size Calculation Can Overflow on Large User Allocations | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90429 | Linux Kernel Tegra241 CMDQV IOMMU Error ISR Runs Without Synchronization Against VINTF Initialization and Cleanup | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90425 | Linux Kernel Tegra241 IOMMU Command Queue Virtualization Allows More Than One Stream ID per vSID, Enabling Memory Access Boundary Violations | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90423 | Linux Kernel RXE Software RDMA Driver Use-After-Free in the On-Demand Paging Initialization Error-Handling Path | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90419 | Linux Kernel NILFS2 File System Reads Out of Bounds When Parsing Super Root Blocks | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90414 | Linux Kernel iSER Target Accepts Data PDUs That Claim More Data Than the Receive Buffer Holds, a 9.1 CVSS Out-of-Bounds Read | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-90413 | Linux Kernel iSER Target Accepts iSCSI Login PDUs That Declare More Data Than Was Received, a 9.1 CVSS Out-of-Bounds Read | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-90407 | Linux Kernel ath11k WiFi Driver Reads Beyond Buffer Bounds in CSA Channel Switch Count Event Processing | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-90403 | Linux Kernel Realtek rtlwifi PCI Driver Has an Incorrect Error Path in rtl_pci_probe() That Leaks Resources on Failure | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-90402 | Linux Kernel MHI Bus Host Driver Leaks Controller Resources When EDL sysfs Registration Fails | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-90399 | Linux Kernel Qualcomm ath12k Wi-Fi Driver Has a Stride Mismatch in mac_phy_caps_parse(), Enabling Out-of-Bounds Memory Reads | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-90398 | Linux Kernel Qualcomm ath11k Wi-Fi Driver Has a Stride Mismatch in mac_phy_caps_parse(), Enabling Out-of-Bounds Memory Reads | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-90392 | Linux Kernel BPF Has a Use-After-Free When Reading Link Info Due to Insufficient Reference Counting During Concurrent Detach | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90388 | Linux Kernel IOMMU DMA Subsystem Does Not Check the Atomic Pool Allocation Return Value, Accepting Null Pointers | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90387 | Linux Kernel Software IOMMU Dynamic Pool Allocation Discards the Allocation Virtual Address, Corrupting DMA Remapping State | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90383 | Linux Kernel SGI GRU Miscellaneous Driver Performs Page Table Walks From an Interrupt Context | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90379 | Linux Kernel MediaTek MT7921 WiFi Driver Has No PCIe AER Handler, Causing System Crashes on Advanced Error Reporting Events | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90372 | Linux Kernel MediaTek MT7915 Wi-Fi Driver Allows NSS Value Underflow in mt7915_mcu_get_sta_nss, Producing Incorrect Antenna Configuration | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90371 | Linux Kernel MediaTek MT76 WiFi Driver RXDMAD_C Buffer Recycling Has a Race Condition That Enables Use-After-Free | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90367 | Linux Kernel MT7996 WiFi Driver Disables the TX Worker During SER Recovery Without Holding the Device Mutex | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90358 | Linux Kernel BPF x86 Trampoline Allocates the Wrong Stack Frame Size for 128-Bit Function Arguments | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90357 | Linux Kernel MediaTek MT7915 WiFi Driver Retains TWT Flow Table Entries After the MCU Rejects the TWT Agreement | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90353 | Linux Kernel MediaTek MT7915 WiFi Driver Accesses a Freed Extended PHY Structure on the Registration Error Path | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-90343 | Linux Kernel cfg80211 Wi-Fi Framework Does Not Stop Peer Measurement Before P2P and NAN Teardown, Enabling a Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90341 | Linux Kernel Coreboot Firmware Table Parser Does Not Validate Table Entry Boundary Lengths | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-90332 | Linux Kernel DesignWare PCIe Endpoint Driver Unmaps the iATU Window Before Flushing a Cached MSI Write | 8.2 High | Updated |
| 2026-10-19 | CVE-2026-90329 | Linux Kernel HID Input Subsystem Does Not Drain Active Input Events Before Cleaning Up a Failed Device Probe | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90326 | Linux Kernel Block Cgroup Policy Activation Can Race With Block Group Destruction, Causing Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90325 | Linux Kernel Block Cgroup Policy Activation Operates on Dying Block Group Entries in blkcg_activate_policy | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90324 | Linux Kernel ublk Block Driver Does Not Check import_ubuf Return Value, Leaving Buffer Import Failures Silent | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90321 | Linux Kernel OCFS2 Filesystem Does Not Validate Inline Extended Attribute Data During Inode Block Read | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90320 | Linux Kernel OCFS2 Cluster File System Does Not Validate External Extended Attribute Entries When Reading Metadata, Enabling Memory Corruption | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90316 | Linux Kernel OMAP DSI Display Driver Incorrectly Copies the ISR Table, Creating a Use-After-Free on the Original Memory | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90312 | Linux Kernel BPF Verifier Performs a Load-Acquire Without First Checking the Source Pointer Register Type | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90309 | Linux Kernel Elastic RDMA Adapter Driver Processes Event Queue Events Without Holding Completion Queue References | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90308 | Linux Kernel Elastic RDMA Adapter Driver Does Not Hold Queue Pair References During Async Event and CM Processing, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90294 | Linux Kernel iSER Target Sends the Final iSCSI Login Response Before the Session Is Fully Registered | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90293 | Linux Kernel iSER Target Posts Full-Feature RDMA Receive Buffers Before Session Registration Is Complete | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90292 | Linux Kernel RDMA SIW Driver Frees State Early in siw_accept, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90291 | Linux Kernel Kernel Module Duplicate Request Handler Has a Use-After-Free in kmod_dup_req Lifetime Management | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90288 | Linux Kernel Renesas R-Car Gen2 PHY Driver Double-Drops the of_node Reference When PHY Creation Fails | 7.4 High | Updated |
| 2026-10-19 | CVE-2026-90286 | Linux Kernel AMD GFX6 GPU Driver Uses the Wrong Packet Processor for Compute Queue Initialization, Causing Command Execution Failures | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90268 | Linux Kernel SCSI Disk Driver sd_probe Fails to Clean Up Resources After a Large Pool Creation Failure | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-90260 | Linux Kernel Btrfs Zoned Mode Overwrites Active Extent Buffer Data When Zeroing the Buffer Out | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90256 | Linux Kernel Bluetooth L2CAP l2cap_disconn_ind Handler Accesses Channel Data Without Holding the Protocol Lock | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90255 | Linux Kernel Bluetooth HCI SCO Setup Context Is Freed While a Concurrent Connection Teardown Still Holds a Reference | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90246 | Linux Kernel AppArmor verify_tags() Overflows an Integer in Its Bounds Check, Potentially Bypassing Tag Array Validation | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90244 | Linux Kernel IOMMU DMA Layer Has Missing Locking Around msi_page_list Access, Creating a Race Condition | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90243 | Linux Kernel Intel VT-d IOMMU Tears Down a Copied Context Entry Before Clearing Its Present Bit | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-90241 | Linux Kernel Intel VT-d IOMMU Leaks Scalable-Mode Context Entries When Device Probe Fails | 8.2 High | Updated |
| 2026-10-19 | CVE-2026-90240 | Linux Kernel Intel VT-d IOMMU Uses the Wrong Source ID When Flushing the Context Cache for Device Aliases | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90237 | Linux Kernel Netfilter nft_ct Module Leaks Connection Tracking Expectation Resources Without a Registered Helper | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90235 | Linux Kernel Sun RPC Transport Socket Accesses Shared Callback Pointers Without Memory Ordering Annotations, a 9.8 CVSS Data Race | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-90231 | Linux Kernel AppArmor Unconfined Profile Does Not Correctly Enforce User Namespace Restrictions When the Forced Stack Is Active | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-90230 | Linux Kernel NVMe Target Authentication Negotiation Reads Out of Bounds From the Heap in nvmet_auth_negotiate, a 9.1 CVSS Flaw | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-90229 | Linux Kernel Apple NVMe Driver Does Not Destroy the Admin Queue on Device Removal, Creating a Use-After-Free Risk | 7.4 High | Updated |
| 2026-10-19 | CVE-2026-90228 | Linux Kernel NVMe Target Null Pointer Dereference in nvmet_execute_identify_ns_zns When Zoned Storage Is Not Configured | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90227 | Linux Kernel NVMe ioctl SUBMIT_IO Does Not Pass the Command Through nvme_cmd_allowed, Bypassing Access Controls | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90225 | Linux Kernel NFC LLCP Stack Reads llcp_sock->local Without Holding the Socket Lock in getsockopt, Creating a Race Condition | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90224 | Linux Kernel NFC NCI Controller Has a Double Completion Race in nci_data_exchange_complete That Causes a Use-After-Free | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90223 | Linux Kernel NFC LLCP Service Name Lookup TLV Parser Does Not Bound Iteration to the sk_buff Length, Enabling Out-of-Bounds Reads | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90210 | Linux Kernel BPF Trampoline Multi-Attach Frees a Trampoline Then Accesses It on Update Failure | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90207 | Linux Kernel ALSA Sequencer MIDI Does Not Serialize Input Teardown With Event Input Processing, Creating a Race Condition and Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90205 | Linux Kernel OCFS2 Cluster File System Does Not Validate the Orphan Slot Number When Reading Inodes, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90204 | Linux Kernel OCFS2 Cluster File System Does Not Validate the DIO Orphan Slot Number When Reading Inodes, Enabling Out-of-Bounds Memory Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90203 | Linux Kernel SquashFS Does Not Check Whether the Computed Block Offset Is Negative, Enabling Out-of-Bounds Memory Access | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90199 | Linux Kernel NTFS3 Filesystem Accepts Out-of-Range Extent VCN Values in mi_enum_attr, Enabling Out-of-Bounds Memory Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90191 | Linux Kernel RISC-V SBI Message Proxy Mailbox Driver Does Not Validate RPMI Notification Lengths Before Parsing | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-90176 | Linux Kernel Kernel SMB Server Skips Byte-Range Lock Validation for Single-Byte Lock Ranges | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-90173 | Linux Kernel SMB Direct RDMA Transport Frees Completion Queues Without Using ib_free_cq, Causing Use-After-Free, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-90172 | Linux Kernel SMB Direct Does Not Destroy the Queue Pair Before Memory Pools on Accept Failure, Causing Resource Ordering Issues | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90161 | Linux Kernel EROFS Read-Only File System Mishandles Interlaced Ztailpacking Compressed Clusters, Causing Memory Safety Issues | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90153 | Linux Kernel Kernel SMB Server smb_check_perm_dacl Does Not Bound ACE Iteration by DACL Size, Enabling Out-of-Bounds Reads | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-90151 | Linux Kernel NFSv4 Does Not Remove the Callback IDR Entry When Client Structure Allocation Fails, a 9.8 CVSS Resource Confusion | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-90149 | Linux Kernel NFSv4 FlexFiles Layout Driver Dereferences a Null Pointer When Processing NFSv4.0 Data Servers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90145 | Linux Kernel Huawei HiNIC3 Ethernet Driver Does Not Drop the skb When skb_checksum_help Fails, Causing Linearization State Mismatch | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90143 | Linux Kernel KCM Network Multiplexer Driver Runs the BPF Frame Parser Without Holding an RCU Read Lock | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90141 | Linux Kernel IPVS FTP Connection Tracking Helper Overflows an Integer When Parsing Port and Address Values | 7.3 High | Updated |
| 2026-10-19 | CVE-2026-90137 | Linux Kernel HP BIOS Configuration Platform Driver Has an Out-of-Bounds Password Encoding Check | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-90133 | Linux Kernel NTFS Driver Writes Beyond a Heap Buffer in ntfs_ir_to_ib During Index Root to B-Tree Conversion | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90132 | Linux Kernel NTFS Driver Permits Unprivileged Users to Write Reserved $LX* Extended Attributes | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90131 | Linux Kernel NTFS Driver Reads Resident Inode Maps Without Serializing Against Concurrent MFT Record Access | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90120 | Linux Kernel GIC-v5 Interrupt Controller Does Not Check the get_logical_index() Return Value During MADT IAFFID Parsing, Enabling Incorrect Memory Access | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-90118 | Linux Kernel NTFS Driver Reads One Page Past the Decompression Output Buffer in ntfs_decompress | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90110 | Linux Kernel inetpeer Peer Cache Uses Predictable RB-Tree Node Comparisons, Enabling Hash-Flooding Attacks That Degrade to O(n) Lookups at 9.4 CVSS | 9.4 Critical | Updated |
| 2026-10-19 | CVE-2026-90103 | Linux Kernel NFSv4.2 LAYOUTSTATS RPC Buffer Exhaustion Causes Subsequent NFS Operations to Fail | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90102 | Linux Kernel NFSv4 pNFS Data Server Cache Reuses Stale Entries When the NFS Protocol Version Differs | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90092 | Linux Kernel Bluetooth L2CAP Allows Connections to Be Added to the Accept Queue on Non-Listening Sockets | 8.0 High | Updated |
| 2026-10-19 | CVE-2026-90091 | Linux Kernel Bluetooth L2CAP Race Between Socket Listen Cleanup and Channel Reference Release | 8.0 High | Updated |
| 2026-10-19 | CVE-2026-90089 | Linux Kernel NXP UART Bluetooth Driver Reads a Firmware Dump Without Validating the Header Length Field | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90071 | Linux Kernel Traffic Control sch_teql Scheduler Does Not Restore skb->dev on Slave Failure, Causing Misrouting in the Network Stack | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90069 | Linux Kernel Asynchronous Compression Subsystem Does Not Allocate a Request Context When Cloning, Causing Null Pointer Dereference | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90067 | Linux Kernel Ceph Client Does Not Validate the Banner Payload Length on Connection Setup, Enabling a Buffer Over-Read | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90062 | Linux Kernel Netfilter nf_tables Initiates Hardware Offload Before the Chain Blob Is Built, Causing Incorrect Rule Offloading to Hardware | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90059 | Linux Kernel stmmac Ethernet Driver Loses NET_IP_ALIGN Alignment in RX DMA, Causing Misaligned Network Packet Reads | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-90057 | Linux Kernel SLIP Serial Line Driver Use-After-Free in slip_receive_buf When the Line Goes Down | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90051 | Linux Kernel TCP Stack Accepts Non-Zerocopy Device Memory Transmit Requests That Should Be Rejected | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90043 | Linux Kernel zram Compressed Block Device Uses Wrong Slot Lock Bit Position on Big-Endian 64-Bit Systems | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90038 | Linux Kernel NFS Server Client Structure Use-After-Free During Export State Revocation, a 9.8 CVSS Concurrency Bug | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-90032 | Linux Kernel USBTV Grab Driver Releases the Capture Device Before Unregistering Its ALSA Sound Card | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90027 | Linux Kernel Qualcomm PMIC USB Type-C Driver Does Not Disable the CC Debounce Delayed Work When Stopping | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90026 | Linux Kernel Qualcomm PMIC USB Type-C Driver Does Not Cancel Pending reset_work When the Interface Stops | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90025 | Linux Kernel USB Type-C UCSI DisplayPort Driver Uses an Out-of-Bounds Altmode Array Index | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-90022 | Linux Kernel USB Gadget f_midi2 Function Driver Has a Use-After-Free in the String Attribute Show Path | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90018 | Linux Kernel RTL8723BS WiFi Staging Driver Out-of-Bounds Read and Stack Overflow in rtw_get_wps_attr WPS Attribute Parser | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-90017 | Linux Kernel Realtek RTL8723BS Staging Wi-Fi Driver Reads Out of Bounds in rtw_action_frame_parse() When Parsing Management Action Frames | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-90014 | Linux Kernel Tracing Event Filter and Trigger Proc Files Access the Trace Array Without Holding a Reference | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90012 | Linux Kernel SPI Subsystem Does Not Release DMA Mapping Ownership Correctly on a Partial Map Failure, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-90011 | Linux Kernel iSCSI Target Login Payload Buffer Lacks a Terminator Byte Reserve, Enabling an Off-by-One Overflow | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-90010 | Linux Kernel SCSI bsg io_uring Passthrough Copies Sense Data Beyond max_response_len, Enabling Out-of-Bounds Write | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90009 | Linux Kernel SCSI BSG Driver Has a TOCTOU Race in io_uring Passthrough Command Setup | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90008 | Linux Kernel MegaRAID SAS Driver Does Not Limit NVMe Request Size to the PRP Chain Frame Size, Enabling Memory Overwrite | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90007 | Linux Kernel pm8001 SCSI Driver Frees MSI-X Vectors Using the Wrong Index on Error Rollback | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90003 | Linux Kernel Futex Priority Inheritance Requeue Path Has a Use-After-Free on rcuwait When Threads Exit During PI Requeue | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90001 | Linux Kernel HID BPF Struct Ops Destroy Path Does Not Serialize Device Reference Release, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-90000 | Linux Kernel Synaptics RMI HID Driver Accesses Out-of-Bounds Memory When Processing Undersized RMI Reports | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89999 | Linux Kernel Wacom HID Driver Does Not Validate Report Length in wacom_intuos_pro2_bt_irq, Enabling Out-of-Bounds Memory Reads | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89998 | Linux Kernel Device Mapper Race Between Loading a New Table and Removing the Device | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89997 | Linux Kernel Device Mapper Race Between a Resuming Table and a Concurrent Device Removal | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89995 | Linux Kernel DMA Direct Allocation Pool Returns a Struct Page Pointer That Bypasses Normal Consistency Checks | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89994 | Linux Kernel Freescale eDMA Engine Tracing Code Dereferences a Pointer During Log Output Without Null Checking | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89992 | Linux Kernel CPU Idle DT GenPD Driver Does Not Free the Original Name Allocation, Enabling a Use-After-Free on String Reassignment | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89990 | Linux Kernel Ceph MDS Access Check Does Not Hold the Required Mutex in ceph_mds_check_access(), Enabling a Race Condition at 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89988 | Linux Kernel kprobes Does Not Protect kprobe_blacklist With RCU Locking, Enabling a Use-After-Free During Concurrent List Traversal | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89986 | Linux Kernel NUMA Memory Policy Calls a Sleeping Allocation Function From an Atomic Context in alloc_pages_bulk_weighted_interleave | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89985 | Linux Kernel Memory Cgroup Folio Object Accounting Drifts Out of Sync When a Folio Migrates Off Its Assigned Node | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89980 | Linux Kernel ALSA Harmony Sound Driver Requests an IRQ Before Initializing Its Spinlocks, Creating an Initialization Race Condition | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89979 | Linux Kernel ALSA PCM Subsystem Has a Race Between Non-Atomic Operations and the Trigger-Start Path, Corrupting PCM State | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89974 | Linux Kernel NVMe-FC Fabrics Driver Double-Frees the Connection Options String When nvme_add_ctrl Fails | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89973 | Linux Kernel NVMe-TCP Host Driver Accepts Controller-to-Host Data PDUs for Commands That Are Not Expecting Data | 8.2 High | Updated |
| 2026-10-19 | CVE-2026-89970 | Linux Kernel NVMe Target Authentication Timeout Work Runs Concurrently With Submission Queue Teardown, a 9.8 CVSS Race | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89969 | Linux Kernel NVMe-TCP Target Writes Out of Bounds When Receiving a PDU Longer Than the Allocated Buffer, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89968 | Linux Kernel NVMe-TCP Target Accepts Unsolicited Host-to-Controller Data PDUs, Enabling Unauthorized Data Injection | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89967 | Linux Kernel Device Memory Migration Writes Out of Bounds When Processing Compound Folios | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89965 | Linux Kernel NVDIMM Block Translation Table Driver Accepts Arenas Whose Free Slot Count Falls Below the Lane Count | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89961 | Linux Kernel PowerPC Memory Management Tracks the Wrong Page Frame Number During Compound Page vmemmap Population | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89960 | Linux Kernel s390 VFIO AP Mediated Device Driver Leaves a Stale pqap_hook Pointer on Error in vfio_ap_mdev_set_kvm(), Enabling a Use-After-Free | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89959 | Linux Kernel s390 VFIO AP Mediated Device Driver Incorrectly Handles Control Domain Removal in vfio_ap_mdev_cfg_remove | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89957 | Linux Kernel s390 vfio-ap Skips the Hot-Unplug Notification When the Last AP Adapter or Domain Is Removed | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89954 | Linux Kernel MTD ARM Flash System v2 Image Driver Does Not Validate Image Info Bounds, Enabling Out-of-Bounds Memory Access | 8.0 High | Updated |
| 2026-10-19 | CVE-2026-89951 | Linux Kernel B.A.T.M.A.N. Advanced Mesh Networking Retains a Stale Receive Device Pointer When Merging Fragmented Frames | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89947 | Linux Kernel Amlogic Meson Clock Driver Declares More Parents Than Exist for gxbb_32k_clk_sel, Causing Out-of-Bounds Clock Table Access | 8.0 High | Updated |
| 2026-10-19 | CVE-2026-89943 | Linux Kernel LoongArch ASoC Audio Driver Has Incomplete Error Handling in ACPI Property Parsing | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89942 | Linux Kernel IIO Industrial I/O Subsystem Has a Use-After-Free in the Anonymous Buffer Release Path | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89941 | Linux Kernel Industrial I/O DMA Buffer Fence Release Is Not RCU-Safe, Enabling Use-After-Free in Concurrent Buffer Operations | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89940 | Linux Kernel Industrial I/O DMA Fence Lock Lifetime Is Not Bound to the Fence Object, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89938 | Linux Kernel Atlas Sensors IIO Driver Has a Use-After-Free During Device Removal Due to Calling iio_trigger_poll() Instead of the Nested Variant | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89932 | Linux Kernel Nested VMX Does Not Flush vpid02 on First Use, Leaving Stale TLB Entries From a Prior Nested Guest | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89930 | Linux Kernel KVM Nested VMX Does Not Service Local TLB Flushes When Nested VM-Enter Fails, a 9.3 CVSS Security and Correctness Flaw | 9.3 Critical | Updated |
| 2026-10-19 | CVE-2026-89929 | Linux Kernel KVM Nested VM Does Not Guarantee INVVPID Emulation on the Correct Physical CPU, Creating TLB Coherency Issues | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89928 | Linux Kernel KVM x86 MMU Lockless Rmap Walk Does Not Consume the Locked Rmap Value, Leaving Page Table State Inconsistent | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89927 | Linux Kernel KVM x86 Hyper-V Synthetic Timer Does Not Clamp the Expiration Deadline, Allowing an Infinite Livelock | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89922 | Linux Kernel KVM on s390 Does Not Hold the SRCU Read Lock When Importing Watchpoint Data, Enabling a Concurrency Bug | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89920 | Linux Kernel KVM on s390 Incorrectly Reinjects CK Machine Checks Into Guests, Corrupting Guest Memory | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89919 | Linux Kernel KVM s390 Key Operation Reads the Guest Address Space Control Element Without Holding mmu_lock | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89918 | Linux Kernel KVM arm64 Mishandles End-of-VA-Space Addresses in TLBI Range Invalidation Operations | 9.3 Critical | Updated |
| 2026-10-19 | CVE-2026-89916 | Linux Kernel KVM on ARM64 Does Not Include VNCR Invalidation in the MMU Invalidation Retry Loop, a 9.3 CVSS TLB Coherency Bug | 9.3 Critical | Updated |
| 2026-10-19 | CVE-2026-89915 | Linux Kernel KVM arm64 VM-Wide VNCR Mapping Counter Goes Negative, Corrupting Memory Region Reference Counts | 9.3 Critical | Updated |
| 2026-10-19 | CVE-2026-89914 | Linux Kernel KVM arm64 Range-Based TLBI Does Not Sign-Extend Virtual Addresses, Causing Incomplete TLB Invalidation | 9.3 Critical | Updated |
| 2026-10-19 | CVE-2026-89913 | Linux Kernel KVM on ARM64 vGIC-v3 Does Not Take an LPI Reference in vgic_v3_save_pending_tables, Enabling a Use-After-Free | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89911 | Linux Kernel KVM arm64 TLBI Range Calculation Does Not Cap Virtual Address Range to the Architectural Limit, Causing Incomplete TLB Invalidation | 7.9 High | Updated |
| 2026-10-19 | CVE-2026-89910 | Linux Kernel KVM LoongArch DMSINTC Interrupt Handler Uses an Uninitialized Stack Variable | 7.3 High | Updated |
| 2026-10-19 | CVE-2026-89908 | Linux Kernel KVM LoongArch Clears Architecture-Specific Memslot Flags on a Flags-Only Memory Region Update | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89906 | Linux Kernel LoongArch BPF JIT Has Incorrect Jump Offset Calculation in Tail Call Code, Producing Wrong Control Flow | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89904 | Linux Kernel LoongArch Platform Initialization Overflows the acpi_package_ids Array During ACPI Device ID Setup | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89903 | Linux Kernel LoongArch Rethook Trampoline Unnecessarily Saves and Restores the Per-CPU Base Register, Corrupting State | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89902 | Linux Kernel LoongArch Architecture Underflows the Preemption Count When No Probe Is Present, Corrupting Scheduler State | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89899 | Linux Kernel CEC Media Driver Frees an Interrupted Transmit Object Before Canceling the Delayed Work That References It | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89898 | Linux Kernel Extron DA HD 4K Plus CEC Media Driver Accepts Device-Reported Data Without Bounds Validation | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89897 | Linux Kernel CEC Media Subsystem Delivers Exclusive Follower Messages Without Serialization | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89894 | Linux Kernel cx231xx Media Driver Accepts Video Geometry Changes While the VBI Capture Queue Is Still Active | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89893 | Linux Kernel cx23885 PCI Media Capture Driver Does Not Cancel NetUP Common Interface Work Before Device Teardown | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89890 | Linux Kernel GO7007 MPEG Video Capture Driver Releases Its v4l2 Reference Before the ALSA Sound Card Is Unregistered | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89888 | Linux Kernel OV02A10 Camera Sensor Driver Use-After-Free During Firmware Node Endpoint Parsing | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89887 | Linux Kernel OmniVision OV7740 Camera Sensor Driver Accesses Freed Objects During Device Removal | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89885 | Linux Kernel MediaTek MDP3 Media Platform Driver Has Incorrect SCP Device Reference Counting, Enabling a Use-After-Free During Teardown | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89883 | Linux Kernel Allwinner CIR Remote Control Driver Leaks an Unregistered rc_device on Probe Failure | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89882 | Linux Kernel Rockchip VPU HEVC Decoder Does Not Guard Against INTER_REF_PIC_SET_PRED Index Underflow, Enabling Memory Corruption | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89880 | Linux Kernel RTL2832 SDR Driver Leaks URBs and Stream Buffers When start_streaming() Fails Mid-Initialization | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89877 | Linux Kernel SAA7164 Media Driver Fails to Clean Up Resources When Device Initialization Fails, Creating Memory Safety Risks | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89875 | Linux Kernel Texas Instruments VPE Video Processing Engine Does Not Quiesce Overflow Recovery Before Freeing Stream Resources | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89873 | Linux Kernel's media/V4l2-ctrls: HEVC EXT SPS RPS counts, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89870 | Linux Kernel Zoran Video Capture Driver Frees a Registered video_device Twice, Causing a Double-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89863 | Linux Kernel qla2xxx SCSI Driver EDIF Module Dereferences a Null Pointer When Checking the RX Security Association During Deletion | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89861 | Linux Kernel qla2xxx SCSI Driver Does Not Hold a Virtual Port Reference in qla24xx_report_id_acquisition, Enabling Use-After-Free | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89860 | Linux Kernel qla2xxx SCSI Driver Reinitializes NVMe abort_work on Every Submission, Corrupting the Work Queue | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89857 | Linux Kernel qla2xxx SCSI Driver Sends NVMe Login Service Reject Replies Without Holding the Queue Pair Lock, a 9.8 CVSS Race | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89856 | Linux Kernel QLogic QLA2xxx Fibre Channel Driver Does Not Clamp MSI-X-Derived Queue Counts, Enabling Integer Truncation and Incorrect Queue Allocation | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89854 | Linux Kernel qla2xxx SCSI Driver Accesses cs84xx Firmware Data After Freeing It During Host Teardown | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89849 | Linux Kernel qla2xxx SCSI Driver Processes Non-SCSI SRBs on the Status IOCB Fast Path, Corrupting Driver State | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89848 | Linux Kernel QLogic QLA2xxx Fibre Channel Driver Frees the Request Queue Without First Quiescing the Response IRQ, Enabling Use-After-Free | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89847 | Linux Kernel qla2xxx SCSI Driver Double-Completes Async IOCB Requests on Timeout, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89846 | Linux Kernel qla2xxx SCSI Driver Reads Sense Data Beyond the rsp_info_len Boundary, a 9.1 CVSS Out-of-Bounds Read | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-89844 | Linux Kernel qla2xxx SCSI Driver Updates Host Map in Report ID Acquisition Without Holding vport_slock, Risking a Race Condition | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89841 | Linux Kernel F2FS Flash File System Redirties Non-Pinned Folios in redirty_blocks, Corrupting Page State | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89836 | Linux Kernel F2FS Filesystem Reads folio_nr_pages After Releasing the Folio in Large Folio Invalidation | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89829 | Linux Kernel F2FS Filesystem Passes the Wrong Folio Index to f2fs_sanity_check_node_footer, Causing Missed Corruption Checks | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89826 | Linux Kernel Panthor Mali GPU Driver Firmware Build-Info Parser Has Insufficient Bounds Checks on Field Lengths | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89825 | Linux Kernel Panthor Mali GPU Driver Firmware Control Interface Bounds Checks Are Insufficient | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89823 | Linux Kernel DRM Core Has a Race Between a Partial Device Registration Failure and a Concurrent ioctl Call | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89819 | Linux Kernel AMD Display Driver Does Not Validate the Degamma LUT Buffer Size for Private Color Properties | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89818 | Linux Kernel AMDGPU VCN Video Codec Driver Overflows an Integer in the Decode Message Buffer Count Validation | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89814 | Linux Kernel AMD GPU Driver Does Not Clamp the Isolation Index for Rings Outside a GPU Partition, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89811 | Linux Kernel AMD GPU KFD Driver Evicts and Suspends MES Queues Without Flushing the GPU TLB Afterward | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89810 | Linux Kernel AMD GPU KFD Driver Skips Needed Cleanup on the svm_migrate_copy_to_ram Error Exit Path | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89808 | Linux Kernel AMD GPU KFD Driver Mishandles VM Range Holes During Shared Virtual Memory Migration to VRAM | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89805 | Linux Kernel DRM Pagemap Has a Use-After-Put in the Folio Allocation Fallback Path | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89804 | Linux Kernel Nouveau DRM Driver Unmaps DMA Regions With the Wrong Size for Large Folios | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89803 | Linux Kernel's Drm/nouveau: unsubscribe the channel-kill event before the fence context, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89801 | Linux Kernel Nouveau GPU Driver Prematurely Frees a Virtual Memory Region When OP_UNMAP_SPARSE Fails, Enabling a Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89791 | Linux Kernel Performance Monitoring perf mmap Revival Race With the Final munmap Call Enables Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89789 | Linux Kernel GTP Tunneling Driver Has a Use-After-Free in the gtp_newlink() Error Path Due to Missing synchronize_net() Call | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89788 | Linux Kernel Kernel SMB Server Use-After-Free of Tree Connection in smb2_tree_connect, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89786 | Linux Kernel ext4 Filesystem Reads Out of Bounds in ext4_read_inline_dir When Iterating Inline Directory Entries | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-89783 | Linux Kernel IPv6 xfrm Input Address Lookup Writes Out of Bounds When the Security Path Array Is Full, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89782 | Linux Kernel NTFS3 Filesystem Accepts Restart Tables Larger Than U16_MAX Entries, Causing an Integer Overflow | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89781 | Linux Kernel NTFS3 Filesystem Reads Out of Bounds in read_log_rec_buf When Parsing Circular Log Records | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89779 | Linux Kernel NTFS3 Filesystem Does Not Validate That Extended Attribute Entry Size Covers the Name and Value, a 9.1 CVSS Out-of-Bounds Read | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-89778 | Linux Kernel ISO 9660 Filesystem Reads Out of Bounds in the Page Array When Accessing an Empty Zisofs Block, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89777 | Linux Kernel VFIO PCI Driver Leaves vdev->msi_perm Pointing to Freed Memory When Initialization Fails, Enabling a Use-After-Free | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89775 | Linux Kernel KVM arm64 VNCR TLB Size Calculation Mishandles Negative Stage-1 Page Table Walk Levels | 9.3 Critical | Updated |
| 2026-10-19 | CVE-2026-89771 | Linux Kernel Trace Ring Buffer Subbuf Resize Races With Active Readers, Enabling Access to Freed Sub-Buffers | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89769 | Linux Kernel NXP PIT Clocksource Driver Leaks IRQ Resources When cpuhp_setup_state Returns an Error | 7.4 High | Updated |
| 2026-10-19 | CVE-2026-89767 | Linux Kernel OverlayFS Calls end_creating Twice on the Casefold Directory Name Mismatch Error Path | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89762 | Linux Kernel AppArmor begin_current_label_crit_section Use-After-Free of a Task Credential During Label Update | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89761 | Linux Kernel AppArmor Writes Out of Bounds When Null-Terminating a Security Label Vector | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89760 | Linux Kernel Memory Manager Frees Hibernation Swap Slots That Are Still Present in the Swap Cache, Causing a Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89758 | Linux Kernel NUMA Mempolicy Folio Queue Operation Dereferences Non-Present PMD Entries | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89754 | Linux Kernel Memory Page Walker Carries a Stale Action Value Out of walk_pmd_range, Causing Incorrect Page Handling | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89750 | Linux Kernel User Events Tracing Does Not Clear Copied Tracing State Before Forking, Leaking Kernel Pointers to Child Processes | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89748 | Linux Kernel Tracing Ring Buffer Reader Swap Exhausts Its Retry Budget and Fails Without Recovering, Causing Tracing Data Loss | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89747 | Linux Kernel Trace Pipe Reader Accesses Sub-Buffer State After the Sub-Buffer Is Freed During Order Change | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89746 | Linux Kernel Tracing Named Trigger System Has a Use-After-Free When Multiple Triggers Share the Same Name | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89744 | Linux Kernel Firmware Node Property Framework Enters an Infinite Loop in fwnode_for_each_child_node on Circular or Malformed Firmware Data | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89743 | Linux Kernel AWS Nitro Security Module Driver Accepts Device-Reported Response Lengths Without Bounding Them | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-89742 | Linux Kernel RapidIO mport Character Device Driver Has a Use-After-Free in dma_req_free() During DMA Request Cleanup | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89741 | Linux Kernel v4l2 Video Device Driver Has Incorrect Error Handling in __video_register_device() After a Reverted Fix Reintroduced the Flaw | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89738 | Linux Kernel Atmel AT91 USB Device Controller Frees the UDC Structure Before Draining the VBUS Poll Timer | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89736 | Linux Kernel USB Audio Gadget Driver Accesses Freed State After Sound Card Disconnect | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89733 | Linux Kernel USB UVC Gadget Function Driver Leaves Dangling Pointers After Partial Bind or Unbind of the UVC Interface | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89729 | Linux Kernel HID Sensor Hub Writes Out of Bounds in sensor_hub_get_feature When Processing Feature Reports From Devices | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89725 | Linux Kernel STM32 CEC Media Driver Writes Out of Bounds When the Receive Buffer Overflows | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89724 | Linux Kernel Virtual Video Codec Media Driver Writes Out of Bounds in the FWHT Video Encoder | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89723 | Linux Kernel NILFS2 Filesystem Reads Out of Bounds in nilfs_direct_propagate When Propagating Changes After File Truncation | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89720 | Linux Kernel UBIFS Reads Out of Bounds When Verifying the Authenticated Filesystem Signature Length | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-89712 | Linux Kernel NFS Server Does Not Restart the ssc_expire_umount Walk After Dropping nfsd_ssc_lock, Enabling a Use-After-Free at 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89706 | Linux Kernel NFS Server Does Not Reset the Write Verifier After an Async COPY Writeback Failure | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89704 | Linux Kernel NFS Server Samples the Writeback Error Cursor After the Async COPY Loop Instead of Before It | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89703 | Linux Kernel NFS Server Does Not Set SC_STATUS_FREED When Dropping Revoked Delegation State IDs, Enabling a Use-After-Free at 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89702 | Linux Kernel NFS Server Sizes the fh_verify Server Sockaddr Slot Using the Wrong Length Field Instead of xpt_locallen, Enabling a 9.8 CVSS Buffer Overflow | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89696 | Linux Kernel NFS Server Allows Non-SAVEFH Operations After a FOREIGN PUTFH, Causing Null Pointer Dereference | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89695 | Linux Kernel NFS Server Does Not Cap the Decoded POSIX ACL Entry Count, Enabling Algorithmic Complexity Attacks Through Unbounded Sort Cost | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89692 | Linux Kernel NFS Server Does Not Clear the CALLBACK_RUNNING Flag After Delegation Recall Queueing Fails | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89691 | Linux Kernel NFS Server Does Not Clear opcnt When Releasing Compound Arguments, Enabling an Out-of-Bounds Read | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89690 | Linux Kernel NFS Server Frees Compound Operation Buffers Too Early, Enabling a Use-After-Free in rpc_status Tracking Paths | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89689 | Linux Kernel NFS Server Frees NFSv4.1 Session Slots That Are Still Referenced by Active Requests, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89688 | Linux Kernel NFS Server Drops the Wrong Object on Sequence ID Operation Replay Retry, a 9.8 CVSS State Confusion Bug | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89687 | Linux Kernel NFS Server nfsd_file_do_acquire Can Return a File Object That Was Never Successfully Opened | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89684 | Linux Kernel NFS Server Race in nfs4_init_cp_state Exposes a Partially Initialized Copy State Pointer | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89682 | Linux Kernel NFS Server File Cache Disposal Thread Accesses a Structure After It Is Freed, Causing Use-After-Free | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89681 | Linux Kernel NFS Server Layout Fence Worker Race Double-References a Pynfs Stateid, a 9.8 CVSS Refcount Overflow | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89680 | Linux Kernel NFS Server Leaks File References When Inter-Server Copy Setup Fails | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89679 | Linux Kernel NFS Server Null Dereference in nfsd4_setattr When Setting Delegation Timestamp Attributes | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89678 | Linux Kernel NFS Server Misdetects Partial Writes in the nfsd_direct_write Path | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89677 | Linux Kernel NFS Server May Compose File Handles From the Wrong Dentry in nfsd4_create_file, a 9.8 CVSS Memory Safety Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89674 | Linux Kernel NFS Server Calculates XDR Lengths Incorrectly in nfsd4_ff_encode_layoutget, Enabling a Buffer Overflow Scoring 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89670 | Linux Kernel NFS Server Drops the RCU Read Lock Between LocalIO Pointer Read and Retry, Risking Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89669 | Linux Kernel NFS Server Publishes a Copy-Notify Stateid Before Fully Initializing It, a 9.8 CVSS Race Condition | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89668 | Linux Kernel NFS Server Initializes Debugfs Entries Before Its Slab Allocators Are Ready During Module Load | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89664 | Linux Kernel NFS Server Leaks POSIX ACL Objects Decoded During OPEN Operations | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89663 | Linux Kernel NFS Server Drops Copy-Notify Stateid References Before Revoking Them, Enabling Use-After-Free | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89658 | Linux Kernel NFS Server Accesses a Released Client Structure During NFSv4.0 Revoked State Cleanup, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89657 | Linux Kernel libceph OSD Extent Map Cursor Advances Without Validating the Extent Map, Enabling Out-of-Bounds Access | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89651 | Linux Kernel Ceph Filesystem Decodes MDSCapAuth Path and Filesystem Name Without Length Bounds in handle_session, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89646 | Linux Kernel Ceph Filesystem Leaks an Inode Reference When Writeback Is Aborted During Unmount | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89641 | Linux Kernel CIFS Client Continues Using a Tree Connection Pointer After It May Have Been Released in cifs_file_set_size | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89639 | Linux Kernel CIFS Client Calls the Wrong Cache Invalidation Path for O_TRUNC Truncation, Leaving Stale Pages in the Page Cache | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89637 | Linux Kernel CIFS SMB Client Has a Use-After-Free and Buffer Leak in cifs_check_trans2() When Processing Malformed Secondary T2 Responses at 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89635 | Linux Kernel Kernel SMB Server Rebinds All Oplocks on Durable Reconnect Instead of Only the Reopened File's Own Oplock, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89634 | Linux Kernel SMB Client ALIGN() Calculation Overflows in the symlink_data Error Context Loop, a 9.1 CVSS Integer Overflow | 9.1 Critical | Updated |
| 2026-10-19 | CVE-2026-89620 | Linux Kernel Intel THC-HID QuickSPI Driver Copies Input Report Data Without Validating Report Size Against Buffer Capacity | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89619 | Linux Kernel Intel QuickSPI HID Driver Copies GET_REPORT Response Beyond the Caller's Buffer Boundary | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89617 | Linux Kernel NTFS3 Filesystem Accepts Unvalidated Dirty Page Table Entries During Log Replay | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89616 | Linux Kernel NTFS3 Partial LZNT Decompression in ni_read_frame Leaks Kernel Stack Data to Disk | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-89615 | Linux Kernel NTFS3 Driver Does Not Bound the page_lcns[] Index by the Log Record Size, Enabling Out-of-Bounds Array Access | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89614 | Linux Kernel NTFS Driver Scans the Free-Cluster Bitmap Beyond the End of the Volume, a 9.8 CVSS Out-of-Bounds Read | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89613 | Linux Kernel NTFS Driver Does Not Reject Invalid Empty Mapping Pairs, Enabling Memory Corruption at 9.8 CVSS Critical Severity | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89612 | Linux Kernel NTFS Driver Accepts Invalid MFT Logical Cluster Numbers From the Boot Sector, a 9.8 CVSS Boundary Violation | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89611 | Linux Kernel NTFS Driver Does Not Validate Non-Resident Attribute Offsets, Enabling Out-of-Bounds Memory Access at 9.8 CVSS Critical Severity | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89610 | Linux Kernel NTFS Driver Accepts Data Run Lengths That Exceed the Volume Boundary, a 9.8 CVSS Out-of-Bounds Read | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89609 | Linux Kernel eCryptfs Cleans the Kernel-to-Daemon Message Queue Without Holding the Message Context List Lock | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89608 | Linux Kernel eCryptfs Passes an Unbounded Buffer Pointer to the Packet Parser, Enabling Out-of-Bounds Reads | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89607 | Linux Kernel eCryptfs parse_tag_3_packet Does Not Reject Oversized encrypted_key_size, Enabling Out-of-Bounds Reads | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89606 | Linux Kernel eCryptfs Processes Tag 70 Packets Smaller Than the Minimum Valid Packet Size | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89605 | Linux Kernel eCryptfs Leaks Message Context Objects When a Kernel-to-Daemon Message Send Fails | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89600 | Linux Kernel fanotify Accesses File Range Annotation After the Parent Event Has Been Freed | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89599 | Linux Kernel OMAP Framebuffer DSI Panel Driver Uses an Uninitialized Spinlock Before Display Registration Completes | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89597 | Linux Kernel uvesafb Framebuffer Driver Does Not Unregister Its Connector Callback When Initialization Fails, Leaving a Dangling Registration | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89596 | Linux Kernel forcedeth Ethernet Driver Has an Off-by-One Error When Saving and Restoring Non-PCI Configuration Space | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89594 | Linux Kernel OMAP SSI High-Speed Interface Driver Initializes DMA Transfers Without Setting Up the Device DMA Mask | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89593 | Linux Kernel HugeTLB Adjusts Reservations During Unmapping Without Checking Whether mapcount Is Zero, Causing Double-Adjustment Corruption | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89588 | Linux Kernel ACPI GHES Error Record Parser Miscalculates ARM Section Length After the Section Header | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89587 | Linux Kernel ACPI Platform Firmware Runtime Update Driver Overflows a Stack Buffer in query_capability | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89585 | Linux Kernel Character LCD Auxiliary Display Driver Leaks a Pending Backlight Work Item on Registration Failure | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89584 | Linux Kernel Block Layer Does Not Validate User Space I/O Vectors During Extraction, Enabling Out-of-Bounds Memory Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89583 | Linux Kernel Bluetooth EIR Parser Reads Out of Bounds in eir_get_service_data() When Processing Extended Inquiry Response Data | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89581 | Linux Kernel BPF x86 JIT Misresolves Per-CPU Variable Addresses When the Destination Is an Extended Register | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89579 | Linux Kernel BPF Bloom Filter Sizing and Bit Indexing Calculations Are Unsafe on 32-Bit Architectures | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89571 | Linux Kernel CXL Features Driver Does Not Bound the Firmware Control Command Payload to the Caller's Input Buffer | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89570 | Linux Kernel CXL Machine Check Error Notifier Is Shared Across Regions Instead of Per-Region, Causing Incorrect Error Propagation | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89562 | Linux Kernel IPv6 GRE Tunnel Driver Calculates the Wrong Hardware Header Length for NBMA Point-to-Multipoint Tunnels | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89558 | Linux Kernel MD RAID10 still_degraded Flag Is Inverted in raid10_sync_request, Causing Incorrect Array Rebuild Decisions | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89547 | Linux Kernel Sun RPC Service Pool Does Not Check Whether Per-CPU Counter Allocation Succeeded, Enabling a Null Pointer Dereference | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89546 | Linux Kernel SUNRPC Destroys the Callback Service Before Closing Its Backchannel, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89536 | Linux Kernel Sun RPC Client Does Not Wait for In-Flight TLS Handshake Callbacks Before Cleanup, a 9.8 CVSS Race Condition | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89524 | Linux Kernel Atheros ath6kl Wi-Fi Driver Does Not Clamp Association Request and Response Lengths Before Subtracting IE Offsets, Enabling Integer Underflow | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-89523 | Linux Kernel MediaTek MT7925 Wi-Fi Driver Leaves Pending MLO Power Management Work Uncancelled on Teardown, Creating a Use-After-Free Risk | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89522 | Linux Kernel ipu7 Staging Media Driver Has a Use-After-Free in the Async Notifier When Device Probe Fails | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89521 | Linux Kernel Core Scheduler Does Not Handle the Case Where pick_task Releases the Run Queue Lock | 7.3 High | Updated |
| 2026-10-19 | CVE-2026-89508 | Linux Kernel RDMA User Communication Manager ucma_set_ib_path Runs Without Holding the Event Handler Lock | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89507 | Linux Kernel RDMA User Communication Manager ucma_write_cm_event Accesses Event Data Without Holding the Handler Lock | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89504 | Linux Kernel AMS AS3722 Regulator Driver Releases a Device Tree Node Too Early, Leaving a Dangling of_node Pointer | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89501 | Linux Kernel Trace Ring Buffer Resizes Per-CPU Subbufs Without Holding cpu_buffer Lock, Enabling Data Corruption | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89499 | Linux Kernel Trace Ring Buffer Continues Updating Remote Reader State After a Page Swap Failure | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89497 | Linux Kernel OrangeFS Client Misparses Debug Mask Strings When User-Supplied Input Has Leading Spaces | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89495 | Linux Kernel OCFS2 Distributed Lock Manager Migration Request Handler Accepts Unbounded Name Lengths, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89494 | Linux Kernel OCFS2 DLM Migration Lock Resource Handler Accepts Unvalidated Message Field Lengths, a 9.8 CVSS Out-of-Bounds Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89493 | Linux Kernel OCFS2 Filesystem Does Not Validate rl_used Against rl_count in the Refcount Block Validator, Enabling Out-of-Bounds Access | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89489 | Linux Kernel OpenRISC or1k_atomic Syscall Allows Arbitrary Kernel Memory Access From Userspace | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89486 | Linux Kernel IPMI Driver Frees cmd_rcvr Then Uses It in _ipmi_destroy_user, a 7.8 CVSS Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89485 | Linux Kernel NFS Lock Daemon Does Not Pin the Next File Pointer Across nlm_inspect_file Lock-Drops, Enabling a Use-After-Free at 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-89472 | Linux Kernel Charger Manager Power Supply Driver Registers sysfs Entries Before Initializing Regulators, Enabling Null Dereference | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89471 | Linux Kernel ChromeOS USB-PD Charger Driver Does Not Bound the EC-Reported Port Count, Enabling Out-of-Bounds Array Access | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89470 | Linux Kernel Chrome OS USB Power Delivery Driver Accepts Port Counts Above EC_USB_PD_MAX_PORTS From the Controller | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89469 | Linux Kernel LP8727 USB Charger Driver Use-After-Free in lp8727_release_irq During Driver Removal | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89466 | Linux Kernel Qualcomm Battery Manager Driver Does Not Null-Terminate Strings Received From Platform Firmware | 7.7 High | Updated |
| 2026-10-19 | CVE-2026-89465 | Linux Kernel rt9455 Power Supply Driver Does Not Quiesce Delayed Work Before Teardown, Enabling Use-After-Free | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-89459 | Linux Kernel s390 Per-CPU MVIY Macro Generates Wrong Code With Older Binutils, Causing Silent Per-CPU Data Corruption | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-89456 | Linux Kernel s390 DASD Driver Drops Partial Transfer Length Across Error Recovery, Causing Incorrect I/O Completion Sizes | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-89450 | Linux Kernel Tegra241 CMDQV IOMMU Accepts a Virtual Stream ID Wider Than the SID_MATCH Hardware Field | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-89443 | Linux Kernel Intel Speed Select Technology Driver Does Not Validate Level Values in Performance Mask Ioctls, Enabling Out-of-Bounds Array Access | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-89442 | Linux Kernel Intel Speed Select Technology clos_assoc ioctl Accepts User-Supplied Socket IDs Without Validation | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89440 | Linux Kernel VIA SD/MMC Controller Driver Does Not Stop Card Detection Polling When the Probe Fails | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-89436 | Linux Kernel Panasonic Laptop Platform Driver Writes a Sentinel Value Past the End of the pcc->sinf Configuration Array | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-84020 | Windows Routing and Remote Access Service (RRAS) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-84019 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-84018 | Windows Print Spooler Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-84017 | Windows Routing and Remote Access Service (RRAS) Null Pointer Dereference Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-84016 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-84015 | Critical Windows PPP/VPN stack Heap Buffer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-84014 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-19 | CVE-2026-84013 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-83935 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-83934 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-8168 | Qt's SVG Module Crashes Applications via Stack Exhaustion When Parsing Deeply Nested SVG Elements | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-81017 | Linux Kernel Chrome OS Sensor Hub Platform Driver Accepts Out-of-Bounds Sensor Numbers From the Embedded Controller | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-81012 | Linux Kernel HP BIOS Configuration Driver Writes One Byte Past the Destination Buffer in hp_get_string_from_buffer | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-81011 | Linux Kernel HP BIOS Configuration Driver Passes Unvalidated Element Counts to Package Parsers, Enabling Out-of-Bounds Memory Access | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-81010 | Linux Kernel io_uring waitid Operation Ignores Task Work Cancellation, Leaving the Process Unable to Exit | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-81008 | Linux Kernel On-Chip Interconnect Subsystem Has a Use-After-Free in icc_get() and of_icc_get_by_index() During Provider Teardown | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-81007 | Linux Kernel IPMI IPMB Driver Does Not Validate Write Message Length Before Processing, Enabling Out-of-Bounds Reads | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-81006 | Linux Kernel IPMI Driver Does Not Remove All sysfs Files When Registration Fails, Creating Dangling Kernel Object References | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-81004 | Linux Kernel IPMI Message Handler Does Not Cancel Pending Work Cleanly on Error, Creating a Use-After-Free Risk | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-81003 | Linux Kernel s390 AF_IUCV Transport Does Not Filter Incoming HiperSockets Frames by Ingress Device in afiucv_hs_rcv(), Enabling Frame Spoofing | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-80998 | Linux Kernel Broadcom bnxt Ethernet Driver Fails to Ring the TX Doorbell When Software USO Segmentation Exits Early | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-80997 | Linux Kernel Qualcomm IPA Network Driver Stalls the Modem TX Queue After Runtime Resume | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-80995 | Linux Kernel MCTP Network Layer Looks Up a Route Without Holding a Reference to the Underlying Route Device | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80992 | Linux Kernel Renesas ravb Ethernet Driver Dereferences an Invalid PTP Clock Pointer | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80991 | Linux Kernel Renesas ravb Ethernet Driver Tears Down PTP Clock Without Serialization, Risking a Race on Removal | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80986 | Linux Kernel SMC-Rv2 LLC Message Handler Accepts Unbounded Peer Remote Key Counts, a 9.8 CVSS Memory Safety Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-80985 | Linux Kernel SMC-Rv2 LLC Message Handler Does Not Properly Store Oversized Messages in Queue Entries | 8.2 High | Updated |
| 2026-10-19 | CVE-2026-80981 | Linux Kernel SMC Network Driver Use-After-Free of LLC Queue Entry in smc_llc_srv_add_link, a 9.8 CVSS Memory Safety Bug | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-80979 | Linux Kernel SMC Networking Does Not Unregister the Connection Before Draining the RX Tasklet, Enabling a Race Condition | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80976 | Linux Kernel IPv6 Segment Routing Does Not Reset the IP6CB Control Block After Decapsulation, a 9.8 CVSS State Corruption Flaw | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-80975 | Linux Kernel QNAP MCU Multi-Function Device Driver Frees the Reply Buffer Before a Timed-Out Command Finishes Using It | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80962 | Linux Kernel dm-pcache Device Mapper Driver Does Not Validate Geometry Fields From the On-Disk Cache Info Structure | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80961 | Linux Kernel Device Mapper Pcache Does Not Validate kset key_num and Intra-Segment Bounds, Enabling Out-of-Bounds Array Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80959 | Linux Kernel dm-pcache Does Not Bound the Persisted Tail Position Offset, Enabling Out-of-Bounds Segment Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80958 | Linux Kernel dm-pcache Reads Kset Data Past the Segment Data Region Boundary When Accessing Tail Records | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-80955 | Linux Kernel dm-pcache kset_replay Accesses Freed Segment Structures and Performs Invalid Segment Operations | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80954 | Linux Kernel I3C Core Driver Dereferences a Device Descriptor Without Holding the Bus Lock in i3c_device_get_supported_xfer_mode | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80953 | Linux Kernel Analog Devices I3C Master Driver Enables Interrupts Before Initializing the Spinlock They Acquire | 8.4 High | Updated |
| 2026-10-19 | CVE-2026-80952 | Linux Kernel I3C Master Driver Leaks Information and Frees Devices While Still Referenced During Unregister | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80950 | Linux Kernel Renesas I3C Controller Driver Accesses a Transfer Descriptor Without First Checking Whether It Is Valid | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80947 | Linux Kernel RTL8xxxU Wi-Fi Driver Has a Use-After-Free in the RX URB Work Queue Path When the Interface Stops | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80943 | Linux Kernel Realtek RTL8192DU Wi-Fi Driver Does Not Validate QoS TID Before Indexing the TID Array, Enabling Out-of-Bounds Memory Access | 7.6 High | Updated |
| 2026-10-19 | CVE-2026-80936 | Linux Kernel MediaTek MT7925 Wi-Fi Driver Does Not Cancel MLO Power Management Work on Stop, Enabling a Use-After-Free | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80933 | Linux Kernel MediaTek MT7996 Wi-Fi Driver Does Not Validate the Default EEPROM Firmware Size, Enabling Out-of-Bounds Memory Reads | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80931 | Linux Kernel DS28E17 1-Wire-to-I2C Bridge Driver Does Not Reject Oversize Lengths on I2C Block Reads, Enabling a Buffer Overflow | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80929 | Linux Kernel sysctl cad_pid Entry Is Placed in the Wrong Permissions Table, Granting Unintended Write Access | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80928 | Linux Kernel Smack LSM Use-After-Free of a Task Credential in smack_file_send_sigiotask | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-80924 | Linux Kernel Kerberos 5 Crypto Implementation Frees Derived Key Buffers Without Securely Zeroing the Sensitive Key Material | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-80921 | Linux Kernel KVM s390 VSIE Passes Stale Crypto Control Bits to the Nested Guest Without Zeroing Them First | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-80914 | Linux Kernel Bluetooth ISO Driver Use-After-Free of the Listener Socket in iso_conn_ready | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-80724 | Linux Kernel PTP vmclock Driver Allows a Read-Only User Mapping to Be Subsequently Remapped With Write Permission | 8.8 High | Updated |
| 2026-10-19 | CVE-2026-70013 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-70012 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-70004 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69998 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69997 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69996 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69995 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69994 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69992 | Windows Remote Desktop Services Use-After-Free Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69991 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-19 | CVE-2026-69883 | Unauthenticated Remote Use-After-Free in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-19 | CVE-2026-69882 | Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-69880 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-16487 | Red Hat bootc Applies Unsigned Container Image Content as Host Root Filesystem When Registry Policy Falls Through to insecureAcceptAnything | 8.1 High | Updated |
| 2026-10-19 | CVE-2026-112261 | GIMP's XCF Loader in Red Hat Enterprise Linux 10 Frees a Selected Path Before the Main Process Finishes Using It When Path Load Fails, Potentially Leading to Arbitrary Code Execution, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-112260 | GIMP's XCF Text-Layer Parasite Reader in Red Hat Enterprise Linux 10 Reads Beyond the Heap Buffer on a Malformed Parasite, Leaking Adjacent Heap Data into Layer Text, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-19 | CVE-2026-112258 | GIMP's XCF Loader in Red Hat Enterprise Linux 10 Leaves a Dangling Pointer in the Linked-Channels List When a Linked Channel Is Destroyed via a Selection Property, Enabling Use-After-Free, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-19 | CVE-2026-112257 | GIMP's PSD Thumbnail Loader in Red Hat Enterprise Linux 10 Overflows the Stack on a Crafted Grayscale JPEG Thumbnail Due to a Fixed 3-Byte BGR-to-RGB Stride Without Verifying the Thumbnail's Color Mode, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-18 | CVE-2026-43284 | Linux Kernel xfrm ESP Decryption Modifies Shared Socket Buffer Fragments In Place, Creating a Write-What-Where Condition Affecting Siemens SIMATIC S7-1500 | 8.8 High | EPSS-Imminent |
| 2026-10-18 | CVE-2026-77644 | PTC Windchill Risk and Reliability Enterprise Edition Exposes Critical Functions Without Authentication, Scoring 9.3 CVSS | 9.3 Critical | Updated |
| 2026-10-18 | CVE-2026-61898 | Ubuntu accountsservice Injects User-Controlled LANGUAGE Value Unescaped Into a sed Expression, Enabling Arbitrary Shell Commands to Run With Root Privileges | 7.8 High | Updated |
| 2026-10-18 | CVE-2026-61897 | Ubuntu accountsservice Language Helper Scripts Retain Real UID as Root, Allowing Any Spawned Shell to Reset Effective UID to Root | 7.8 High | Updated |
| 2026-10-17 | CVE-2025-61624 | Today Is the CISA KEV Deadline for Fortinet Path Traversal Letting Authenticated Admins Write or Delete Arbitrary Files in FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager | 6.0 Medium | KEV |
| 2026-10-16 | CVE-2026-97816 | Unauthenticated Remote Use-After-Free in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-97815 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-97814 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-97812 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-97811 | Microsoft Windows 11 (version 23H2) Uncontrolled Resource Consumption Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97810 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-97809 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97808 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-97807 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97806 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97805 | Unauthenticated Remote Improper Input Validation in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-97804 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97800 | Microsoft Windows 11 (version 24H2) Incorrect Permission Assignment For Critical Resource Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97799 | Microsoft Windows 11 (version 24H2) Signature Verification Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97798 | Microsoft Windows 11 (version 23H2) Improper Neutralization Of Argument Delimiters In A Command ('Argument Injection') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97794 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97793 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-97792 | Microsoft Windows 11 (version 23H2) Incorrect Permission Assignment For Critical Resource Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-97788 | Windows Active Directory Observable Discrepancy Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-97787 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96953 | Microsoft Windows 11 (version 23H2) Null Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96952 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-96950 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96949 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96947 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96946 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96939 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96937 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96933 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96932 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96931 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96928 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96924 | Unauthenticated Remote Untrusted Pointer Dereference in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-96923 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96920 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96919 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96918 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96917 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-96916 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96915 | Windows Windows Kernel Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96909 | Critical Windows BitLocker Heap Buffer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-96852 | Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96847 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96844 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-16 | CVE-2026-96843 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96325 | Windows Server Message Block (SMB) Missing Reference To Active Allocated Resource Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-96324 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96323 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96322 | Windows Remote Desktop Protocol (RDP) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96319 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96318 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96317 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96313 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96312 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96310 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96309 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96308 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96307 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96306 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96305 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96304 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96302 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96301 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96254 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96253 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96250 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96249 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96245 | Windows Routing and Remote Access Service (RRAS) Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-96244 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96243 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96223 | Windows Hyper-V Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96220 | Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96219 | Unauthenticated Remote Out-Of-Bounds Write in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-96217 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96216 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96215 | Microsoft Windows 11 (version 24H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96209 | Windows NFS client Out-Of-Bounds Read Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-96186 | Microsoft Windows 11 (version 23H2) Unsafe Deserialization Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96118 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-96096 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-96071 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-93569 | Netty HTTP/1 to HTTP/2 Upgrade Process Flaw Lets Remote Unauthenticated Attackers Modify Data and Partially Access Sensitive Information (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-93568 | Netty HTTP/2 Extended CONNECT Handling Flaw Lets Remote Unauthenticated Attackers Modify Data in Transit via Specially Crafted Requests (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-93567 | Security Flaw in Netty's HTTP/2 codec Affects Single Sign-On 7 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89713 | Linux Kernel NFS Server Checks Truncate Permission Without Holding the Inode Lock, Enabling TOCTOU on Permission Changes, a 9.1 CVSS Flaw | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89711 | Linux Kernel's NFSD: flawed WARN_ON_ONCE from nfsd_mode_check, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-89707 | Linux Kernel's NFSD: release path refs on follow_down() error, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89699 | Linux Kernel's NFSD: symlink target length in NFSv4 CREATE, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89697 | Linux Kernel's NFSD: fh_want_write() for early-verified SETATTR in nfsd_proc_setattr(), Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89686 | Linux Kernel's NFSD: BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89675 | Linux Kernel NFS Server Has a Use-After-Free When Async Copy Is Canceled During Server Shutdown, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89672 | Linux Kernel's NFSD: gate nfs2 setacl by argp->mask, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89671 | Linux Kernel's NFSD: gate nfs3 setacl by argp->mask, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89665 | Linux Kernel's NFSD: out-of-range useconds in NFSv2 SETATTR/CREATE, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-89662 | Linux Kernel NFS Server Lock Owner Is Freed While Still Referenced During Client Teardown, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89656 | Linux Kernel's Libceph: buckets with mismatched CRUSH ids, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89655 | Linux Kernel's ceph: UAF in __kick_flushing_caps() on cf entry freed during unlock, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89653 | Linux Kernel's ceph: export_targets ranks >= CEPH_MAX_MDS in mdsmap decode, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89652 | Linux Kernel Ceph Filesystem NFS Export get_name Does Not Bound the Copied Dentry Name Length, a 9.8 CVSS Out-of-Bounds Write | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89650 | Linux Kernel's ceph: num_export_targets array for mds info v2/v3, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89649 | Linux Kernel's ceph: xattr value length in __build_xattrs(), Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89648 | Linux Kernel's ceph: cap delegated inode count in ceph_parse_deleg_inos(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89647 | Linux Kernel's ceph: repeat ceph_trim_dentries() if no progress possible, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89643 | Linux Kernel's audit: dropping live tree ref on fsnotify rule autoremove, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89640 | Linux Kernel's Cifs: loff_t underflow in cifs_remap_file_range() when len == 0, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-89636 | Linux Kernel's Smb/Client Has an use-after-free in ce->tgthint in free_tgts(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89632 | Linux Kernel's Smb/Client: use-before-check of ReparseDataLength in reparse_buf_ptr(), Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-89631 | Linux Kernel's Smb/Client: a tree connect response whose byte count is too small, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89626 | Linux Kernel's HID/Sensor/Custom: field sysfs group cleanup on failure, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-89586 | Linux Kernel's ATA/Libata-scsi: DSM TRIM for sector sizes larger than 2048 bytes, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-89580 | Linux Kernel's BPF: Disable preemption in __bpf_get_stack, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89574 | Linux Kernel's Dm array: array block headers on read, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89573 | Linux Kernel's Dm array: an array block whose value size is not the caller's, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89569 | Linux Kernel's Bluetooth: RFCOMM: serialize security confirmation handling, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-89563 | Linux Kernel's Ip6_tunnel: skb_cow_head() in ip6_tnl_xmit(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89559 | Linux Kernel's Libnvdimm/labels: integer overflow in __nd_label_validate(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89557 | Linux Kernel's MD RAID: do overflow check for sb->bblog_shift in super_1_load(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89555 | Linux Kernel's Mpls: reload header after pskb_may_pull(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89554 | Linux Kernel's Mptcp: uninitialized local_id in syncookie MP_JOIN reconstruction, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-89553 | Linux Kernel Nouveau DRM Driver Does Not Reserve the Buffer Object During VMA Lookup in the Info ioctl, Enabling a Race Condition | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89551 | Linux Kernel's SUNRPC/Xdr_buf_trim: clamp buf->len to avoid underflow, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89550 | Linux Kernel's SUNRPC/Svcauth_gss: enforce krb5 token minimum length, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89549 | Linux Kernel's Sunrpc: route to a populated pool in svc_pool_for_cpu(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89548 | Linux Kernel Sun RPC Cache Module Does Not Always Drain the Cache Cleaner Before Destroying a Cache Detail, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89542 | Linux Kernel's SUNRPC: harden gss_krb5_unwrap_v2 against short tokens, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89541 | Linux Kernel's SUNRPC: harden gss_unwrap_resp_priv length checks, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89540 | Linux Kernel's Sunrpc: init gssp_lock before publishing proc entry, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89538 | Linux Kernel's SUNRPC: krb5 v2 wrap tokens with oversized ec field, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89533 | Linux Kernel's svcrdma Has an integer underflow in offset arithmetic in read_chunk_range, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89532 | Linux Kernel's svcrdma: pcl_for_each_segment for empty chunks, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-89530 | Linux Kernel's svcrdma: inline replies that overflow the pull-up buffer, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89528 | Linux Kernel's svcrdma Has a null pointer dereference in Read lists that exceed the page budget, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89526 | Linux Kernel's svcrdma: Read chunk positions before reconstruction, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89511 | Linux Kernel's Qede: NULL pointer dereference in TPA fragment processing, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89510 | Linux Kernel's RDMA/cxgb4: Cancel reg_work before freeing device on remove, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89488 | Linux Kernel Open vSwitch Connection Tracking Limit Teardown Has a Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89487 | Linux Kernel Open vSwitch Calls skb_tx_error on Packets It Will Not Drop, Corrupting the sk_buff Error State | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-89483 | Linux Kernel's NVME: zero the discard fallback page, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89482 | Linux Kernel's NVMe-TCP: accept C2HData based on blk_rq_payload_bytes() alone, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89481 | Linux Kernel's NVMe-TCP: host memory disclosure on R2T for a read command, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89480 | Linux Kernel NVMe-TCP Host Driver Accepts Read Completions That Transferred Fewer Bytes Than Requested | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89479 | Linux Kernel's SCTP: processing a packet once its association is deleted, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89478 | Linux Kernel's SCTP: a chunk if its transport was removed, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-89477 | Linux Kernel's SCTP Has a null pointer dereference in NULL deref on untransmitted RECONF completion, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89476 | Linux Kernel's SCTP: stream->outcnt underflow on duplicate RECONF responses, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89448 | Linux Kernel's Iommu/vt-d: Force requesting ACS when tboot is enabled, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-89059 | RESTEasy IIOImageProvider Allocates Heap Based on Unvalidated Image Dimensions, Enabling Remote Denial of Service | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-89058 | RESTEasy CorsFilter Allows Wildcard Origin with credentials: true, Enabling CORS-Based Session Hijacking Across Origins | 7.4 High | Updated |
| 2026-10-16 | CVE-2026-88194 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88191 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88189 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88188 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88182 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88116 | Windows Windows DNS Server Untrusted Pointer Dereference Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-88114 | Windows Windows DNS Server Untrusted Pointer Dereference Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-88112 | Windows Windows DNS Server Untrusted Pointer Dereference Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-88105 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88103 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-88101 | Microsoft Windows 11 (version 23H2) Weak Authentication Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88100 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88098 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-88096 | Windows DCOM Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-88093 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88091 | Microsoft Windows 11 (version 23H2) Unsafe Deserialization Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88080 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88079 | Microsoft Windows 11 (version 24H2) Null Pointer Dereference Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-88076 | Microsoft Windows 11 (version 23H2) Null Pointer Dereference Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-88074 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88073 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-88072 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88071 | Windows Hyper-V Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-88070 | Windows BitLocker Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-87716 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-87715 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-87713 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-87712 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-87711 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-87710 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85926 | Windows SSTP VPN Use-After-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-85920 | Windows BitLocker Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85918 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85915 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85914 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85904 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85903 | Windows Windows DNS Server Untrusted Pointer Dereference Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-85902 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85901 | Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85837 | Windows Windows Kernel Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85836 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85826 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85825 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85824 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85823 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85822 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85820 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85818 | Critical Windows SChannel TLS Signature Verification Bypass Scores 9.0 CVSS | 9.0 Critical | Updated |
| 2026-10-16 | CVE-2026-85817 | Windows PowerShell Reliance On Untrusted Inputs In A Security Decision Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-85814 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-85811 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-85810 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85809 | Unauthenticated Network Attacker Can Leverage Windows Routing and Remote Access Service (RRAS) Heap Buffer Overflow for Remote Code Execution (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-85808 | Windows Routing and Remote Access Service (RRAS) Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-85807 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85806 | Unauthenticated Remote Stack Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-85804 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85803 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85802 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85800 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85799 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-85798 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.2 CVSS | 7.2 High | Updated |
| 2026-10-16 | CVE-2026-85796 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85795 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85792 | Unauthenticated Network Attacker Can Leverage Windows Routing and Remote Access Service (RRAS) Use-After-Free for Remote Code Execution (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-85791 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85377 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85376 | Windows Print Spooler Weak Authentication Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85375 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85373 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85372 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85371 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-85365 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85338 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85334 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-85332 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85329 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85328 | Microsoft Windows 11 (version 23H2) Weak Authentication Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-85327 | Windows Print Spooler Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-85322 | Windows Routing and Remote Access Service (RRAS) Use Of Uninitialized Resource Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-83889 | Windows Windows DNS Server Release Of Invalid Pointer Or Reference Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-83869 | Critical Windows Windows DNS Server Integer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-83642 | Windows Windows DNS Server Type Confusion Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-81002 | Linux Kernel's Xdp: zero-copy frame layout, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-81001 | Linux Kernel's Slip: use-after-free in sl_sync(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-81000 | Linux Kernel's net/Tun: receive headroom, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80994 | Linux Kernel's net/Openvswitch: flow mask use-after-free on flow deletion, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80989 | Linux Kernel's net/Thunderbolt: Mark the connection down when bringing it up fails, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80987 | Linux Kernel's NTB/Ntb_transport: oversized TX buffers, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80982 | Linux Kernel's Net/smc: use-after-free in smc_rx_pipe_buf_release(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80978 | Linux Kernel's net: cap advertised IP tunnel headroom, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80977 | Linux Kernel Socket Buffer skb_tx_error Modifies Shared Zerocopy State in Socket Buffers It Does Not Own | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80971 | Linux Kernel BCD2000 MIDI USB Audio Driver Does Not Clear URB Pointers on Disconnect, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80967 | Linux Kernel Digigram PCXHR Audio Driver Requests a Threaded IRQ Before Initializing the Mutexes It Acquires | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80944 | Linux Kernel's WiFi/Mwifiex: Detach sync cmd buffer on interrupted wait, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80932 | Linux Kernel's Vsock/virtio: flush works in dependency order, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80754 | Linux Kernel's input: synaptics-rmi4 - fix F55 transmitter electrode count typo, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80737 | Linux Kernel's serial/Amba-pl011: synchronize DMA teardown, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80731 | Linux Kernel's net: CAP_SYS_RAWIO zero-padding in dev_validate_header, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80725 | Linux Kernel's net/Gro: properly validate BIG TCP aggregation criteria, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80723 | Linux Kernel's Of/Reserved_mem: OOB when too many dynamic regions are defined, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80722 | Linux Kernel's WiFi/Mac80211: individual TWT params before driver setup, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80721 | Linux Kernel's Bluetooth: ISO: ensure no dangling hcon references in iso_conn, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80717 | Linux Kernel's SCTP: Adaptation Indication parameter length, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80716 | Linux Kernel ALSA PCM Subsystem Does Not Wake Linked Drain Waiters When Unlinking PCM Streams, Causing Deadlock | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80714 | Linux Kernel's Ipvs: propagate one-packet flag to synced conns, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80710 | Linux Kernel's S390/dasd: undersized format-check buffer, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80709 | Linux Kernel's S390/zcrypt: wrong domain value verification with EP11 CPRBs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80707 | Linux Kernel's Can/J1939/Transport/J1939_session_fresh_new(): receive buffer, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80706 | Linux Kernel Softing CAN Interface Driver Does Not Validate Firmware Record Spans During Parsing, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80702 | Linux Kernel's Drm/vmwgfx: guest_memory_dirty bitfield clobbered as size, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80700 | Linux Kernel's Drm/vmwgfx Has a buffer overflow in external BO copy bounds for both stride paths, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80691 | Linux Kernel's SCSI/Target/Iblock: wrong PR ops NULL check for PREEMPT/RELEASE, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80684 | Linux Kernel's KVM/S390/PCI Has a null pointer dereference in NULL dereference on AIBV allocation failure, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-80683 | Linux Kernel Bluetooth SCO Socket Does Not Hold Its Own sco_conn Reference, Enabling Use-After-Free | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80681 | Linux Kernel VXLAN Driver Uses a Stale Ethernet Header Pointer After route_shortcircuit Reallocates the sk_buff, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80678 | Linux Kernel's I2C/Imx: slave registration race and error handling, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80677 | Linux Kernel Driver Core dev_has_sync_state Reads dev->driver Without READ_ONCE, Enabling a Data Race With Concurrent Driver Unbind | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80668 | Linux Kernel's netfilter/Nf_conntrack_expect: conntrack GC to reap expectations, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80664 | Linux Kernel's netfilter/Xt_nat Has a null pointer dereference in unsupported target families, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-80663 | Linux Kernel's Tools/power/x86/intel-speed-select Has an improper locking in Harden daemon pidfile open, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-80653 | Linux Kernel HiSilicon SAS v3 Controller Driver Lacks a slave_destroy Interface, Enabling Resource Leaks on SCSI Device Removal | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80646 | Linux Kernel IPv6 Device Statistics Function Dereferences a Null Pointer in __in6_dev_stats_get | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80637 | Linux Kernel's netfilter/Synproxy: unaligned memory access in timestamp adjustment, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80630 | Linux Kernel's Net/sched/Sch_fq_codel: call qdisc_tree_reduce_backlog during peek before restoring qlen, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80628 | Linux Kernel's ALSA/Seq/Oss Has a race condition in readq reset state with q->lock, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80622 | Linux Kernel Telecom Clock Character Driver Use-After-Free in tlclk_cleanup During Driver Removal | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80615 | Linux Kernel's net/Dst_metadata: false-positive memcpy overflow in tun_dst_unclone, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-80613 | Linux Kernel Virtual Ethernet Driver Leaks NAPI Structures When XDP Enable Fails | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80609 | Linux Kernel's Qede: out-of-bounds check for cqe->len_list[], Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80606 | Linux Kernel Intel Xe GPU Driver Userptr Inject Test Path Does Not Hold the Notifier Lock for Write, Enabling a Data Race | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80604 | Linux Kernel's HID/Core: OOB read in hid_get_report for numbered reports, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80603 | Linux Kernel's netfilter/Nf_conntrack_irc: parse_dcc() off-by-one OOB read, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-80601 | Linux Kernel B.A.T.M.A.N. Advanced Gateway Module Reads the Ethernet Header Before Reallocating the skb, Causing Use-After-Free | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80599 | Linux Kernel B.A.T.M.A.N. Advanced Distributed ARP Table Module Accesses the Ethernet Header Protocol Field Without Ensuring Sufficient Headroom | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-80598 | Linux Kernel's NTFS3 Has an out-of-bounds read in out-of-bounds read in decompress_lznt, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80593 | Linux Kernel's hwmon: (asus_atk0110) Check package count before accessing element, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80590 | Linux Kernel's Inet/Frags: strip GSO state from fragments before reassembly, Scoring 8.6 | 8.6 High | Updated |
| 2026-10-16 | CVE-2026-80589 | Linux Kernel Block Layer Does Not Stop the Request Timeout Timer When Releasing a Disk That Was Never Added, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80588 | Linux Kernel's Mptcp: reclaim forward-allocated memory on RX path errors, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80587 | Linux Kernel's Mptcp: combining some incoming suboptions, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80586 | Linux Kernel's Mptcp/Options: reset DSS fields in case of unexpected size, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80585 | Linux Kernel's Mptcp/Fastopen: only mark MPTFO subflows with SYN data, Scoring 9.4 | 9.4 Critical | Updated |
| 2026-10-16 | CVE-2026-80584 | Linux Kernel's S390/qeth: user buffer length in SNMP and ARP query ioctls, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80580 | Linux Kernel Framebuffer Device mode sysfs Output Is Not Bounded to the sysfs Buffer Size, Enabling Out-of-Bounds Writes | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80579 | Linux Kernel's fbdev: fb_info->mode before deleting a videomode, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80578 | Linux Kernel's fbdev/Core: pointer desynchronization in fb_io_read(), Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-80576 | Linux Kernel's Drm/amdgpu: oversized IBs with per-ring packet limits, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80574 | Linux Kernel's input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80572 | Linux Kernel BYD PS/2 Mouse Driver Frees Private Data Without Synchronizing Pending Timer Deletion, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80561 | Linux Kernel's Libceph Has an out-of-bounds read in multiple unsafe decodes in decode_locker(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80558 | Linux Kernel's Libceph: using invalid osd indices from primary_temp, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80557 | Linux Kernel libceph decode_watchers Reads Out of Bounds Due to a Missing Bounds Check, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80554 | Linux Kernel's S390/vfio_ccw: the number of channel program segments, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-80553 | Linux Kernel's S390/vfio_ccw: Cancel existing workqueues, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80552 | Linux Kernel's S390/vfio_ccw: index for read/write regions are within range, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80551 | Linux Kernel's S390/vfio_ccw: first IDAW remains constant, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-80550 | Linux Kernel's S390/vfio_ccw: out of bounds check on CCW array, Scoring 7.9 | 7.9 High | Updated |
| 2026-10-16 | CVE-2026-80549 | Linux Kernel's S390/vfio_ccw Has an improper locking in cp cleanup out of not operational, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-80548 | Linux Kernel s390 VFIO CCW Driver Has Missing Locking in the I/O Path, Enabling Race Conditions | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80547 | Linux Kernel's S390/vfio_ccw: Implement a crw lock, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-80541 | Linux Kernel's Drm/amdgpu: GEM_CREATE domain combinations, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80540 | Linux Kernel's Drm/amdgpu Has a buffer overflow in UVD decode image min size calculation, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-80536 | Linux Kernel XFS Filesystem Does Not Bounds-Check the Buffer Log Item's Dirty Bitmap, Enabling Out-of-Bounds Access | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-80530 | Linux Kernel XFS Filesystem Incorrectly Clears the Reflink Flag During Exchange-Range Operations With INO1_WRITTEN | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-80528 | Linux Kernel's ceph: fs reclaim while using current->journal_info, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-80527 | Linux Kernel's ceph: hanging __ceph_get_caps() with stale mds_wanted, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-80522 | Linux Kernel NVIDIA Tegra Crypto Driver Miscalculates the Crypto Length in tegra_gcm_do_one_req, Causing Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74753 | Linux Kernel's perf: exited events as group leaders, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74752 | Linux Kernel's SCTP Has an out-of-bounds read in cookie AUTH state before use, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74748 | Linux Kernel's netfilter/Ipset: refcount race between list: set GC and swap, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74746 | Linux Kernel's netfilter/Flowtable Has an use-after-free in publish GC-visible tuple last, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74744 | Linux Kernel's Ipvlan: inherit needed_headroom and needed_tailroom from phy_dev, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74739 | Linux Kernel's Net/sched/Cls_u32 Has an out-of-bounds read in hash tables in u32_bind_class(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74736 | Linux Kernel's Net/sched/Cls_bpf: dev-bound programs bound to a different device, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74632 | Linux Kernel's Mm/huge_memory: huge_zero_pfn race, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74579 | Linux Kernel Netfilter nft_payload Builds an Incorrect Mask for Partial Field Hardware Offload Operations | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74578 | Linux Kernel's crypto: algif_skcipher - force synchronous processing on trees without ctx->state, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74576 | Linux Kernel's Mm/slab: unbounded recursion in free path with new kmalloc type, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74575 | Linux Kernel's Thunderbolt: XDomain delayed work use-after-free on disconnect, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74574 | Linux Kernel's Dmaengine/Idxd: fdev setup failure cleanup in idxd_cdev_open(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74573 | Linux Kernel's Iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-74572 | Linux Kernel's btrfs/Zoned Has an improper locking in deadlock between metadata writeback and transaction commit, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74569 | Linux Kernel's netfilter/Nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74567 | Linux Kernel's Keys Has an out-of-bounds read in out-of-bounds read in keyring_get_key_chunk(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74565 | Linux Kernel Netfilter nf_tables nft_object Hash Table Is Shared Across Tables Instead of Being Per-Table, Enabling Object Name Collisions | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74564 | Linux Kernel's netfilter/Xt_hashlimit: hashtable supports XT_HASHLIMIT_RATE_MATCH, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74563 | Linux Kernel's Rds/TCP: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74557 | Linux Kernel's SCSI/Libiscsi: stale-data leak into the SCSI sense buffer, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74556 | Linux Kernel's SCSI/Libiscsi_tcp: SCSI Response data segment to the connection buffer, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74554 | Linux Kernel's WiFi/Ath12k: out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74550 | Linux Kernel's net: send ICMP/NDISC Redirects when peer allocation fails, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74548 | Linux Kernel's Forcedeth: UAF of txrx_stats in nv_remove, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74541 | Linux Kernel's Bluetooth Has an use-after-free in ISO: clear iso_data always when detaching conn from hcon, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74540 | Linux Kernel's Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74539 | Linux Kernel's Bluetooth: ISO: lock sk in iso_sock_getname, Scoring 8.0 | 8.0 High | Updated |
| 2026-10-16 | CVE-2026-74538 | Linux Kernel's Bluetooth Has an improper locking in ISO: lock sk in iso_connect_ind, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74537 | Linux Kernel's Bluetooth Has an use-after-free in ISO: hold sk properly in iso_conn_ready, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74535 | Linux Kernel's Bluetooth Has an use-after-free in ISO: avoid deadlocks in iso_sock_timeout, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74534 | Linux Kernel's Bluetooth Has an use-after-free in ISO: fix refcounting of iso_conn, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74533 | Linux Kernel's Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74531 | Linux Kernel Bluetooth HCI abort_conn_sync Does Not Hold a Connection Reference, Enabling Use-After-Free | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74523 | Linux Kernel's Qede: sync udp_tunnel ports outside qede_lock in the recovery path, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74520 | Linux Kernel's Iommu/iommufd: IOPF group ownership UAF, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74519 | Linux Kernel's Pinctrl/Devicetree: free uninitialized dev_name on error path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74518 | Linux Kernel's Mm/hugetlb: list corruption in allocate_file_region_entries(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74517 | Linux Kernel's KVM/X86 Has an use-after-free in Cancel delayed I/O APIC EOI handling before destroying vCPUs, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-74516 | Linux Kernel KVM SVM Does Not Update x2APIC MSR Intercepts When AVIC Is Inhibited While an L2 Guest Is Active | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-74515 | Linux Kernel's KVM/S390/PCI: adapter interrupt forwarding if already enabled, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74512 | Linux Kernel's audit: potential use-after-free in audit_del_rule(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74510 | Linux Kernel's Bluetooth/Mgmt: UAF in pair command cancellation, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74509 | Linux Kernel's Bluetooth/Hci_sync: advertising data UAFs, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74508 | Linux Kernel's Bluetooth: HIDP: reject frames without a transaction header, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74507 | Linux Kernel's Bluetooth: HIDP: validate numbered report payloads, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74506 | Linux Kernel's Afs: UAF when sending a message, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74503 | Linux Kernel ALSA Timer Does Not Clear SNDRV_TIMER_IFLG_DEAD After Close Completes, Causing Incorrect Timer State | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74497 | Linux Kernel's ALSA/Usb-audio: Clamp frame size in implicit-feedback mode, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-74495 | Linux Kernel Intel igbvf Virtual Function Ethernet Driver Leaks Resources in TX DMA Error Cleanup, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74493 | Linux Kernel's Net/smc: socket use-after-free during link group termination, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74492 | Linux Kernel Netfilter ipset Allows Kernel-Side Hash Additions to Overwrite Existing User-Visible Comments | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-74490 | Linux Kernel's TIPC: use-after-free in poll trace queue dumps, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74489 | Linux Kernel's WiFi/Mac80211: tid_tx use-after-free on BA session stop, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74488 | Linux Kernel Marvell mwifiex WiFi Driver Uses the Wrong Length When Parsing A-MSDU TDLS Subframes, Enabling Out-of-Bounds Access | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74485 | Linux Kernel's Binfmt_misc: a flag character as the field delimiter, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74482 | Linux Kernel's Mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74481 | Linux Kernel's Mm/page_reporting: system_freezable_wq to fix UAF during suspend, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74480 | Linux Kernel's net/Bridge: fast-leave after deleting a port group, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74479 | Linux Kernel's net/Pktgen: proc entry use-after-free, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74476 | Linux Kernel's Veth: frag_list skbs before running XDP, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-74475 | Linux Kernel VXLAN Driver Reads Neighbor Hardware Addresses Without Locking in route_shortcircuit, a CVSS 10.0 Data Race | 10.0 Critical | Updated |
| 2026-10-16 | CVE-2026-74474 | Linux Kernel's VXLAN: pskb_network_may_pull() for transmit path header pulls, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74473 | Linux Kernel's VXLAN: pskb_network_may_pull() in route_shortcircuit(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74471 | Linux Kernel Kernel Tracing Does Not Check the __register_event Return Value in trace_module_add_events, Silently Losing Events | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74470 | Linux Kernel's SCSI/Scsi_debug: REPORT ZONES alloc_len underflow OOB write, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74469 | Linux Kernel's SCTP: peer transport count overflow, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74467 | Linux Kernel's S390/qeth: CAP_NET_ADMIN for private ioctls, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74465 | Linux Kernel's net/Openvswitch: potential UAF on meter attach failure, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74461 | Linux Kernel's I2C/Imx Has an use-after-free in Cancel hrtimer before clearing slave pointer, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-74456 | Linux Kernel's Can/Peak_usb/Peak_usb_start() Has a double free in double free of transfer buffer on URB submit error, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74453 | Linux Kernel's Drm/vc4: Zero the tile state data array before each BIN job, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74450 | Linux Kernel's Drm/amd/pm: pptable use-after-free, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74447 | Linux Kernel's Drm/amdkfd: uint32_t overflow in EOP ring buffer size alignment, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74446 | Linux Kernel's Drm/amdkfd: hold event_mutex while checkpointing CRIU events, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74444 | Linux Kernel VMware Virtual GPU Driver Does Not Validate DRAW_PRIMITIVES Header Size Before Division, Causing Division by Zero | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74443 | Linux Kernel's Drm/vmwgfx Has a race condition in DMA command body size against suffix pointer, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74440 | Linux Kernel's Drm/xe: Wait on external BO kernel fences in exec IOCTL, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74439 | Linux Kernel's Iommu/vt-d: Present bit before tearing down scalable-mode context entry, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-74436 | Linux Kernel's Rxrpc: kernel accept preallocation with socket teardown, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74427 | Linux Kernel's Afs: netns teardown to cancel the preallocation charger, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74417 | Linux Kernel's Drm/radeon: integer overflow in radeon_align_pitch(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74413 | Linux Kernel's WiFi/Rtw89: wrong pci_get_drvdata type in AER handlers, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74412 | Linux Kernel's WiFi/Rtw88: wrong pci_get_drvdata type in AER handlers, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74411 | Linux Kernel Realtek rtw89 WiFi Driver Uses an Incorrect Data Type for Scan Index, Causing an Infinite Loop | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74410 | Linux Kernel's WiFi/Rtw88: OOB read from firmware RX descriptor exceeding DMA buffer, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-74409 | Linux Kernel's WiFi/Rtw89: bounds check on firmware mac_id in link lookup, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74408 | Linux Kernel's WiFi/Ath9k: OOB access from firmware tx status queue ID, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74406 | Linux Kernel VXLAN Driver Has a Potential Null Pointer Dereference in vxlan_gro_prepare_receive, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74405 | Linux Kernel's OPP: race between OPP addition and lookup, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74404 | Linux Kernel's crypto Has a buffer overflow in ccp - Fix snp_filter_reserved_mem_regions() off-by-one, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74401 | Linux Kernel's Dlm: add msg handle in send_queue ordered, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74398 | Linux Kernel's Ipv6/Addrconf: bail out of dad_failure when state is no longer POSTDAD, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74397 | Linux Kernel's IB/mlx5: transport-domain rollback and initialize lb mutex earlier, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74396 | Linux Kernel Mellanox mlx5 RDMA Driver Leaks UMR XLT Resources When ODP Page Table Population Fails | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74394 | Linux Kernel SCSI RDMA Protocol Target Has an Integer Overflow in the Immediate Data Length Check, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74390 | Linux Kernel's RDMA/irdma Has an out-of-bounds write in out-of-bounds write in irdma_copy_user_pgaddrs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74388 | Linux Kernel's ALSA/Seq/Oss: UAF at handling events with embedded SysEx data, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74387 | Linux Kernel's ALSA/Seq/Midi: output teardown with event_input, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74385 | Linux Kernel's Nvmet-tcp: return value of nvmet_tcp_set_queue_sock, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74384 | Linux Kernel's Nvme-multipath: flex array size in struct nvme_ns_head, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74380 | Linux Kernel's GPU/Host1x: iommu_map_sgtable() return value check, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74378 | Linux Kernel's RDMA/rxe: TOCTOU heap overflow in get_srq_wqe, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74377 | Linux Kernel's RDMA/rxe Has an out-of-bounds read in Copy WQE to local buffer in non-SRQ receive path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74376 | Linux Kernel's Md/raid10: reset read_slot when reusing r10bio for discard, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74365 | Linux Kernel's Nvdimm/btt Has an improper locking in preemption in BTT lane acquisition, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-74363 | Linux Kernel's BPF: UAF by restoring RCU-delayed inode freeing in bpffs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74361 | Linux Kernel NVMe Driver FDP fdpcidx Bounds Check Is Incorrect, a 9.8 CVSS Out-of-Bounds Memory Access | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74359 | Linux Kernel's Configfs_lookup(): leave ->s_dentry dangling on failure, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74356 | Linux Kernel's Vhost: vhost_get_avail_idx for a non empty ring, Scoring 7.4 | 7.4 High | Updated |
| 2026-10-16 | CVE-2026-74355 | Linux Kernel's Iommu/vt-d: RB-tree corruption in probe error path, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-74354 | Linux Kernel's BPF: Take mmap_lock in zap_pages(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74349 | Linux Kernel's Ocfs2: FITRIM ranges shorter than a cluster, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74345 | Linux Kernel's RDMA/siw Has an use-after-free in endpoint/socket association handling, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74344 | Linux Kernel BPF Red-Black Tree Does Not Clear Node Linkage When Freeing the Root, Leaving Dangling Pointers | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74340 | Linux Kernel's WiFi/Wcn36xx: OOB read from firmware count in PRINT_REG_INFO indication, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-74334 | Linux Kernel RDMA Netlink Device Interface Accesses mr->pd Without Holding the Required Lock, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74333 | Linux Kernel's ASoC/Amd/Acp-sdw-legacy: DAI link iteration, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-74332 | Linux Kernel's ASoC/Amd/Acp-sdw-sof: DAI link iteration, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-74330 | Linux Kernel's configfs: lockless traversals of ->s_children, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74325 | Linux Kernel's WiFi/Mt76: kfree_rcu for offchannel link in mt76_put_vif_phy_link, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74323 | Linux Kernel's WiFi/Mt76/Mt7996: possible token leak in mt7996_tx_prepare_skb(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74321 | Linux Kernel's btrfs: invalid pointer dereference in __btrfs_run_delayed_refs(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74316 | Linux Kernel NFS Server Does Not Handle Layout Stateids in nfsd4_drop_revoked_stid, Causing Null Pointer Dereference | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74314 | Linux Kernel BPF Map Value Recycling Does Not Cancel Special Fields, Leaving Dangling Kptr References | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74313 | Linux Kernel's Vduse Has an use-after-free in hold vduse_lock across IDR lookup in open path, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74312 | Linux Kernel's Vhost/vdpa: virtqueue index in mmap and fault paths, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74310 | Linux Kernel's Vhost/net: zerocopy ubufs only once, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-74305 | Linux Kernel's BPF: Tighten cgroup storage cookie checks for prog arrays, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74302 | Linux Kernel's Bluetooth/Hci_core: UAF in hci_unregister_dev(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74300 | Linux Kernel's Bluetooth/Bluetooth/HCI: codec capability element length, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-74297 | Linux Kernel's RDMA/mlx5: undefined shift of user RQ WQE size, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74296 | Linux Kernel's RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74295 | Linux Kernel's ASoC/Codecs/Hdac_hdmi: written enum value, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74293 | Linux Kernel's ASoC/Fsl/Fsl_audmix: written enum values, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74292 | Linux Kernel's ASoC/Tegra/Tegra210_ahub: written enum value, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-74288 | Linux Kernel's net/Fib_rules: dump dying fib_rule in fib_rules_dump(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74287 | Linux Kernel's SCTP: embedded address parameter length, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-74283 | Linux Kernel TIPCv2 Netlink Configuration Operations Do Not Require NET_ADMIN Capability, Enabling Unauthorized Network Modification | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74282 | Linux Kernel TIPC Transport Does Not Prevent snt_unacked Counter Underflow on CONN_ACK, Causing Incorrect Flow Control | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74281 | Linux Kernel's TIPC: inverted service ranges from peer bindings, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-74279 | Linux Kernel's crypto: cavium/cpt - fix DMA cleanup using wrong loop index, Scoring 10.0 | 10.0 Critical | Updated |
| 2026-10-16 | CVE-2026-74270 | Linux Kernel Kernel TLS Handshake Subsystem Allows Unprivileged Users to Issue the DONE Command | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74268 | Linux Kernel's TCP: sock_ops cb flags before force-closing a child socket, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74267 | Linux Kernel's Net/sched/Sch_codel: call qdisc_tree_reduce_backlog during peek before restoring qlen, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-74264 | Linux Kernel's net/Watchdog: refcount tracking races, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74262 | Linux Kernel's KCM: WRITE_ONCE() when changing lower socket callbacks, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74257 | Linux Kernel's Sockmap: use-after-free in udp_bpf_recvmsg(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-74256 | Linux Kernel's Bpf, sockmap: integer overflow in bpf_msg_pop_data() bounds check, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-74255 | Linux Kernel's TIPC: UAF in tipc_l2_send_msg(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72502 | Linux Kernel's TCP/Ipv6 Has a null pointer dereference in clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72500 | Linux Kernel's RDMA/bnxt_re: Free SRQ toggle page after firmware teardown, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72495 | Linux Kernel's RDMA/bnxt_re: repeated requests to allocate WC pages, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-72491 | Linux Kernel's Net/9p: race condition on rdma->state in trans_rdma.c, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72488 | Linux Kernel's SoundWire: bug in sdw_add_element_group_count found by syzkaller, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72487 | Linux Kernel's PCI: ROM header and data structure addr before accessing, Scoring 7.7 | 7.7 High | Updated |
| 2026-10-16 | CVE-2026-72478 | Linux Kernel NTFS3 Filesystem run_get_highest_vcn Does Not Validate the Run List Bounds, Enabling Out-of-Bounds Access | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72476 | Linux Kernel's Dmaengine: possible use after free, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72473 | Linux Kernel's Xprtrdma: Decouple req recycling from RPC completion, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72472 | Linux Kernel's NFS Has an use-after-free in nfsi->rwsem to protect traversal of the file lock list, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72469 | Linux Kernel's Xprtrdma: ep kref imbalance on ADDR_CHANGE, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72466 | Linux Kernel NFS RDMA Transport Leaks Backchannel Reply Resources and Has an Unbounded Peek Operation, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72464 | Linux Kernel NFS RDMA Transport Does Not Repost Receive Buffers After Malformed Replies, Exhausting Receive Resources | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72452 | Linux Kernel's Drm/i915: CRTC color blob pointers after dropping refs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72450 | Linux Kernel's XFRM Has a buffer overflow in selector family and prefixlen during match, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72449 | Linux Kernel's Drm/amdkfd Has an use-after-free in list_del corruption in kfd_criu_resume_svm, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72444 | Linux Kernel's Flow_dissector: device type before reading ETH_ADDRS, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72436 | Linux Kernel's netfilter/Ipset: use test_bit() in lockless RCU readers in hash types, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72435 | Linux Kernel's netfilter/Ipset: order of kfree_rcu() and rcu_assign_pointer(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72434 | Linux Kernel's netfilter/Ipset: make sure gc is properly stopped, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72427 | Linux Kernel's BPF: effective prog array index with BPF_F_PREORDER, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72425 | Linux Kernel's Ice: FDIR CTRL VSI resource leak in ice_reset_all_vfs(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72421 | Linux Kernel's Ipv4/Fib: ignore error route in local/main tables, Scoring 10.0 | 10.0 Critical | Updated |
| 2026-10-16 | CVE-2026-72420 | Linux Kernel MD RAID5 R5_Overlap Flag Races When Breaking Stripe Batches, Enabling Data Corruption | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72419 | Linux Kernel's netfilter/Nf_nat: invalid nat_net pointer use on failed nf_nat_init(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72418 | Linux Kernel Netfilter Connection Count Limit Drops Packets for Already-Confirmed Connections on the Early Confirmation Path | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72416 | Linux Kernel's netfilter/Nft_compat: ebtables emulation must reject non-bridge targets, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-72415 | Linux Kernel's ASoC: SDCA: Validate written enum value in ge_put_enum_double(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72409 | Linux Kernel's net/Mvneta: re-enable percpu interrupt on resume, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72406 | Linux Kernel's net/Sungem: probe error cleanup, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72405 | Linux Kernel's net/Udp_tunnel Has an use-after-free in double queueing in udp_tunnel_nic_device_sync, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72400 | Linux Kernel's Seg6: SRH length before reading fixed fields, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72398 | Linux Kernel's SCTP: INIT verification after cookie unpacking, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72397 | Linux Kernel's hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72390 | Linux Kernel's Net/sched/Sch_teql: Introduce slaves_lock to avoid race condition and UAF, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72389 | Linux Kernel's Bridge/Stp: a potential use-after-free when deleting a bridge, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72383 | Linux Kernel SCTP Transport Address Work Queue Timer Races With sctp_free_addr_wq, Causing Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72375 | Linux Kernel AFS Filesystem Reinitializes an Active Inode's lock_work During a Cell Reachability Check, Causing Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72374 | Linux Kernel's Afs: callback service message parsers to pass through -EAGAIN, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72373 | Linux Kernel AFS Filesystem afs_break_some_callbacks Dereferences a Null Pointer When the Callback Server Is Absent | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72371 | Linux Kernel AFS Filesystem Sets the AFS_VOLUME_RM_TREE Flag on the Wrong Volume Object, Causing Incorrect Removal State | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72360 | Linux Kernel's Drm/xe/pf: attempt to process FAST_REQ or EVENT relays, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72352 | Linux Kernel's HID/BPF: hid_bpf_get_data() range check, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72351 | Linux Kernel's GUE: REMCSUM private option length, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72350 | Linux Kernel's netfilter/Xt_u32: invalid shift counts, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72348 | Linux Kernel ip6tables Does Not Hot-Drop Packets With Malformed IPv6 Extension Headers, Allowing Rule Bypass, a 9.1 CVSS Flaw | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-72347 | Linux Kernel's netfilter/Xt_connmark: invalid shift parameters, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-72343 | Linux Kernel's Net/mlx5e: HV VHCA stats zero-sized buffer allocation, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72342 | Linux Kernel's Net/mlx5e: HV VHCA stats agent registration race, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72339 | Linux Kernel's Qede: off-by-one in BD ring consumption on build_skb failure, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72338 | Linux Kernel's Net/sched/Act_pedit: TOCTOU heap OOB write in tc offload, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72335 | Linux Kernel's Bluetooth: MGMT: Fix adv monitor add failure cleanup, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72330 | Linux Kernel's Net/tls: Consume empty data records in tls_sw_read_sock(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72323 | Linux Kernel's Ipv4/Igmp: potential UAF in igmp_gq_start_timer(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72322 | Linux Kernel's Ipv6/Mcast: potential UAF in MLD delayed work, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72320 | Linux Kernel's netfilter/Nft_lookup: catchall element handling with inverted lookups, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-72319 | Linux Kernel's Ipvs: inner headers in ICMP errors are in headroom, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72318 | Linux Kernel's Cifs: DFS referral string offsets, Scoring 9.4 | 9.4 Critical | Updated |
| 2026-10-16 | CVE-2026-72317 | Linux Kernel's SUNRPC Has an use-after-free in pin upper rpc_clnt across the TLS connect_worker, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72314 | Linux Kernel's regulator/Core Has an improper locking in regulator_lock_two() should test for EDEADLK not EDEADLOCK, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72312 | Linux Kernel's Octeontx2-af: VF bringup affecting PF promiscuous state, Scoring 7.9 | 7.9 High | Updated |
| 2026-10-16 | CVE-2026-72310 | Linux Kernel's Smb/Client: overflow in passthrough ioctl bounds check, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-72304 | Linux Kernel's ASoC Has a race condition in SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72303 | Linux Kernel Sound Open Firmware IPC4 Driver Does Not Validate Notification Payload Size, Enabling Out-of-Bounds Reads | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72302 | Linux Kernel's ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72301 | Linux Kernel Sound Open Firmware IPC3 Driver Has a TOCTOU Race in the bytes_put and bytes_get Control Paths | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72299 | Linux Kernel's TIPC: restrict socket queue dumps in enqueue tracepoints, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72298 | Linux Kernel's net/Qrtr: 32-bit integer overflow in qrtr_endpoint_post(), Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72297 | Linux Kernel's net/Atm Has an out-of-bounds read in out-of-range traffic classes in QoS validation, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72296 | Linux Kernel's net/Ife: require ETH_HLEN to be pullable in ife_decode(), Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-72289 | Linux Kernel's KVM/Arm64/Vgic: the interrupt is still ours before migrating it, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-72288 | Linux Kernel KVM arm64 Virtual GIC Has a Race Between Interrupt Affinity Change and LPI Disabling, a 9.3 CVSS Flaw | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-72286 | Linux Kernel's KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72284 | Linux Kernel's KVM/X86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72282 | Linux Kernel's KVM Has an improper locking in kvm_io_bus_get_dev() locking responsibilities to callers, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72280 | Linux Kernel's KVM/Arm64/Nv: bogus WARN for write to ZCR_EL2, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72262 | Linux Kernel's ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72261 | Linux Kernel's ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72255 | Linux Kernel's netfilter/Nf_queue: pin bridge device while NFQUEUE holds fake dst, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72254 | Linux Kernel's netfilter/Nft_fib Has a null pointer dereference in fib expression on the netdev egress hook, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72253 | Linux Kernel's netfilter/Nf_conntrack_sip: skb_dst() before accessing it, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72252 | Linux Kernel's netfilter/Nft_set_pipapo: leak bad clone into future transaction, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72251 | Linux Kernel's netfilter/Nf_nat_sip: reload possible stale data pointer, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72250 | Linux Kernel's netfilter/Nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72247 | Linux Kernel's netfilter/Nf_conncount: zone comparison in tuple dedup, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72244 | Linux Kernel's Gpu/buddy: bail out of try_harder when alignment cannot be honoured, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72243 | Linux Kernel's SELinux: connect-related permissions on TCP Fast Open, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72242 | Linux Kernel's SELinux: sk_socket dereference in selinux_sctp_bind_connect(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72235 | Linux Kernel's Batman-ADV Has an use-after-free in retrieve ethhdr after potential skb realloc on RX, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72234 | Linux Kernel's Batman-ADV Has an use-after-free in access unicast_ttvn skb->data only after skb realloc, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72233 | Linux Kernel's Batman-ADV/Bla Has an use-after-free in reacquire gw address after skb realloc, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72232 | Linux Kernel's Batman-ADV: minimal ethernet header on TX, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72231 | Linux Kernel B.A.T.M.A.N. Advanced Translation Table Does Not Suppress Duplicate Requests While One Is Pending, Causing Request Storms | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72226 | Linux Kernel's Batman-ADV/Tt: TVLV OOB check overflow, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72225 | Linux Kernel JBD2 Journaling Layer Has an Integer Underflow in jbd2_journal_initialize_fast_commit, Corrupting Journal State | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72222 | Linux Kernel's Sunrpc: pin svc_xprt across the asynchronous TLS handshake callback, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72221 | Linux Kernel's Sunrpc: wait for in-flight TLS handshake callback when cancel loses race, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72213 | Linux Kernel's Mm/hugetlb: hugetlb cgroup rsvd charge/uncharge mismatch, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72197 | Linux Kernel NTFS3 Filesystem Does Not Bound the memmove Length in DeleteIndexEntryAllocation, Enabling Memory Corruption | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72196 | Linux Kernel's Fs/ntfs3: copy_lcns dp->page_lcns[] index in analysis pass, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72195 | Linux Kernel's Fs/ntfs3: attr_off in UpdateResidentValue against data_off, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72194 | Linux Kernel's Fs/ntfs3: depth limit to indx_find_buffer to prevent stack overflow, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72192 | Linux Kernel's NTFS3: to_move in indx_insert_into_root before hdr_insert_head, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72191 | Linux Kernel NTFS3 Filesystem Does Not Validate the Split-Point Offset in indx_insert_into_buffer, a 9.8 CVSS Out-of-Bounds Write | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72183 | Linux Kernel's Landlock: LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-72175 | Linux Kernel's Fs/proc/task_mmu: make_uffd_wp_huge_pte() prot-update race, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72172 | Linux Kernel Memory Initialization Leaves struct page Fields Uninitialized for ZONE_DEVICE Memory Regions | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72170 | Linux Kernel's 9p: nlink update in cacheless mode to fix WARN_ON, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72165 | Linux Kernel's Mtd/Rawnand: condition in 'nand_select_target()', Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72164 | Linux Kernel's Ocfs2: moving extents to occupied clusters, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72160 | Linux Kernel OCFS2 Filesystem Accepts Inodes With Non-Canonical i_mode Type Fields, Causing Incorrect VFS Dispatch | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72157 | Linux Kernel's net/Thunderbolt: frags[] overflow by bounding frame_count, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72149 | Linux Kernel's Dmaengine/Tegra: burst size calculation, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-72144 | Linux Kernel Dell Laptop Platform Driver Has Missing Cleanups on the Initialization Error Path, Causing Resource Leaks | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72143 | Linux Kernel's Platform/x86: ISST: Restore SST-PP control to all domains, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72136 | Linux Kernel's XFRM/Xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72135 | Linux Kernel's Tpm: Make the TPM character devices non-seekable, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72130 | Linux Kernel's Nvmet-auth: short AUTH_RECEIVE buffers, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72129 | Linux Kernel's Nvmet-rdma: inline data with a nonzero offset, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72126 | Linux Kernel's Can/Isotp Has an use-after-free in unconditional synchronize_rcu() in isotp_release(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72125 | Linux Kernel's Can/Isotp: use-after-free race with concurrent NETDEV_UNREGISTER, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72124 | Linux Kernel's Can/Isotp: TX state transitions under so->rx_lock, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72123 | Linux Kernel's Can/Bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72122 | Linux Kernel CAN BCM Driver Has a Lockless Race Between Bound Socket and Interface Index Changes, Causing Silent RX_SETUP Failures | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-72121 | Linux Kernel's Can/Bcm Has an improper locking in locking when updating filter and timer values, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72120 | Linux Kernel's Can/Bcm: rcu list annotations and operations, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72119 | Linux Kernel CAN BCM Driver Does Not Protect Data and Timer Updates With the TX Lock, Enabling Data Races | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72116 | Linux Kernel's Can/Bcm: stale rx/tx ops after device removal, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72115 | Linux Kernel's Can/Bcm: track a single source interface for ANYDEV timeout/throttle ops, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-72114 | Linux Kernel CAN BCM Driver Does Not Validate Frame Length for RTR Reply Setup, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72113 | Linux Kernel's Can/Bcm Has a memory leak in device refcount for CAN filter removal, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72111 | Linux Kernel's BPF: Reset register bounds before narrowing retval range in check_mem_access(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72110 | Linux Kernel's Bpf,fork: wipe ->bpf_storage before bailouts that access it, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72108 | Linux Kernel's Dm thin metadata: metadata snapshot consistency on commit failure, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72107 | Linux Kernel's Dm era: out-of-bounds memory access for non-zero start sector, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72105 | Linux Kernel's Dm-log: a bitset_size overflow on 32bit machines, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72103 | Linux Kernel's device mapper: leaking the caller's thread keyring via the table device file, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-72102 | Linux Kernel's Dm_early_create: freeing used table on dm_resume failure, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72100 | Linux Kernel Device Mapper Integrity Module Processes BIOs That Extend Beyond the Device Limits | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72099 | Linux Kernel's Dm-integrity: increment hash_offset twice, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72098 | Linux Kernel's Dm-verity: buffer overflow in FEC calculation, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72095 | Linux Kernel's Dma-fence: Make dma_fence_dedup_array() robust against 0-count input, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72085 | Linux Kernel's SCSI/Xen/Scsiback: Free unsubmitted command instead of double-putting it, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-72084 | Linux Kernel's SCSI/Target: PR-OUT TransportID parsing to the received buffer, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72083 | Linux Kernel iSCSI Target Has a Use-After-Free of the ISID in the REGISTER AND MOVE Operation, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72080 | Linux Kernel's Fs/resctrl: use-after-free during unmount, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72072 | Linux Kernel Mellanox mlx5e MACsec Driver Has a Use-After-Free of metadata_dst When an RX Security Channel Is Deleted | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72069 | Linux Kernel's Locking/rt Has an use-after-free in the incorrect RCU protection in rt_spin_unlock(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72067 | Linux Kernel's Cpu/Hotplug: Preserve per instance callback errors, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72066 | Linux Kernel's Cpu/Hotplug: hotplug states sysfs output, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72065 | Linux Kernel Microsoft Azure Network Adapter Driver Accepts Packet Length Values Reported by the NIC Without Validation, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72061 | Linux Kernel's net/Sit: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72057 | Linux Kernel's Net/sched/Act_ct: preserve tc_skb_cb across defragmentation, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-72055 | Linux Kernel's net/Ip6_vti: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72054 | Linux Kernel's net/Ip_vti: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72053 | Linux Kernel's net/Ipip: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72052 | Linux Kernel's net/Ip6_gre: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72051 | Linux Kernel's net/Ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72049 | Linux Kernel's Ieee802154: admin-gate legacy LLSEC dump operations, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-72045 | Linux Kernel's Octeontx2-af/Cn10k: restrict VF LMTLINE sharing to its own PF, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72041 | Linux Kernel's Espintcp: sk_msg_free_partial to fix partial send, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72036 | Linux Kernel's Net/sched/Sch_multiq: direct dequeue call with peek and qdisc_dequeue_peeked, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72035 | Linux Kernel's Net/sched/Sch_taprio: direct dequeue call with peek and qdisc_dequeue_peeked, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-72034 | Linux Kernel's Fhandle: detached mounts in capable_wrt_mount(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72029 | Linux Kernel's net/Wwan/Iosm: device offsets in the MUX downlink decoder, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-72024 | Linux Kernel's Mac802154: interfaces with RCU list deletion, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72021 | Linux Kernel IPVS Load Balancer Uses the Wrong Transport Offset for SCTP State Lookups, Causing Incorrect Connection Matching | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-72020 | Linux Kernel's Ipvs: reset full ip_vs_seq structs in ip_vs_conn_new, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72019 | Linux Kernel's Macsec: read an unset MAC header in macsec_encrypt(), Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-72018 | Linux Kernel's Dibs/Loopback Has an out-of-bounds write in offset and size in move_data(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72014 | Linux Kernel's Drbd: data replies with an out-of-range payload size, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-72012 | Linux Kernel OSNoise Latency Tracer Does Not Call synchronize_rcu When Unregistering, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72009 | Linux Kernel's Pmdomain/Imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72005 | Linux Kernel's WiFi/Rt2x00: full teardown before work setup in probe, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-72003 | Linux Kernel Broadcom CYW WiFi Driver Has a Heap Overflow When Processing Short Authentication Frames | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-70045 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-70038 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-70031 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-70027 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-70026 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-70024 | Critical Windows IIS Web Server Improper Input Validation Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-70023 | Windows Hyper-V Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-70021 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-70015 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-70014 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-69959 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69957 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69953 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69952 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69950 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69949 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69945 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-69942 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69935 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-69934 | Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69931 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-69926 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69923 | Microsoft Windows 11 (version 24H2) Uncontrolled Search Path Element Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69918 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-69916 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69915 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-69913 | Windows Windows TCP/IP stack Use-After-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-69909 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69898 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-69886 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68479 | Linux Kernel's Bluetooth/Btrtl Has an integer underflow in firmware patch bounds, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68477 | Linux Kernel's Ipvs: more places with wrong ipv6 transport offsets, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68472 | Linux Kernel's WiFi/Cfg80211: EHT MLE before MLD ID read, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-68461 | Linux Kernel Firmware Device Property Framework Leaves fwnode_handle Fields Uninitialized in fwnode_init, Causing Unpredictable Behavior | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68454 | Linux Kernel's KVM/S390/PCI: handling of AIF enable without AISB, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68453 | Linux Kernel s390 Crypto Adapter Driver Reads Beyond the Input Buffer in cca_cipher2protkey | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68452 | Linux Kernel's S390/zcrypt: length for CCA AES cipher key requests, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68451 | Linux Kernel's S390/zcrypt: length for CCA ECC private key requests, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68447 | Linux Kernel AMD GPU KFD v9 CRIU Control Stack Checkpoint Copy Is Not Clamped to the Buffer Object Size | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68446 | Linux Kernel's Drm/vmwgfx: vmw_surface_metadata: : array_size, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68442 | Linux Kernel's btrfs: propagate EXTENT_FLAG_LOGGING to split extent maps, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68433 | Linux Kernel's Libceph: get_version reply decode to front len, Scoring 8.6 | 8.6 High | Updated |
| 2026-10-16 | CVE-2026-68432 | Linux Kernel's VXLAN: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68427 | Linux Kernel's GPU/Host1x: use-after-free in host1x_bo_clear_cached_mappings, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68426 | Linux Kernel's XFRM: stale skb->prev after async crypto steals a GSO segment, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68425 | Linux Kernel's IB/mad: unmatched RMPP responses before reassembly, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68419 | Linux Kernel's RDMA/irdma: rereg_mr for non-mem regions, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68417 | Linux Kernel iWARP SIW RDMA Driver Publishes Queue Pairs Before Initialization Is Complete, Enabling Premature Use | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68414 | Linux Kernel's WiFi/Cfg80211: cancel sched scan results work on unregister, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68409 | Linux Kernel's WiFi/Mac80211: defer link RX stats percpu free to RCU, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68402 | Linux Kernel's WiFi/Cfg80211: element ID read when checking non-inheritance, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68398 | Linux Kernel PPP Layer 2 Tunnel Protocol Driver Has a Use-After-Free in the RX Path Due to Early Channel Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68397 | Linux Kernel's Net/iucv: take a reference on the socket found in afiucv_hs_rcv(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68394 | Linux Kernel Bluetooth Management Interface Does Not Revalidate LOAD_CONN_PARAM Updates Queued Before Parameters Changed | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68393 | Linux Kernel's Bluetooth/Hci_sync Has an use-after-free in extend conn_hash lookup critical sections, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68388 | Linux Kernel's Smb/client: overlapping allocated ranges in fallocate, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68385 | Linux Kernel's S390/checksum: csum_partial() without vector facility, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68384 | Linux Kernel's Drm/xe/vf: VF CCS attach/detach race with in-flight BO moves, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68381 | Linux Kernel's Ksmbd: pin conn during async oplock break notification, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68377 | Linux Kernel's Net/sched/Act_tunnel_key Has an use-after-free in Defer dst_release to RCU callback, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68376 | Linux Kernel's SCTP: auth_hmacs array size in struct sctp_cookie, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-68374 | Linux Kernel USB Core sysfs bos_descriptors_read Accesses BOS Descriptor Data Without Holding the Device Lock | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68373 | Linux Kernel Atmel AT76C50x USB WiFi Driver Has an Integer Underflow in at76_guess_freq, Causing Out-of-Bounds Read | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-68354 | Linux Kernel's Firewire/net: fragmented datagram reassembly, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68353 | Linux Kernel's WiFi/Ath6kl: OOB read from firmware num_msg in TX complete handler, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-68352 | Linux Kernel's WiFi/Ath6kl: OOB read from firmware IE lengths in connect event, Scoring 8.3 | 8.3 High | Updated |
| 2026-10-16 | CVE-2026-68348 | Linux Kernel's ASoC/Tas2781: firmware description string parsing, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68343 | Linux Kernel's Smb/Client: DFS referral PathConsumed, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-68338 | Linux Kernel's Net/packet: fanout hook re-registration after unregister, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68335 | Linux Kernel RDS Transport Delivers Messages Across Network Namespace Boundaries, Enabling Cross-Namespace Information Leaks | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68329 | Linux Kernel's Iommu/amd: Wait for completion instead of returning early in iommu_completion_wait(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68326 | Linux Kernel's WiFi/Mwifiex: uAP association event IEs to the event buffer, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68320 | Linux Kernel's SCTP: auth_chunk_list capacity check in sctp_auth_ep_add_chunkid, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-68315 | Linux Kernel SCTP Stream Reset Request Handler Does Not Validate the Stream Count, Enabling Out-of-Bounds Access | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68300 | Linux Kernel's SCTP/Auth: verify auth requirement when auth_chunk is NULL, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68299 | Linux Kernel's Vmxnet3: BUG_ON in vmxnet3_get_hdr_len() for Geneve packets, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68298 | Linux Kernel's Drm/xe/vm: SVM leak on resv obj alloc failure in xe_vm_create(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68297 | Linux Kernel TIPC Transport Truncates MTU Values to 16 Bits, Causing Incorrect Media and Bearer MTU Validation | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68294 | Linux Kernel Qualcomm IPC Router Allows Socket Creation Outside the Initial Network Namespace, Enabling Privilege Escalation | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68293 | Linux Kernel's Net/mlx5: MCIA register buffer overflow on 32 dword reads, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68290 | Linux Kernel's Rds/TCP Has an use-after-free in unregister sysctl before tearing down listen socket, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68284 | Linux Kernel's Bpf, sockmap: cork use-after-free in tcp_bpf_sendmsg(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68274 | Linux Kernel's Drm/xe/guc: buffer overflow in steered register list allocation, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68273 | Linux Kernel AMD GPU Driver Mishandles Context Power State Override, Enabling Incorrect GPU Power State Transitions | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68266 | Linux Kernel's Drm/xe Has an use-after-free in Hold a dma-buf reference for imported BOs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68265 | Linux Kernel's Drm/xe/vm Has a null pointer dereference in BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-68264 | Linux Kernel's Drm/xe/pt: Reset current_op in xe_pt_update_ops_init(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68258 | Linux Kernel's Drm/amdkfd: bounds on CRIU restore queue type and mqd size, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68257 | Linux Kernel's Drm/amdkfd: 32-bit overflow in CWSR total size calculation, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68255 | Linux Kernel's Drm/virtio: EDID block reads to the response buffer, Scoring 7.7 | 7.7 High | Updated |
| 2026-10-16 | CVE-2026-68253 | Linux Kernel's Drm/i915/hdcp: streams[] bounds before overflow, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68245 | Linux Kernel's Drm/amdgpu: lifetime issue of amdgpu_vm_get_task_info_pasid(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68240 | Linux Kernel GPU SVM Driver Leaks Device Page Mappings on Error Paths Due to Late dpagemap Publication | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68216 | Linux Kernel Philips Webcam Media Driver Does Not Return Queued Buffers When start_streaming Fails, Causing a Resource Leak | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68213 | Linux Kernel's media/Rtl2832_sdr: queued buffers on start_streaming() failure, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68206 | Linux Kernel V4L2 Media Controls Do Not Validate HEVC Active Reference Picture Counts, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68202 | Linux Kernel's ALSA/Seq: a re-opened queue timer in the destructor, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68201 | Linux Kernel's ALSA/Timer: drain a slave's callback before its master detaches it, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68200 | Linux Kernel's ALSA/Timer: re-enter an instance callback that is still running, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68199 | Linux Kernel Atheros ath6kl WiFi Driver Processes Firmware ADDBA Block Ack Window Size Values Without Bounds Checking | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68198 | Linux Kernel Atheros ath6kl WiFi Driver Has a Use-After-Free in aggr_reset_state During Aggregation State Reset | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68192 | Linux Kernel Broadcom FullMAC WiFi Driver release_scratchbuffers Is Not Idempotent, Causing Double-Free on Multiple Release Calls | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68189 | Linux Kernel's Bluetooth/Hci_sync: UUID list traversal, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68179 | Linux Kernel's Misc/Nsm: only unlock nsm_dev on post-lock error paths, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-68178 | Linux Kernel's Misc/Nsm: pin the module while the device is open, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68162 | Linux Kernel's SCTP: auth_enable sysctl UAF during netns teardown, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68160 | Linux Kernel's ceph: pre-auth out-of-bounds read on snaptrace in ceph_handle_caps(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68159 | Linux Kernel's Libceph Has a buffer overflow in pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68158 | Linux Kernel's Libceph: multiplication overflow in decode_new_up_state_weight(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68157 | Linux Kernel's Libceph Has a null pointer dereference in guard missing CRUSH type name lookup, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68156 | Linux Kernel libceph Does Not Refresh the Authorizer Buffer Pointer After an Authorizer Update, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68154 | Linux Kernel's Libceph: zero bucket types in crush_decode, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68153 | Linux Kernel libceph Destroys the Client Before Removing Its debugfs Files, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68149 | Linux Kernel's Fs: preserve ACL_DONT_CACHE state in forget_cached_acl(), Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-68148 | Linux Kernel's Fscrypt: superblock check in find_or_insert_direct_key(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68145 | Linux Kernel's Iomap: out-of-bounds bitmap_set() with zero-length range, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68144 | Linux Kernel's Phonet/Pep: use-after-free in pep_get_sb(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68143 | Linux Kernel's net/Slip Has an out-of-bounds write in receive against buffer reallocation, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68142 | Linux Kernel's Geneve: require CAP_NET_ADMIN in the device netns for changelink, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68141 | Linux Kernel's Net/af_iucv Has a null pointer dereference in NULL deref in afiucv_hs_callback_syn(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68140 | Linux Kernel's Net/iucv: use-after-free of a severed iucv_path, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68138 | Linux Kernel's Net/sched: qdisc_rtab_list against concurrent get/put, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68136 | Linux Kernel's net/Gro: double aggregation of flush-marked skbs, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68131 | Linux Kernel's Rbd: Reset positive result codes to zero in object map update path, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68129 | Linux Kernel Google Virtual NIC Driver Stalls the Receive Queue Permanently When a Buffer Allocation Fails | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68128 | Linux Kernel's Ice: out-of-range ptype in ice_parser_profile_init, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68127 | Linux Kernel's ILA: reload IPv6 header after pskb_may_pull in checksum adjust, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68125 | Linux Kernel's Mac802154/Llsec: frames shorter than the authentication tag, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68123 | Linux Kernel Open vSwitch GSO Userspace Truncation Calculation Underflows, a 9.8 CVSS Memory Safety Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68121 | Linux Kernel's Pppoe: reload header pointer after dev_hard_header(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68118 | Linux Kernel's TCP: challenge ACK for non-exact RST in SYN-RECEIVED, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-68117 | Linux Kernel's TIPC: sock->sk on the failed-insert path in tipc_sk_create(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-68116 | Linux Kernel's VXLAN/Mdb: source list corruption on a failed replace, Scoring 7.9 | 7.9 High | Updated |
| 2026-10-16 | CVE-2026-68108 | Linux Kernel's Drm/amdgpu/vce: integer overflow in image size, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68107 | Linux Kernel's Drm/amdgpu/vcn4 Has a race condition in rereading IB param length, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68106 | Linux Kernel AMD GPU Driver Divides by Zero When User-Supplied UVD Video Dimensions Are Invalid | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68104 | Linux Kernel's Drm/amdgpu: invoke pm_genpd_remove() before freeing genpd, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-68103 | Linux Kernel's Drm/amdgpu: mapping a reserved doorbell to a new queue, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-68100 | Linux Kernel Kernel SMB Server Does Not Validate num_subauth When Copying ACE Entries in set_ntacl_dacl, Enabling Out-of-Bounds Access | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-68098 | Linux Kernel's Ksmbd: DACL dedup walk to copied ACEs, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68096 | Linux Kernel's audit Has an improper locking in recursive locking deadlock in audit_dupe_exe(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-68091 | Linux Kernel's HID/Wacom: hardware after post-start probe failures, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-68085 | Linux Kernel Bluetooth HCI UART Driver Does Not Clear HCI_UART_SENDING When write_work Is Canceled, Causing Stuck Send State | 8.0 High | Updated |
| 2026-10-16 | CVE-2026-68082 | Linux Kernel's Libceph: two unsafe bare decodes in decode_lockers(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64600 | Linux Kernel's XFS Has a race condition in resample the data fork mapping after cycling ILOCK, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64599 | Linux Kernel's crypto Has an use-after-free in amlogic - avoid double cleanup in meson_crypto_probe(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64598 | Linux Kernel's Smb/client: error code in smb2_aead_req_alloc(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64597 | Linux Kernel's Smb/Client Has a double free in double-free in SMB2_close() replay, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64586 | Linux Kernel's WiFi/Brcmfmac: drain bus_reset work on device removal, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64582 | Linux Kernel RXE Software RDMA Driver Has a Use-After-Free in the rxe_mmap Memory Mapping Path | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64581 | Linux Kernel's XFRM Has a double free in sk_dst_cache double-free in xfrm_user_policy(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64580 | Linux Kernel's Xfrm6: dst.dev on error to avoid double netdev_put in xfrm6_fill_dst(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64576 | Linux Kernel Nexthop Subsystem Does Not Initialize the Extended ACK in nh_res_bucket_migrate, Risking Uninitialized Data Exposure | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64575 | Linux Kernel BPF TCP Sockmap Double-Releases a Socket on Batch Reallocation Failure | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64574 | Linux Kernel's WiFi/Mac80211: tear down new links on vif update error path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64570 | Linux Kernel mac80211 WiFi Subsystem Double-Frees the FILS Discovery Buffer on Allocation Failure | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64567 | Linux Kernel's btrfs: free space cache with more entries than pages, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64564 | Linux Kernel's SCTP: free the ASCONF's own transport in DEL-IP processing, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64563 | Linux Kernel's Rhashtable Has an use-after-free in stale iter->p on table restart, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64562 | Linux Kernel's KVM/NVMX: Hide shadow VMCS right after VMCLEAR, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64561 | Linux Kernel's KVM/X86: for invalid/obsolete root *after* making MMU pages available, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64559 | Linux Kernel s390 Protected Key Driver Does Not Check the Length Field in the PKEY_VERIFYPROTK ioctl, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64558 | Linux Kernel's S390/pkey: length in pkey_pckmo handler implementation, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64557 | Linux Kernel's Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64556 | Linux Kernel's Perf/core: Detach event groups during remove_on_exec, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64554 | Linux Kernel's netfilter/Bridge Has an use-after-free in stale prevhdr pointer in br_ip6_fragment(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64551 | Linux Kernel's SCTP: STALE_COOKIE cause length before reading staleness, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-64548 | Linux Kernel's Bpf, sockmap: overflowing copy + len in bpf_msg_push_data(), Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-64547 | Linux Kernel's net/USB/Net1080: packet_len before pad-byte access in rx_fixup, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64546 | Linux Kernel's Drm/edid: OOB read in drm_parse_tiled_block(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64543 | Linux Kernel's TIPC: use-after-free of the discoverer in tipc_disc_rcv(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64541 | Linux Kernel's Net/smc: UAF in smc_cdc_rx_handler() by pinning the socket, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64540 | Linux Kernel's Usbnet/Gl620a Has an out-of-bounds read in out-of-bounds read in genelink_rx_fixup(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64539 | Linux Kernel's Bluetooth/Eir: stack OOB write when prepending the Flags AD, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64536 | Linux Kernel's Staging/Rtl8723bs: OOB reads in is_ap_in_tkip() IE loop, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64535 | Linux Kernel's Nvmet-tcp: potential UAF when ddgst mismatch, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64534 | Linux Kernel's Nvmet-tcp Has an use-after-free in INIT_FAILED before nvmet_req_uninit in digest error path, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64533 | Linux Kernel's Fs/ntfs3: lcns_follow in log_replay conversion, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64532 | Linux Kernel's Fs/ntfs3: NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64531 | Linux Kernel's net/Openvswitch: oversized nested action attrs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64530 | Linux Kernel Traffic Control Classifier API Does Not Handle TC_ACT_CONSUMED in tcf_qevent_handle, a 9.8 CVSS Use-After-Free | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64529 | Linux Kernel's crypto: qat - remove unused character device and IOCTLs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64524 | Linux Kernel's Drm/hyperv: resolution_count and fix WIN8 fallback, Scoring 7.7 | 7.7 High | Updated |
| 2026-10-16 | CVE-2026-64523 | Linux Kernel's Net/handshake: Take a long-lived file reference at submit, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64522 | Linux Kernel Mellanox mlx5e eSwitch Mode Block Counter Underflows During IPsec SA Acquisition | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64515 | Linux Kernel's WiFi/Mac80211: MLE defragmentation, Scoring 8.3 | 8.3 High | Updated |
| 2026-10-16 | CVE-2026-64510 | Linux Kernel's ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup, Scoring 7.0 | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-64496 | Linux Kernel Industrial I/O Event Subsystem Has a Race Condition When Resetting the Event FIFO | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64490 | Linux Kernel's ALSA/Virtio: control metadata from the device, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-64485 | Linux Kernel's ALSA/Compress: task creation error unwind, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64481 | Linux Kernel's ALSA/Hda/cs35l41: firmware load work teardown, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64475 | Linux Kernel VFIO PCI Driver Leaks the VGA Arbiter Client Registration When register_device Fails | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64463 | Linux Kernel's USB/Typec/Tcpci_rt1711h: unregister TCPCI port with devres, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64460 | Linux Kernel's PCI/IOV: VF Resizable BAR restore on read error, Scoring 7.0 | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-64456 | Linux Kernel VirtIO Hardware RNG Driver Does Not Clamp Device-Reported used.len in copy_data, Enabling Out-of-Bounds Reads | 7.7 High | Updated |
| 2026-10-16 | CVE-2026-64452 | Linux Kernel's 6lowpan: NHC entry use-after-free on error path, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64450 | Linux Kernel's TIPC Has an out-of-bounds read in out-of-bounds read in broadcast Gap ACK blocks, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-64448 | Linux Kernel SMB Client Extends an Implied bcc[0] Exemption to Responses That Have a Data Area, Bypassing Bounds Checks | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-64445 | Linux Kernel's Staging/Rtl8723bs: WEP length underflow and OOB read in OnAuth(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64444 | Linux Kernel's Staging/Rtl8723bs: OOB read in OnAssocRsp() IE loop, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64443 | Linux Kernel's Staging/Rtl8723bs: OOB read in update_beacon_info() IE loop, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64442 | Linux Kernel RTL8723BS WiFi Staging Driver Reads Out of Bounds in Information Element Loops in issue_assocreq and join_cmd_hdl | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64441 | Linux Kernel's Staging/Rtl8723bs: OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64440 | Linux Kernel's Staging/Rtl8723bs: OOB write in HT_caps_handler(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64438 | Linux Kernel's crypto: qat - fix VF2PF work teardown race in adf_disable_sriov(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64436 | Linux Kernel AF_KEY Socket Does Not Initialize alg_key_len for IPComp States, Leaking Uninitialized Kernel Memory | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64435 | Linux Kernel's audit: data races of skb_queue_len() readers on audit_queue, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-64434 | Linux Kernel Bluetooth L2CAP Channel Timeout Handler Accesses a Freed Connection Structure, Enabling Use-After-Free | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64432 | Linux Kernel NTFS3 Filesystem Does Not Validate Dirty Page Table Capacity During Log Replay copy_lcns, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64420 | Linux Kernel's Mfd/Cros_ec Has a null pointer dereference in Delay dev_set_drvdata() until probe success, Scoring 7.0 | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-64408 | Linux Kernel's Bluetooth/Bnep: pin L2CAP connection during netdev registration, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64406 | Linux Kernel's Bluetooth: UAF in bt_accept_dequeue(), Scoring 8.0 | 8.0 High | Updated |
| 2026-10-16 | CVE-2026-64403 | Linux Kernel's Bluetooth Has a null pointer dereference in L2CAP: validate option length before reading conf opt value, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64401 | Linux Kernel's Smb/Client Has an use-after-free in resolve SWN tcon from live registrations, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64387 | Linux Kernel's Smb/Client Has a double free in query directory replay double-free, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64386 | Linux Kernel SMB Client Double-Frees the Query Info Response Buffer on Session Replay, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64385 | Linux Kernel's Smb/Client Has a double free in double-free in SMB2_ioctl() replay, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64384 | Linux Kernel's Smb/Client Has a double free in change notify replay double-free, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64383 | Linux Kernel's Smb/Client Has a double free in double-free in SMB2_flush() replay, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64382 | Linux Kernel's Smb/Client Has a double free in double-free in SMB2_open() replay, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64380 | Linux Kernel's Smb/Client: harden POSIX SID length parsing, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-64379 | Linux Kernel's Smb/Client: mask server-provided mode to 07777 in modefromsid, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64378 | Linux Kernel's Writeback: race between cgroup_writeback_umount() and inode_switch_wbs(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64374 | Linux Kernel's Sched/rt Has an improper locking in Have RT_PUSH_IPI be default off for non PREEMPT_RT, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-64372 | Linux Kernel ACPI PCC CPU Frequency Driver Has a Use-After-Free and Double-Free During _OSC Evaluation | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64368 | Linux Kernel's Mm/slab: limit zeroing to orig_size when only red zoning is enabled, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64366 | Linux Kernel Wacom HID Driver Writes Out of Bounds in wacom_wac_queue_insert When the Input Queue Is Full | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64364 | Linux Kernel's HID/Multitouch Has an out-of-bounds read in out-of-bounds bit access on mt_io_flags, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64355 | Linux Kernel's BPF Has an out-of-bounds read in fragmented frames in devmap, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64354 | Linux Kernel's BPF: BTF repeated field counts before expansion, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64333 | Linux Kernel's USB/serial/Digi_acceleport Has an out-of-bounds write in write buffer corruption, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64324 | Linux Kernel UDF Filesystem Does Not Validate Free Block Extents Against the Partition Length, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64323 | Linux Kernel's Udf Has an out-of-bounds write in VAT header length against the VAT inode size, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64322 | Linux Kernel's Udf Has an out-of-bounds write in sparing table length as an entry count, not a byte count, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64320 | Linux Kernel's Nvmet Has an out-of-bounds read in pre-auth out-of-bounds heap read in Discovery Get Log Page, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-64319 | Linux Kernel's Nvmet-auth Has an out-of-bounds read in reply message payload bounds against transfer length, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-64313 | Linux Kernel's crypto: ecc - Fix carry overflow in vli multiplication, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64312 | Linux Kernel's crypto: pcrypt - restore callback for non-parallel fallback, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-64304 | Linux Kernel's crypto Has an out-of-bounds write in qat - validate RSA CRT component lengths, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64303 | Linux Kernel Freescale LPSPI Driver Does Not Terminate the RX DMA Channel on TX Prepare Failure, a 9.8 CVSS Resource Leak | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64299 | Linux Kernel's tracing Has an out-of-bounds read in out-of-bounds read in glob matching, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64298 | Linux Kernel's NFSv4: include MAY_WRITE in open permission mask for O_TRUNC, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64296 | Linux Kernel exFAT Filesystem Does Not Bound Unicode Name Advance in exfat_find_dir_entry, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64293 | Linux Kernel's Iommufd: sizeof(*hdr) instead of sizeof(hdr) in veventq read, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64287 | Linux Kernel's KVM/Arm64: used_lrs when flushing the pKVM hyp vCPU, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-64286 | Linux Kernel KVM arm64 Protected KVM Does Not Clear __hyp_running_vcpu When Flushing the Hyp vCPU, Causing State Inconsistency | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-64284 | Linux Kernel's KVM/X86: vendor's exit handler runs before fastpath userspace exits, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64277 | Linux Kernel Synaptics RMI4 Input Driver Does Not Bound the F3A Keymap to the GPIO Count, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64276 | Linux Kernel's input Has an out-of-bounds write in synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64268 | Linux Kernel's RDMA/siw Has an out-of-bounds write in Read Response placement to the RREAD length, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64266 | Linux Kernel's FUSE Has an use-after-free in re-lock request before returning from fuse_ref_folio(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64255 | Linux Kernel's WiFi/Iwlwifi/Mld Has an out-of-bounds read in sta_mask before ffs() in BA session handlers, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64247 | Linux Kernel's KVM/X86/Hyper-v Has an out-of-bounds read in the bank index when querying sparse banks, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-64243 | Linux Kernel's ASoC/Codecs/Simple-mux: enum control bounds check, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-64235 | Linux Kernel's X86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64232 | Linux Kernel's block: recompute nr_integrity_segments in blk_insert_cloned_request, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64223 | Linux Kernel mac80211 WiFi Subsystem Consumes Absent Negotiated TTLM Map Entries, Causing Out-of-Bounds Reads | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64222 | Linux Kernel's Octeontx2-pf Has a double free in double free of pool->stack on AQ init failure, Scoring 7.0 | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-64219 | Linux Kernel's Drm/amd/display Has an uncontrolled recursion in payload length and link_index in dc_process_dmub_aux_transfer_async, Scoring 7.0 | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-64210 | Linux Kernel's Net/mlx5e/Xsk: unlocked writing to ICOSQ, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-64206 | Linux Kernel Bluetooth L2CAP Takes the Connection Lock Without First Canceling Pending RX Work, Risking a Deadlock | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64191 | Linux Kernel I2C Stub Driver Accepts Block Transfers With Invalid Lengths, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64189 | Linux Kernel's netfilter/Ipset: race between dump and ip_set_list resize, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64178 | Linux Kernel's Bluetooth/Bnep: UAF read of dev->name, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64176 | Linux Kernel's WiFi/Iwlwifi/Mvm: driver-set TX rates on old devices, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-64175 | Linux Kernel's WiFi/Iwlwifi/Mld: TX during firmware restart, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-64162 | Linux Kernel's Idpf: read_dev_clk_lock spinlock init in idpf_ptp_init(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64160 | Linux Kernel's Netfs: potential for tearing in ->remote_i_size and ->zero_point, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64136 | Linux Kernel's Smb/Client Has an improper locking in tc_count increment in smb2_find_smb_sess_tcon_unlocked(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64134 | Linux Kernel's ALSA/Pcm Has a null pointer dereference in setup bogus iov_iter for silencing, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64133 | Linux Kernel's ALSA/Asihpi: potential OOB array access at reading cache, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64126 | Linux Kernel's Bluetooth Has an out-of-bounds read in MGMT: validate Add Extended Advertising Data length, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-64118 | Linux Kernel QLogic FastLinQ QED Driver Double-Frees Context Tables When qed_cxt_tables_alloc Fails | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-64115 | Linux Kernel's Vsock/vmci: UAF when peer resets connection during handshake, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64114 | Linux Kernel's Ipv4/Raw Has an out-of-bounds read in IP_HDRINCL packets with ihl < 5, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64113 | Linux Kernel's Ixgbevf: use-after-free in VEPA multicast source pruning, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64112 | Linux Kernel RADOS Block Device Has a Race Between lock_dwork Draining and Device Unmap | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64109 | Linux Kernel's Af_unix: UAF read of tail->len in unix_stream_data_wait(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-64106 | Linux Kernel's KVM/Arm64/Vgic-its: restored DTE with out-of-range num_eventid_bits, Scoring 9.0 | 9.0 Critical | Updated |
| 2026-10-16 | CVE-2026-64102 | Linux Kernel iWARP SIW RDMA Driver Does Not Reject MPA FPDU Length Underflow Before Signed Arithmetic, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64098 | Linux Kernel's Drm/virtio Has an improper locking in uninterruptible resv lock for plane updates, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64097 | Linux Kernel's Drm/amd/display Has an out-of-bounds write in GPIO pin LUT table size before iterating, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64077 | Linux Kernel's netfilter/Ebtables: to two-stage removal scheme, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64076 | Linux Kernel Bridge Netfilter ebtables Has a Race Condition During Module Initialization | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64073 | Linux Kernel's Irq_work: use-after-free in irq_work_single() on PREEMPT_RT, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64053 | Linux Kernel's block: overwrite bip_vcnt in bio_integrity_copy_user(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-64048 | Linux Kernel SMC-R Network Driver Accepts CHID-0 ACCEPT Frames Matching Empty ISM Device Slots, Causing Null Pointer Dereference | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-64047 | Linux Kernel's net/Tls: off-by-one in sg_chain entry count for wrapped sk_msg ring, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-64046 | Linux Kernel's net/Tls: chain-after-chain in plain text SG, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63984 | Linux Kernel's Ipv6/Rpl: hdrlen overflow in ipv6_rpl_srh_decompress(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63980 | Linux Kernel's Net/handshake: spin_lock_bh for hn_lock, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-63979 | Linux Kernel's Net/handshake: hand off the pinned file reference to accept_doit, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63978 | Linux Kernel's Net/handshake: Drain pending requests at net namespace exit, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63977 | Linux Kernel's Dpll/Zl3073x Has a race condition in __dpll_device_change_ntf() and remove change_work, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63976 | Linux Kernel's Bluetooth/L2cap: chan->ident on ECRED reconfiguration success, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63974 | Linux Kernel's Bluetooth/Hci_sync: HCI_CMD_DRAIN_WORKQUEUE during device close, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63968 | Linux Kernel's Ipv6: possible infinite loop in fib6_select_path(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-63952 | Linux Kernel's Memfd: deny writeable mappings when implying SEAL_WRITE, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-63947 | Linux Kernel's Bluetooth Has an out-of-bounds read in HIDP: fix missing length checks in hidp_input_report(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63946 | Linux Kernel's Bluetooth: ISO: fix UAF in iso_recv_frame, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63945 | Linux Kernel's Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63944 | Linux Kernel's Bluetooth/Hci_sync: UAF in hci_le_create_cis_sync, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63942 | Linux Kernel Parallel Port Subsystem Has a Race Between Port Registration and Client Registration | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63940 | Linux Kernel KVM SEV Does Not Ignore Port I/O Requests of Zero Length, Causing Incorrect Guest Emulation, a 9.3 CVSS Flaw | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-63939 | Linux Kernel's KVM: SEV: Compute the correct max length of the in-GHCB scratch area, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-63938 | Linux Kernel's KVM: SEV: Check PSC request indices against the actual size of the buffer, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-63937 | Linux Kernel's KVM Has a race condition in SEV: Use READ_ONCE() when reading entries/indices from PSC buffer, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63927 | Linux Kernel's USB/Dwc2: use after free in debug code, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63926 | Linux Kernel BPF Sockmap bpf_msg_push_data Calculates the Wrong Tail Fragment Offset When Pushing Data | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-63925 | Linux Kernel's Macsec: replay protection at XPN lower-PN wrap, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-63924 | Linux Kernel's Ipv6/Exthdrs: refresh nh pointer after ipv6_hop_jumbo(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63923 | Linux Kernel's Octeontx2-af: body pcifunc in rvu_mbox_handler_rep_event_notify, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63922 | Linux Kernel's Ipv6/Exthdrs: refresh nh after handling HAO option, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63921 | Linux Kernel's Ip6/Vti: ip6_tnl.net in vti6_siocdevprivate(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63920 | Linux Kernel's Ipv6: extension header length before copying to cmsg, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-63919 | Linux Kernel's XFRM/input: hold netns during deferred transport reinjection, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63917 | Linux Kernel's Ip6/Vti: ip6_tnl.net in vti6_changelink(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63916 | Linux Kernel Wacom HID Driver Writes Out of Bounds in wacom_hid_set_device_mode When Setting the Device Mode | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63914 | Linux Kernel xfrm Routes MIGRATE Notifications to the Wrong Network Namespace, Leaking Migration State to Non-Owning Namespaces | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-63913 | Linux Kernel Netfilter Connection Tracking Forces TCP State to CLOSE on Invalid-Sequence RST Without Checking the Packet Direction | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-63912 | Linux Kernel's XFRM/Esp: combined single-frag length gate, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63893 | Linux Kernel's Thunderbolt/Property: u32 wrap in tb_property_entry_valid(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-63889 | Linux Kernel Fibre Channel Transport FPIN Port Name Walker Uses a Narrow Counter, Causing Integer Overflow on Large Descriptors | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-63888 | Linux Kernel's SCSI/Target/Iscsi Has a double free in CRC overread and double-free in iscsit_handle_text_cmd(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63887 | Linux Kernel's SCSI/Target/Iscsi: iscsi_encode_text_output() appends to rsp_buf, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63886 | Linux Kernel's SCSI/Target/Iscsi: CHAP_R length before base64 decode, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63885 | Linux Kernel's Drm/gem: race between change_handle and handle_delete, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63884 | Linux Kernel's Drm/i915: potential UAF in TTM object purge, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63881 | Linux Kernel AMD GPU KFD Debugger Has an Integer Overflow Vulnerability in Debugger Attach Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63875 | Linux Kernel's Arm64/Tlb: Flush walk cache when unsharing PMD tables, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63870 | Linux Kernel's Ieee802154/6lowpan: only accept IPv6 packets in lowpan_xmit(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63869 | Linux Kernel's WiFi/Mac80211: injected antenna index in ieee80211_parse_tx_radiotap, Scoring 7.6 | 7.6 High | Updated |
| 2026-10-16 | CVE-2026-63867 | Linux Kernel's Mptcp: TOCTOU race while computing rcv_wnd, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-63863 | Linux Kernel's Drm/gpusvm: unbalanced unlock in drm_gpusvm_scan_mm(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63860 | Linux Kernel's RDMA/core: NLA_NUL_STRING, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-63856 | Linux Kernel's Drm/amdgpu/vcn: no_user_fence for VCN v2.0 enc/dec rings, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63855 | Linux Kernel's Drm/amdgpu/vcn: no_user_fence for VCN v2.5 enc/dec rings, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63854 | Linux Kernel's Drm/amdgpu/vcn: no_user_fence for VCN v3.0 enc/dec rings, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63853 | Linux Kernel's Drm/amdgpu/vcn: no_user_fence for VCN v4.0 enc ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63852 | Linux Kernel's Drm/amdgpu/vcn: no_user_fence for VCN v4.0.3 enc ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63851 | Linux Kernel AMD GPU VCN v4.0.5 Encoder Ring Is Missing the no_user_fence Flag, Enabling Incorrect User Fence Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63850 | Linux Kernel AMD GPU VCN v5.0.0 Encoder Ring Is Missing the no_user_fence Flag, Enabling Incorrect User Fence Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63849 | Linux Kernel's Drm/amdgpu/vcn: no_user_fence for VCN v5.0.1 enc ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63848 | Linux Kernel's Drm/amdgpu/jpeg: no_user_fence for JPEG v2.0 ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63847 | Linux Kernel AMD GPU JPEG v2.5 Ring Is Missing the no_user_fence Flag, Enabling Incorrect User Fence Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63846 | Linux Kernel's Drm/amdgpu/jpeg: no_user_fence for JPEG v3.0 ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63845 | Linux Kernel's Drm/amdgpu/jpeg: no_user_fence for JPEG v4.0 ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63844 | Linux Kernel AMD GPU JPEG v4.0.3 Ring Is Missing the no_user_fence Flag, Enabling Incorrect User Fence Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63843 | Linux Kernel AMD GPU JPEG v4.0.5 Ring Is Missing the no_user_fence Flag, Enabling Incorrect User Fence Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63842 | Linux Kernel's Drm/amdgpu/jpeg: no_user_fence for JPEG v5.0.0 ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63841 | Linux Kernel's Drm/amdgpu/jpeg: no_user_fence for JPEG v5.0.1 ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63840 | Linux Kernel's Drm/amdgpu/jpeg: no_user_fence for JPEG v5.3.0 ring, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63833 | Linux Kernel's NTFS3: direct userspace writes to reserved $LX* xattrs, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-63832 | Linux Kernel's WiFi/Mt76: wcid publish check in mt76_sta_add, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63831 | Linux Kernel's Mac802154/Llsec: skb_cow_data() before in-place crypto, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63830 | Linux Kernel's net/Skmsg: preserve sg.copy across SG transforms, Scoring 9.4 | 9.4 Critical | Updated |
| 2026-10-16 | CVE-2026-63829 | Linux Kernel GRE Tunnel Driver changelink Operation Does Not Require CAP_NET_ADMIN in the Device Network Namespace | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63824 | Linux Kernel's KEYS: overflow in keyctl_pkey_params_get_2(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63823 | Linux Kernel's Keys: Pin request_key_auth payload in instantiate paths, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63809 | Linux Kernel's BPF: kvfree() for replaced sysctl write buffer, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63808 | Linux Kernel's Exfat: potential use-after-free in exfat_find_dir_entry(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63807 | Linux Kernel KVM x86 MMU Does Not Verify the Hugepage Is Within the Memory Slot Before Checking the Max Mapping Level | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63806 | Linux Kernel's KVM: guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-63803 | Linux Kernel's Hdlc_ppp Has an use-after-free in sync per-proto timers before freeing hdlc state, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63802 | Linux Kernel's Blk-cgroup: UAF in __blkcg_rstat_flush(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-63801 | Linux Kernel TIPC Transport Uses Freed AEAD Context Memory in tipc_aead_decrypt_done, Causing Use-After-Free | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63800 | Linux Kernel's PNFS: use-after-free in pnfs_update_layout(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-63796 | Linux Kernel's Ocfs2 Has an out-of-bounds read in oversized group bitmap descriptors, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-63795 | Linux Kernel's 9p Has an use-after-free in putting oldfid in p9_client_walk() error path, Scoring 10.0 | 10.0 Critical | Updated |
| 2026-10-16 | CVE-2026-62439 | GIMP PowerVR File Plug-in Overflows Integer When Calculating Buffer Sizes for Large Image Dimensions, Enabling Heap Corruption via Crafted PVR Files | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-53402 | Linux Kernel's fbdev/Fbcon Has an out-of-bounds read in out-of-bounds read in err_out of fbcon_do_set_font(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53399 | Linux Kernel NFS Server Does Not Release the Layout Stateid When setlease Fails, a 9.8 CVSS Resource Confusion | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53398 | Linux Kernel's NFSD: SECINFO_NO_NAME decode error cleanup, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53397 | Linux Kernel's NFSD: posix_acl leak on SETACL decode failure, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53394 | Linux Kernel NFS Server Leaks a Pre-Allocated Open Owner When an Unconfirmed Open Owner Retry Races With Confirmation | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53392 | Linux Kernel NFSv4 FlexFiles Layout Driver Accepts Zero Filehandle Version Counts, Causing Null Pointer Dereference | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53391 | Linux Kernel's NFSv4/pNFS Has a null pointer dereference in zero-length r_addr in nfs4_decode_mp_ds_addr, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53388 | Linux Kernel's FUSE Has an use-after-free in re-lock request before replacing page cache folio, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53384 | Linux Kernel DesignWare UART Driver Does Not Unregister the 8250 Port When clk_notifier_register Fails, a 9.8 CVSS Resource Confusion | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53381 | Linux Kernel's Virtiofs: UAF on submount umount, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53375 | Linux Kernel's Drm/amdgpu/vce: partial address patches, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53374 | Linux Kernel's Drm/amdgpu: zero-initialize GART table on allocation, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53369 | Linux Kernel's Udf: descriptors with oversized CRC length, Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-53366 | Linux Kernel's Ipv4: account for fraggap on the paged allocation path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53361 | Linux Kernel AF_UNIX Garbage Collector Does Not Set the gc_in_progress Flag Before Running, Allowing Concurrent Collection Runs | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53360 | Linux Kernel's KVM Has an out-of-bounds read in SEV: Require in-GHCB scratch area if GHCB v2+ is in use, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53357 | Linux Kernel's Bluetooth: UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del(), Scoring 8.0 | 8.0 High | Updated |
| 2026-10-16 | CVE-2026-53354 | Linux Kernel's Arm64/Errata: Mitigate TLBI errata on various Arm CPUs, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53341 | Linux Kernel's Fhandle: UAF due to unlocked ->mnt_ns read in may_decode_fh(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53329 | Linux Kernel's Drm/amd/display Has an uncontrolled recursion in krealloc_array() in dal_vector_reserve(), Scoring 7.0 | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-53290 | Linux Kernel's Drm/xe/eustall Has an use-after-free in drm_dev_put called before stream disable in close, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53281 | Linux Kernel Intel VT-d IOMMU Risks Null Pointer Dereference or Reference Count Corruption During Context Entry Operations | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53273 | Linux Kernel's Tee/Optee: use-after-free when the client exits before the supplicant, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53270 | Linux Kernel's Ipvs: the svc scheduler ptr early on edit, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53267 | Linux Kernel Netfilter nft_ct Returns Template Connection Tracking Objects During GET Evaluation, Enabling Null Pointer Dereference | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53262 | Linux Kernel's L2tp/Pppol2tp Has an use-after-free in hold reference to session in pppol2tp_ioctl(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53260 | Linux Kernel's TCP Has an use-after-free in preempt_{disable,enable}_nested() in reqsk_queue_hash_req(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53250 | Linux Kernel's Xsk Has a race condition in cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53246 | Linux Kernel's SCTP Has an out-of-bounds write in cached peer INIT chunk length in COOKIE_ECHO processing, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53232 | Linux Kernel SFP Network PHY Driver Does Not Clean Up the SFP Upstream Object When PHY Probing Fails | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53230 | Linux Kernel's Net/mlx5 Has an out-of-bounds read in slab-out-of-bounds in mlx5_query_nic_vport_mac_list, Scoring 8.7 | 8.7 High | Updated |
| 2026-10-16 | CVE-2026-53229 | Linux Kernel's Net/mlx5e/Xsk: DMA and xdp_frame leak on XDP_TX xmit failure, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53224 | Linux Kernel's SCTP Has an out-of-bounds read in embedded INIT chunk and address list lengths in cookie, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-53217 | Linux Kernel Marvell PP2 Network Driver Does Not Sync RX DMA Data at the Hardware Packet Offset, Causing Cache Coherency Issues | 8.6 High | Updated |
| 2026-10-16 | CVE-2026-53215 | Linux Kernel's net/Mvpp2: refill RX buffers before XDP or skb use, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53209 | Linux Kernel's Bluetooth/Hci_sync Has an out-of-bounds write in oversized Broadcast Announcement prepend, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53205 | Linux Kernel's Accel/ivpu Has an out-of-bounds write in bounds checks for firmware log indices, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53203 | Linux Kernel's Accel/ivpu: buffer overflow check in MS get_info_ioctl, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53202 | Linux Kernel's Accel/ivpu Has an uncontrolled recursion in signed integer truncation in IPC receive, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53199 | Linux Kernel's Hv_netvsc: kmap_local_page in netvsc_copy_to_send_buf, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53194 | Linux Kernel KL5KUSB105 USB Serial Driver Writes Beyond the Bulk-Out Transfer Buffer | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53193 | Linux Kernel's ALSA/Timer Has an use-after-free in Forcibly close timer instances at closing, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53191 | Linux Kernel's Io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53189 | Linux Kernel's Mm/huge_memory: file PMD counter before folio_put(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53188 | Linux Kernel's RDMA/core: the passed in fops for ib_get_ucaps(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53187 | Linux Kernel's RDMA/core Has an out-of-bounds write in cpu_id against nr_cpu_ids in DMAH alloc, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53186 | Linux Kernel's RDMA/srp: SRP_RSP sense copy by the received length, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-53185 | Linux Kernel zram Compressed Block Device Use-After-Free in zram_bvec_write_partial During Partial Write | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53182 | Linux Kernel's WiFi/Nl80211: oversized EMA RNR lists, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53180 | Linux Kernel's Timers/migration Has an improper locking in livelock in tmigr_handle_remote_up(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53176 | Linux Kernel's IB/isert Has an integer underflow in login PDUs shorter than ISER_HEADERS_LEN, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53151 | Linux Kernel's Rxrpc: the ACK parser to extract the SACK table for parsing, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53145 | Linux Kernel DRM GEM change_handle Ioctl Has a TOCTOU Race in the Handle Swap During Prime Operations, Enabling Privilege Escalation | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53133 | Linux Kernel's RDMA/umem: truncation for block sizes >= 4G, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53132 | Linux Kernel's Vsock/virtio Has a memory leak in potential unbounded skb queue, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53110 | Linux Kernel's S390/bpf: Zero-extend bpf prog return values and kfunc arguments, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53096 | Linux Kernel's BPF Has a null pointer dereference in RCU-safe iteration in dev_map_redirect_multi() SKB path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53094 | Linux Kernel BPF Offload Subsystem Retains a Stale Program Pointer After Constant Blinding Replaces the Program | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53092 | Linux Kernel's BPF: linked reg delta tracking when src_reg == dst_reg, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53091 | Linux Kernel's net: pull headers in qdisc_pkt_len_segs_init(), Scoring 8.4 | 8.4 High | Updated |
| 2026-10-16 | CVE-2026-53090 | Linux Kernel's BPF: ld_{abs,ind} failure path analysis in subprogs, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53088 | Linux Kernel's net/Bcmgenet: off-by-one in bcmgenet_put_txcb, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53086 | Linux Kernel's net/Bcmgenet Has a race condition in racing timeout handler, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53085 | Linux Kernel's BPF Has an use-after-free in mm lifecycle in open-coded task_vma iterator, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53081 | Linux Kernel's BPF: Enforce regsafe base id consistency for BPF_ADD_CONST scalars, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53078 | Linux Kernel BPF Verifier Allows Same-Register dst/src in sock_ops Context, Enabling Out-of-Bounds Read and Pointer Leak | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53076 | Linux Kernel's BPF: OOB in pcpu_init_value, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-53075 | Linux Kernel's Ppp: require CAP_NET_ADMIN in target netns for unattached ioctls, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53072 | Linux Kernel's Bluetooth Has an improper locking in locking in hci_conn_request_evt() with HCI_PROTO_DEFER, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53071 | Linux Kernel's Bluetooth/L2cap Has an improper locking in chan lock in l2cap_ecred_reconf_rsp, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53070 | Linux Kernel SCTP Over UDP Tunnel Does Not Disable Bottom Halves Before Calling udp_tunnel_xmit_skb, Enabling Race Conditions | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53069 | Linux Kernel XDP Master Redirect Dereferences a Null Pointer When the Master Device Is Down | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53062 | Linux Kernel Device Mapper Cache SMQ Policy Invalidates Cache Blocks Without Holding the Required Locks | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53053 | Linux Kernel's Iommu/amd: clone_alias() to use the original device's devid, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-53049 | Linux Kernel GFS2 Cluster Filesystem Has Missing Log Locking, Enabling Concurrent Log Corruption, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-53033 | Linux Kernel BPF Sockmap AF_UNIX Socket Map Iterator Does Not Take the State Lock, Enabling Data Races | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53031 | Linux Kernel's BPF: node_id in arena_alloc_pages(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53016 | Linux Kernel's crypto Has an out-of-bounds write in ccp - copy IV using skcipher ivsize, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53011 | Linux Kernel's Net/sched/Taprio: use-after-free in advance_sched() on schedule switch, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-53003 | Linux Kernel's Pppoe: PFC frames, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-53000 | Linux Kernel Netfilter NAT Releases Hook Ops Without an RCU Grace Period, Risking Use-After-Free When Userspace Dumps Active Hook State | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52993 | Linux Kernel's TIPC Has a double free in double-free in tipc_buf_append(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-52991 | Linux Kernel Pressure Stall Information Scheduler Extension Has a Race Between File Release and Pressure Write Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52982 | Linux Kernel's net/USB/Rtl8150: use-after-free in rtl8150_start_xmit(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-52981 | Linux Kernel Neighbor Subsystem neigh_xmit Does Not Take skb Ownership, Enabling Double-Free on Transmit Error | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-52976 | Linux Kernel's Drm/xe Has an use-after-free in error cleanup in xe_exec_queue_create_ioctl(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52975 | Linux Kernel Network Bonding 802.3ad Mode Does Not Follow RCU Rules When Accessing port->aggregator, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52974 | Linux Kernel's net/Tls: strparser anchor skb leak on offload RX setup failure, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-52973 | Linux Kernel's futex Has an use-after-free in CLONE_THREAD requirement for private default hash alloc, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52971 | Linux Kernel Amazon ENA Network Driver PHC Module Has a Use-After-Free in the PTP get_timestamp Path | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52968 | Linux Kernel's KVM/S390/PCI Has an out-of-bounds read in GAIT table indexing due to double-scaling pointer arithmetic, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-52967 | Linux Kernel's Smb/client: possible infinite loop and oob read in symlink_data(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-52958 | Linux Kernel's Libceph Has an out-of-bounds read in potential out-of-bounds access in osdmap_decode(), Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-52957 | Linux Kernel's Libceph Has a null pointer dereference in potential null-ptr-deref in decode_choose_args(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-52955 | Linux Kernel libceph CRUSH Decode Function Has a Potential Out-of-Bounds Access, a 9.8 CVSS Memory Safety Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-52954 | Linux Kernel libceph Does Not Handle Red-Black Tree Insertion Errors in decode_choose_args, Leaking Memory | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-52953 | Linux Kernel Intel VT-d IOMMU Accesses a Stack Variable That Has Gone Out of Scope, Causing a Kernel Crash | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-52951 | Linux Kernel's Drm/xe/dma-buf: empty bo and UAF races, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52950 | Linux Kernel Intel Xe GPU Driver Has a Use-After-Free in the DMA Buffer Import Retry Loop | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52945 | Linux Kernel "wireguard: device: enable threaded NAPI", Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-52935 | Linux Kernel xfrm ESP-in-TCP Reuses a Partially Sent SKB on Retry, Causing Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52931 | Linux Kernel's Batman-ADV/Tp_meter Has an uninitialized memory use in use of uninit sender vars, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-52927 | Linux Kernel Bridge Netfilter ebtables compat_mtw_from_user Reads Out of Bounds on the 32-Bit Compatibility Path | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-52924 | Linux Kernel's SCTP Has an use-after-free in purge outqueue on stale COOKIE-ECHO handling, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-52920 | Linux Kernel's netfilter/Xt_policy: strict mode inbound policy matching, Scoring 8.3 | 8.3 High | Updated |
| 2026-10-16 | CVE-2026-52915 | Linux Kernel IPv6 Hop-by-Hop Options Netfilter Module Accepts Oversized Option Lists, Enabling Out-of-Bounds Reads | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-52914 | Linux Kernel's Batman-ADV Has an out-of-bounds write in fragment reassembly length accounting, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-52908 | Linux Kernel's RDMA: During rereg_mr ensure that REREG_ACCESS is compatible, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46327 | Linux Kernel's device mapper: unlocked test for dm_suspended_md, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46325 | Linux Kernel's RDMA/rxe: iova-to-va conversion for MR page sizes != PAGE_SIZE, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-46324 | Linux Kernel's netfilter/Nf_tables: list_del_rcu for netlink hooks, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46319 | Linux Kernel's Net/sched/Act_ct Has an use-after-free in Only release RCU read lock after ct_ft, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46317 | Linux Kernel's KVM/Arm64: Reassign nested_mmus array behind mmu_lock, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-46316 | Linux Kernel's KVM/Arm64/Vgic-its: the translation cache reference only for the erased entry, Scoring 9.3 | 9.3 Critical | Updated |
| 2026-10-16 | CVE-2026-46300 | Linux Kernel SKBFL_SHARED_FRAG Marker Lost During sk_buff Coalescing on Siemens SIMATIC S7-1500 MFP Enables ESP In-Place Decrypt over Page-Cache Memory | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46280 | Linux Kernel HMM Test Module Does Not Evict Device Pages on File Close, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46271 | Linux Kernel's WiFi/Ath12k: do WoW offloads only on primary link, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46266 | Linux Kernel's Inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-46263 | Linux Kernel AMD Display Driver Accesses the Stream Encoder Array Out of Bounds With an Invalid Encoder Index | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46259 | Linux Kernel /proc Filesystem Reads a Task's real_parent Pointer Without RCU Protection in do_task_stat | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46253 | Linux Kernel Persistent RAM Store Driver Overflows a Buffer in persistent_ram_save_old When Saving Old Crash Logs | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46244 | Linux Kernel's netfilter/Nft_inner: IPv6 inner_thoff desync, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-46230 | Linux Kernel's Drm/amdgpu/vcn3: OOB reads when parsing dec msg, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-46204 | Linux Kernel's Drm/amdgpu/vcn4: OOB reads when parsing IB, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-46201 | Linux Kernel Intel Xe GPU Driver Leaks DMA Buffer Attachments When xe_gem_prime_import Fails | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46199 | Linux Kernel's Drm/amdgpu/vcn4: OOB reads when parsing dec msg, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-46197 | Linux Kernel AMD GPU KFD Does Not Validate the SVM ioctl nattr Count Against the Buffer Size, Enabling Out-of-Bounds Reads | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46181 | Linux Kernel Mellanox mlx4 RDMA Driver Misuses RCU Locking in mlx4_srq_event, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46178 | Linux Kernel Mellanox mlx4 RDMA Driver Leaks Shared Receive Queue Resources When mlx4_ib_create_srq Fails | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46176 | Linux Kernel's RDMA/mlx5: error path fall-through in mlx5_ib_dev_res_srq_init(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46166 | Linux Kernel's WiFi/Mac80211 Has an use-after-free in safe list iteration in radar detect work, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-46155 | Linux Kernel's Smb/client Has an out-of-bounds read in out-of-bounds read in smb2_compound_op(), Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-46152 | Linux Kernel's WiFi/Mac80211: stray 'static' from fast-RX rx_result, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-46145 | Linux Kernel Microsoft RDMA Network Adapter Driver Does Not Validate rx_hash_key_len, Enabling Out-of-Bounds Access | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46138 | Linux Kernel Bluetooth HCI Event Handler Reads Out of Bounds and Loops Infinitely in hci_le_create_big_complete_evt | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-46135 | Linux Kernel's Nvmet-tcp: race between ICReq handling and queue teardown, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-46133 | Linux Kernel RXE Software RDMA Driver Processes Packets With Unknown Opcodes Before the ICRC Check | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-46119 | Linux Kernel's Libceph Has an out-of-bounds read in slab-out-of-bounds access in auth message processing, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-46117 | Linux Kernel's RDMA/mana: user triggerable WARN_ON() in mana_ib_create_qp_rss(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46115 | Linux Kernel's block: pgmap check to biovec_phys_mergeable, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-46114 | Linux Kernel's RDMA/rxe Has a null pointer dereference in non-8-byte ATOMIC_WRITE payloads, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-46111 | Linux Kernel's Bluetooth/Hci_conn: potential UAF in create_big_sync, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46090 | Linux Kernel's ALSA/Aloop: peer runtime UAF during format-change stop, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-46078 | Linux Kernel EROFS Read-Only Filesystem Reads Out of Bounds When Processing Trailing Directory Entry nameoff Values | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-46076 | Linux Kernel KVM Nested SVM Does Not Raise #UD for Unhandled VMMCALL Instructions When L1 Has Not Intercepted Them | 7.9 High | Updated |
| 2026-10-16 | CVE-2026-46054 | Linux Kernel's SELinux: overlayfs mmap() and mprotect() access checks, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-46052 | Linux Kernel's ceph: only d_add() negative dentries when they are unhashed, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-46043 | Linux Kernel's RDMA/rxe Has an integer underflow in pad and ICRC before payload_size() in rxe_rcv, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-46027 | Linux Kernel's Net/smc: early lgr access in smc_clc_wait_msg, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-46024 | Linux Kernel libceph ceph_handle_auth_reply Has a Potential Null Pointer Dereference on Authentication Failure | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-45988 | Linux Kernel RxRPC Transport Re-Decrypts RESPONSE Packets Using Incorrect Key Material, a 9.8 CVSS Cryptographic Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-45984 | Linux Kernel's Gfs2: use-after-free in iomap inline data write path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45972 | Linux Kernel's Smb/Client: potential UAF and double free in smb2_open_file(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-45970 | Linux Kernel's bonding/Alb: UAF in rlb_arp_recv during bond up/down, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45959 | Linux Kernel's crypto Has a null pointer dereference in ccp - Fix a crash due to incorrect cleanup usage of kfree, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45955 | Linux Kernel's Md/md-llbitmap: percpu_ref not resurrected on suspend timeout, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-45945 | Linux Kernel Intel VT-d IOMMU Has a Race Condition During PASID Entry Replacement, Enabling Stale Translation Use | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-45944 | Linux Kernel's Iommu/vt-d: Present bit before tearing down context entry, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-45942 | Linux Kernel ext4 Filesystem Block Group Bitmap Inconsistency Check Uses Stale Cached Data, Masking Allocation Corruption | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45933 | Linux Kernel's BPF: Preserve id of register in sync_linked_regs(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45910 | Linux Kernel's RDMA/rxe: race condition in QP timer handlers, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45898 | Linux Kernel iWARP Connection Manager Work Queue List Is Corrupted When Removing Work Items, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-45894 | Linux Kernel's Iommu/vt-d: Present bit before tearing down PASID entry, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45878 | Linux Kernel's Drm/amdkfd: watch_id bounds checking in debug address watch v2, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45862 | Linux Kernel's Iommu/vt-d: Flush cache for PASID table before using it, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45861 | Linux Kernel's Gfs2: slab-use-after-free in qd_put, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-45860 | Linux Kernel's netfilter/Nf_conncount: increase the connection clean up limit to 64, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-45859 | Linux Kernel's netfilter/Nfnetlink_queue: do shared-unconfirmed check before segmentation, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-45856 | Linux Kernel's RDMA/uverbs Has an out-of-bounds read in wqe_size before using it in ib_uverbs_post_send, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-45852 | Linux Kernel RXE Software RDMA Driver Double-Frees Shared Receive Queue Memory in rxe_srq_from_init | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43961 | Red Hat Enterprise Linux 10 Vim's Security Flaw Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43494 | Linux Kernel RDS Network Protocol Does Not Reset op_nents When Zerocopy Page Pin Fails, Enabling Double-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43469 | Linux Kernel's Xprtrdma: Decrement re_receiving on the early exit paths, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43466 | Linux Kernel Mellanox mlx5e Ethernet Driver DMA FIFO Becomes Desynced During Error Completion Queue Entry Send Queue Recovery | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-43459 | Linux Kernel's ASoC/Soc-core Has an use-after-free in flush delayed work before removing DAIs and widgets, Scoring 7.3 | 7.3 High | Updated |
| 2026-10-16 | CVE-2026-43456 | Linux Kernel's bonding: type confusion in bond_setup_by_slave(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43452 | Linux Kernel's netfilter/X_tables: guard option walkers against 1-byte tail reads, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-43441 | Linux Kernel Network Bonding Driver Dereferences a Null Neighbor Table Pointer When IPv6 Is Disabled | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43437 | Linux Kernel's ALSA/Pcm: use-after-free on linked stream runtime in snd_pcm_drain(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43408 | Linux Kernel's ceph Has a null pointer dereference in a bunch of missing ceph_path_info initializers, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43407 | Linux Kernel libceph ceph_handle_auth_reply Has a Potential Out-of-Bounds Read, a 9.1 CVSS Memory Safety Flaw | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-43406 | Linux Kernel's Libceph Has an out-of-bounds read in potential out-of-bounds reads in process_message_header(), Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-43405 | Linux Kernel's Libceph: u32 for non-negative values in ceph_monmap_decode(), Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43402 | Linux Kernel's Kthread: kthread exit paths to prevent use-after-free, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43383 | Linux Kernel TCP MD5 Signature MAC Comparison Is Not Constant-Time, Enabling Timing Side-Channel Attacks, a 9.4 CVSS Flaw | 9.4 Critical | Updated |
| 2026-10-16 | CVE-2026-43374 | Linux Kernel Nexthop Group Entry Removal Has a Per-CPU Use-After-Free in remove_nh_grp_entry | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43370 | Linux Kernel's Drm/amdgpu: use-after-free race in VM acquire, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43368 | Linux Kernel Intel i915 GPU Driver Has a Potential Overflow of shmem Scatterlist Length on Large Allocations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43366 | Linux Kernel's Io_uring/kbuf: if target buffer list is still legacy on recycle, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43365 | Linux Kernel XFS Filesystem Uses Undersized l_iclog_roundoff Values, Causing Misaligned Log Writes | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-43362 | Linux Kernel's Smb/Client Has an out-of-bounds write in in-place encryption corruption in SMB2_write(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-43341 | Linux Kernel's Net/ipv6/Ioam6: schema length wraparound in trace fill, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43339 | Linux Kernel IPv6 Address Configuration addrconf_permanent_addr Has a Potential Use-After-Free on Permanent Address Removal | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43334 | Linux Kernel's Bluetooth: SMP: force responder MITM requirements before building the pairing response, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43332 | Linux Kernel's thermal/Core: thermal zone device registration error path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43329 | Linux Kernel's netfilter/Flowtable: strictly check for maximum number of actions, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43321 | Linux Kernel's BPF: Properly mark live registers for indirect jumps, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43304 | Linux Kernel's Libceph: define and enforce CEPH_MAX_KEY_LEN, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43280 | Linux Kernel Intel Xe GPU Driver Does Not Validate pat_index in madvise, Enabling Out-of-Bounds Kernel Memory Read | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-43279 | Linux Kernel's ALSA/Usb-audio: sanity check for OOB writes at silencing, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43278 | Linux Kernel's device mapper Has a double free in cloned request bio pointer when last clone bio completes, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43253 | Linux Kernel's Iommu/amd Has an improper locking in wait_on_sem() out of spinlock, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43248 | Linux Kernel's Vhost Has an out-of-bounds write in vdpa group bound check to vhost_vdpa, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43239 | Linux Kernel's Smb/Client: races in ->query_interfaces(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43237 | Linux Kernel's Drm/amdgpu Has an use-after-free in amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43233 | Linux Kernel's netfilter/Nf_conntrack_h323: OOB read in decode_choice(), Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-43215 | Linux Kernel's Cifs Has an improper locking in locking usage for tcon fields, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43214 | Linux Kernel's KVM/X86: SRCU protection for reading PDPTRs in __get_sregs2(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43213 | Linux Kernel's WiFi/Rtw89/PCI Has a null pointer dereference in sequence number of TX release report, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43211 | Linux Kernel's PCI Has an improper locking in pci_slot_trylock() error handling, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43206 | Linux Kernel's Drm/amdkfd Has an out-of-bounds write in out-of-bounds write in kfd_event_page_set(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43199 | Linux Kernel's Net/mlx5e: "scheduling while atomic" in IPsec MAC address query, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43198 | Linux Kernel TCP Stack Has a Potential Race Condition in tcp_v6_syn_recv_sock, a 9.8 CVSS Memory Safety Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43197 | Linux Kernel's Netconsole: OOB reads, msg is not nul-terminated, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-43194 | Linux Kernel's net: consume xmit errors of GSO frames, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43190 | Linux Kernel's netfilter/Xt_tcpmss Has an out-of-bounds read in remaining length before reading optlen, Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-43187 | Linux Kernel's XFS Has an integer underflow in delete attr leaf freemap entries when empty, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43186 | Linux Kernel's Ipv6/Ioam: heap buffer overflow in __ioam6_fill_trace_data(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43180 | Linux Kernel's net/USB/Kaweth: TX queue manipulation in kaweth_set_rx_mode, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43176 | Linux Kernel's WiFi/Rtw89/PCI: release report content before using for RTL8922DE, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43172 | Linux Kernel's WiFi/Iwlwifi: 22000 series SMEM parsing, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43158 | Linux Kernel's XFS Has an out-of-bounds write in freemap adjustments when adding xattrs to leaf blocks, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43153 | Linux Kernel's XFS: xfs_attr_leaf_hasname, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43150 | Linux Kernel's Perf/arm-cmn Has an out-of-bounds write in unsupported hardware configurations, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43139 | Linux Kernel IPv6 xfrm Source Address Lookup Can Return an Uninitialized Address From xfrm6_get_saddr | 8.6 High | Updated |
| 2026-10-16 | CVE-2026-43134 | Linux Kernel's Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-43133 | Linux Kernel KVM Nested SVM VMLOAD/VMSAVE Emulation Does Not Always Use vmcb01, Leaking Guest State Across Nested Transitions | 7.9 High | Updated |
| 2026-10-16 | CVE-2026-43128 | Linux Kernel's RDMA/umem Has a double free in double dma_buf_unpin in failure path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43125 | Linux Kernel Distributed Lock Manager dlm_search_rsb_tree Accepts Unvalidated Resource Name Lengths, a 9.8 CVSS Out-of-Bounds Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43120 | Linux Kernel's RDMA/irdma Has a double free in double free related to rereg_user_mr, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43091 | Linux Kernel's XFRM: Wait for RCU readers during policy netns exit, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43084 | Linux Kernel's netfilter/Nfnetlink_queue Has an use-after-free in make hash table per queue, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43083 | Linux Kernel's net/Ioam6: OOB and missing lock, Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-16 | CVE-2026-43078 | Linux Kernel Crypto AF_ALG Socket af_alg_pull_tsgl Page Reassignment Has an Integer Overflow | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43067 | Linux Kernel's ext4: wraparound when searching for blocks for indirect mapped blocks, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43063 | Linux Kernel XFS Filesystem Drops an Inode Reference After a Failed iget in xfs_attri_recover_work, Causing a Refcount Underflow | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43062 | Linux Kernel's Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-43060 | Linux Kernel's netfilter/Nft_ct: pending enqueued packets on removal, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43056 | Linux Kernel's net/Mana: use-after-free in add_adev() error path, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43055 | Linux Kernel's SCSI/Target/File: kzalloc_flex for aio_cmd, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-43051 | Linux Kernel's HID/Wacom Has an out-of-bounds read in out-of-bounds read in wacom_intuos_bt_irq, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-43048 | Linux Kernel's HID/Core: Mitigate potential OOB by removing bogus memset(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43047 | Linux Kernel's HID/Multitouch Has an out-of-bounds write in to ensure report responses match the request, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43042 | Linux Kernel's Mpls Has an out-of-bounds read in seqcount to protect the platform_label{,s} pair, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-43037 | Linux Kernel IPv6 Tunnel Driver Does Not Clear the skb Control Buffer in ip4ip6_err, a 9.8 CVSS Information Leak | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-43023 | Linux Kernel's Bluetooth: SCO: fix race conditions in sco_sock_connect(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43019 | Linux Kernel's Bluetooth/Hci_conn: potential UAF in set_cig_params_sync, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43018 | Linux Kernel's Bluetooth/Hci_event: potential UAF in hci_le_remote_conn_param_req_evt, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-43016 | Linux Kernel's BPF/Sockmap: use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-43009 | Linux Kernel's BPF: incorrect pruning due to atomic fetch precision tracking, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31786 | Linux Kernel Buffer overflow in drivers/xen/sys-hypervisor.c, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31779 | Linux Kernel's WiFi/Iwlwifi/Mvm Has an out-of-bounds read in potential out-of-bounds read in iwl_mvm_nd_match_info_handler(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-31774 | Linux Kernel's Io_uring/net Has an out-of-bounds read in slab-out-of-bounds read in io_bundle_nbufs(), Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-31773 | Linux Kernel's Bluetooth: SMP: derive legacy responder STK authentication from MITM state, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-31772 | Linux Kernel Bluetooth HCI Sync hci_le_big_create_sync Overflows a Stack Buffer When Adding BIS Indices | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31758 | Linux Kernel's USB/Usbtmc Has an use-after-free in Flush anchored URBs in usbtmc_release, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31742 | Linux Kernel's Vt Has an out-of-bounds read in discard stale unicode buffer on alt screen exit after resize, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31739 | Linux Kernel NVIDIA Tegra Crypto Driver Is Missing the CRYPTO_ALG_ASYNC Flag, Causing Incorrect Algorithm Registration | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-31731 | Linux Kernel Thermal Core Zone Removal Races With System Resume, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31719 | Linux Kernel's crypto: krb5enc - fix async decrypt skipping hash verification, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31679 | Linux Kernel's Openvswitch: MPLS set/set_masked payload length, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-31678 | Linux Kernel Open vSwitch Puts Tunnel Network Device References Before RCU Grace Period Elapses, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31675 | Linux Kernel's Net/sched/Sch_netem Has an out-of-bounds read in out-of-bounds access in packet corruption, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31668 | Linux Kernel's Seg6: separate dst_cache for input and output paths in seg6 lwtunnel, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31667 | Linux Kernel's input Has an improper locking in uinput - fix circular locking dependency with ff-core, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31666 | Linux Kernel's btrfs: incorrect return value after changing leaf in lookup_extent_data_ref(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31663 | Linux Kernel's XFRM: hold dev ref until after transport_finish NF_HOOK, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31662 | Linux Kernel's TIPC: bc_ackers underflow on duplicate GRP_ACK_MSG, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31659 | Linux Kernel's Batman-ADV: oversized global TT response buffers, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31657 | Linux Kernel's Batman-ADV Has a null pointer dereference in hold claim backbone gateways by reference, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31656 | Linux Kernel's Drm/i915/gt: refcount underflow in intel_engine_park_heartbeat, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31648 | Linux Kernel Page Cache filemap_map_pages Overflows the Page Count Calculation on Large Mappings | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31638 | Linux Kernel's Rxrpc Has a null pointer dereference in Only put the call ref if one was acquired, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31633 | Linux Kernel's Rxrpc: integer overflow in rxgk_verify_response(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31631 | Linux Kernel's Rxrpc Has an out-of-bounds write in buffer overread in rxgk_do_verify_authenticator(), Scoring 8.2 | 8.2 High | Updated |
| 2026-10-16 | CVE-2026-31609 | Linux Kernel SMB Direct Client Double-Frees a Send I/O Structure in smbd_free_send_io After smbd_send_batch_flush, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31607 | Linux Kernel's Usbip Has an out-of-bounds write in number_of_packets in usbip_pack_ret_submit(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31600 | Linux Kernel arm64 Memory Management Does Not Correctly Handle Invalid Large Leaf Page Table Mappings | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31598 | Linux Kernel's Ocfs2 Has an improper locking in possible deadlock between unlink and dio_end_io_write, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31588 | Linux Kernel's KVM/X86 Has an use-after-free in scratch field in MMIO fragment to hold small write values, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-31570 | Linux Kernel's Can/Gw: OOB heap access in cgw_csum_crc8_rel(), Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-31566 | Linux Kernel AMD GPU KFD Releases a Fence Before Waiting on It in amdgpu_amdkfd_submit_ib, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31557 | Linux Kernel's Nvmet: async event work off nvmet-wq, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31554 | Linux Kernel sys_futex_requeue Accepts Mismatched Futex Flags Between the Two Queues, Enabling Incorrect State Transitions | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31548 | Linux Kernel cfg80211 WiFi Subsystem Does Not Cancel the pmsr_free_wk Worker When the wdev Goes Down, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31539 | Linux Kernel's Smb/Smbdirect: introduce smbdirect_socket.recv_io.credits.available, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-31528 | Linux Kernel Performance Monitoring Event Groups Use the Wrong PMU Context, Causing Incorrect Hardware Counter Attribution | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31525 | Linux Kernel's BPF Has an out-of-bounds write in undefined behavior in interpreter sdiv/smod for INT_MIN, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31516 | Linux Kernel xfrm Policy Hash Threshold Work Item Races With Network Namespace Teardown, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31513 | Linux Kernel's Bluetooth Has an out-of-bounds read in L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-31511 | Linux Kernel's Bluetooth Has an use-after-free in MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31505 | Linux Kernel's Iavf Has an out-of-bounds write in out-of-bounds writes in iavf_get_ethtool_stats(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31502 | Linux Kernel's team driver: header_ops type confusion with non-Ethernet ports, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31486 | Linux Kernel's hwmon Has an improper locking in (pmbus/core) Protect regulator operations with mutex, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-31479 | Linux Kernel's Drm/xe: keep track of remap prev/next, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31478 | Linux Kernel Kernel SMB Server smb2_calc_max_out_buf_len Uses a Hardcoded Header Length, Causing Out-of-Bounds Output Buffers, a 9.8 CVSS Flaw | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31474 | Linux Kernel's Can/Isotp: tx.buf use-after-free in isotp_sendmsg(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31473 | Linux Kernel's media/Mc, v4l2 Has an use-after-free in REINIT and REQBUFS with req_queue_mutex, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31470 | Linux Kernel's Virt/Tdx-guest Has an out-of-bounds write in handling of host controlled 'quote' buffer length, Scoring 7.1 | 7.1 High | Updated |
| 2026-10-16 | CVE-2026-31468 | Linux Kernel VFIO PCI DMA Buffer Feature Has a Double-Free on Error Paths | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31464 | Linux Kernel's SCSI/Ibmvfc: OOB access in ibmvfc_discover_targets_done(), Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-31454 | Linux Kernel's XFS Has an use-after-free in save ailp before dropping the AIL lock in push callbacks, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31453 | Linux Kernel XFS Filesystem Dereferences Log Items After the Push Callback Has Released Them, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31442 | Linux Kernel's Dmaengine/Idxd Has an out-of-bounds read in possible invalid memory access after FLR, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31436 | Linux Kernel's Dmaengine/Idxd Has a null pointer dereference in possible wrong descriptor completion in llist_abort_desc(), Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-16 | CVE-2026-31435 | Linux Kernel's Netfs Has an out-of-bounds read in read abandonment during retry, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-31419 | Linux Kernel's net/bonding: use-after-free in bond_xmit_broadcast(), Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31408 | Linux Kernel's Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-31401 | Linux Kernel's HID/BPF: buffer overflow in hid_hw_request, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-31393 | Linux Kernel's Bluetooth Has an out-of-bounds read in L2CAP: Validate L2CAP_INFO_RSP payload length before access, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-31392 | Linux Kernel's Smb/Client: krb5 mount with username option, Scoring 8.1 | 8.1 High | Updated |
| 2026-10-16 | CVE-2026-23466 | Linux Kernel Intel Xe GPU Driver Lacks GGTT MMIO Access Protection, Enabling Race Conditions on Global Graphics Translation Table Operations | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-23462 | Linux Kernel's Bluetooth: HIDP: Fix possible UAF, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-23461 | Linux Kernel's Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user, Scoring 8.8 | 8.8 High | Updated |
| 2026-10-16 | CVE-2026-23445 | Linux Kernel's Igc: page fault in XDP TX timestamps handling, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-23440 | Linux Kernel's Net/mlx5e: race condition during IPSec ESN update, Scoring 7.5 | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-23437 | Linux Kernel's net/Shaper: late read accesses to the hierarchy, Scoring 7.8 | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-111684 | Magistrala Certificate API Accepts Foreign Tenant Identifiers, Letting Authenticated Workspace Members Revoke, Issue, and View Certificates Belonging to Other Tenants | 8.3 High | Updated |
| 2026-10-16 | CVE-2026-109813 | Moxa AIG-302 Stores a Hard-coded Cryptographic Private Key in /usr/bin/sysman, Letting Unauthenticated Adjacent-Network Attackers Compromise Communications Confidentiality and Integrity | 8.6 High | Updated |
| 2026-10-16 | CVE-2026-105959 | spice-server's GLZ Encoder Truncates a size_t to int During VM Live Migration, Letting an Authenticated SPICE Client Overflow the Heap | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-105958 | spice-server's SPICE_MSGC_MIGRATE_DATA Handlers Accept Client-Supplied Offsets Without Bounds Checks, Exposing Heap Memory or Triggering Corruption During VM Live Migration | 7.5 High | Updated |
| 2026-10-16 | CVE-2026-105228 | Unauthenticated Remote Attackers Can Disclose Sensitive Information from Delta ISPSoft Through an Out-of-bounds Read That Requires User Interaction | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-105227 | Delta ISPSoft Out-of-bounds Read Exposes Sensitive Information to Unauthenticated Remote Attackers, Requiring User Interaction to Trigger | 7.0 High | Updated |
| 2026-10-16 | CVE-2026-104715 | cifs-utils Accepts Unsanitized Values from User-Controlled Credentials Files, Letting Low-Privilege Local Attackers Inject CIFS Mount Options and Gain Root on Red Hat Enterprise Linux | 7.8 High | Updated |
| 2026-10-16 | CVE-2026-102764 | BeyondTrust Remote Support Internal Components Fail to Validate Message Origins, Enabling Arbitrary File Operations on the Appliance; CISA KEV Deadline for Covered Entities: October 19th | 9.3 Critical | KEV |
| 2026-10-16 | CVE-2026-102560 | libsoup permessage-deflate Extension Wraps GByteArray Growth Calculation on Large Compressed WebSocket Messages, Writing Past the Heap Buffer | 8.6 High | Updated |
| 2026-10-16 | CVE-2026-102559 | libsoup Wraps Size Values When Masking Large Outgoing WebSocket Client Frames, Causing Heap Overflow During Message Send | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-4631 | Unauthenticated Remote Os Command Injection in Red Hat Red Hat Enterprise Linux 10 Rates 9.8 CVSS | 9.8 Critical | EPSS-Imminent |
| 2026-10-15 | CVE-2026-99999 | Critical Linux Linux Kernel Vulnerability Scores 9.3 CVSS | 9.3 Critical | Updated |
| 2026-10-15 | CVE-2026-96540 | SonicWall Network Security Manager (NSM) Authorization Bypass Permits Privilege Escalation | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-93201 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-93176 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-93175 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-93148 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-93144 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-93125 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-93122 | Linux Kernel USB core Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-93116 | Linux Linux Kernel Vulnerability Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-93105 | Linux Kernel io_uring Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-92485 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90427 | Linux Linux Kernel Vulnerability Rated 7.4 CVSS | 7.4 High | Updated |
| 2026-10-15 | CVE-2026-90408 | Linux Kernel Wi-Fi subsystem Vulnerability Rated 7.7 CVSS | 7.7 High | Updated |
| 2026-10-15 | CVE-2026-90401 | Linux Linux Kernel Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-90381 | Linux Kernel kernel performance subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-90380 | Linux Kernel Wi-Fi subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-90347 | Linux Kernel seccomp filter Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-15 | CVE-2026-90317 | Linux Kernel eBPF Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90301 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-90289 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90234 | Linux Kernel NFS client Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-90217 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90177 | Linux Kernel Traffic Control (tc) Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90174 | Linux Kernel ksmbd SMB server Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-90162 | Linux Kernel ksmbd SMB server Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-90146 | Linux Kernel netlink Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90142 | Linux Kernel virtio driver Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90111 | Linux Kernel IPv6 network stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-90104 | Critical Linux Kernel NFS client Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-90093 | Linux Kernel Bluetooth stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-89912 | Linux Kernel KVM hypervisor Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-89907 | Linux Kernel KVM hypervisor Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-89709 | Linux Kernel NFS client Vulnerability Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-89705 | Linux Kernel NFS client Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-89654 | Critical Linux Kernel kernel performance subsystem Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-89638 | Linux Linux Kernel Vulnerability Permits Privilege Escalation | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-89633 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-89601 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-89537 | Critical Linux Kernel NFS client Vulnerability Scores 9.1 CVSS | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-89534 | Linux Kernel RDMA subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-89513 | Linux Kernel KVM hypervisor Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-86567 | Red Hat Red Hat Enterprise Linux 10 Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-86565 | Red Hat Red Hat Enterprise Linux 10 Out-Of-Bounds Write Rated 8.2 CVSS | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-86562 | Red Hat Red Hat Enterprise Linux 10 Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-84854 | wibu-systems-ag wibukey Out-Of-Bounds Write Permits Kernel Panic | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-84393 | Fortinet FortiOS Exposes Improper Validation Of Certificate With Host Mismatch to Unauthenticated Network Attackers, Enabling Information Disclosure | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-80747 | Linux Kernel DRM graphics subsystem Vulnerability Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-15 | CVE-2026-80738 | Linux Kernel TCP stack Vulnerability Rated 7.3 CVSS | 7.3 High | Updated |
| 2026-10-15 | CVE-2026-80693 | Critical Linux Linux Kernel Vulnerability Scores 9.3 CVSS | 9.3 Critical | Updated |
| 2026-10-15 | CVE-2026-80692 | Linux Kernel Bluetooth stack Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-80634 | Critical Linux Kernel Netfilter Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-80631 | Linux Kernel Btrfs filesystem Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-80546 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-80545 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-80544 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-79678 | FreeIPA idp-add Command Passes Insufficiently Validated Input to a Constrained eval() Call, Enabling Code Injection via --organization or --base-url | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-78457 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-76578 | FreeIPA Self-Managed OTP Token ACI Requires No Authentication, Allowing Any User to Modify Sensitive Token Attributes | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-74750 | Linux Kernel kernel crypto subsystem Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-74747 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74745 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-74733 | Linux Kernel GPIO subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74723 | Critical Linux Kernel Btrfs filesystem Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-74721 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74715 | Linux Kernel eBPF Vulnerability Allows Kernel Panic | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74713 | Linux Kernel vhost subsystem Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-74605 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74580 | Linux Kernel vhost subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-74568 | Critical Linux Kernel kernel performance subsystem Vulnerability Scores 9.3 CVSS | 9.3 Critical | Updated |
| 2026-10-15 | CVE-2026-74562 | Linux Kernel IPv6 network stack Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-74561 | Linux Kernel IPv6 network stack Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-74544 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74530 | Linux Kernel Bluetooth stack Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-74529 | Linux Kernel Bluetooth stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74527 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-74449 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74374 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-74367 | Linux Kernel Wi-Fi subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74350 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-74338 | Linux Kernel eBPF Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74317 | Linux Kernel XDP Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-74277 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-74260 | Linux Kernel Netfilter Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-73198 | FreeIPA i18n Messages Endpoint Is Exploitable by Unauthenticated Remote Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-73197 | FreeIPA Accepts Oversized POST Requests Without Size Limits, Letting Unauthenticated Remote Attackers Exhaust Server Resources | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-72499 | Linux Kernel RDMA subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-72497 | Linux Kernel RDMA subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-72493 | Critical Linux Linux Kernel Vulnerability Scores 9.9 CVSS | 9.9 Critical | Updated |
| 2026-10-15 | CVE-2026-72477 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-72454 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-72440 | Linux Linux Kernel Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-72423 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-72404 | Linux Kernel TIPC protocol Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-72380 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-72345 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-72331 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-72329 | Critical Linux Linux Kernel Vulnerability Scores 9.3 CVSS | 9.3 Critical | Updated |
| 2026-10-15 | CVE-2026-69705 | Unauthenticated Remote Out-Of-Bounds Write in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-68470 | Linux Kernel Wi-Fi subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-68404 | Linux Kernel nl80211 wireless Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-68399 | Linux Kernel eBPF Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-68383 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-68382 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-68323 | Linux Kernel TIPC protocol Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-68305 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-68295 | Linux Kernel eBPF Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64560 | Linux Kernel POSIX CPU Timer Use-After-Free via Non-Leader exec() Race on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64552 | Linux Kernel virtio-net receive_big() Length Bounds Check Error Allows Malicious Device to Trigger Out-of-Bounds Write on Siemens SIMATIC S7-1500 MFP | 8.4 High | Updated |
| 2026-10-15 | CVE-2026-64545 | Linux Kernel XDP Master Redirect NULL Pointer Dereference on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-64423 | Linux Kernel IPv4 IGMP Use-After-Free During Network Device Teardown on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64422 | Linux Kernel IPv4 TCP Reordering Sysctl and MTU Probe Size Validation Gap on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-64413 | Linux Kernel ebtables chainstack Array Not Zeroed Before Use on Siemens SIMATIC S7-1500 MFP | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-64412 | Linux Kernel ebtables Module Name Not Null-Terminated Before Lookup on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-64411 | Linux Kernel ebtables Update Counter Path Does Not Null-Terminate Table Name Before Lookup on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-64400 | Linux Kernel ksmbd SMB server Vulnerability Rated 8.6 CVSS | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-64388 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64375 | Linux Kernel proc ptrace_may_access Race via FD Links Not Locked by exec_update_lock on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64317 | Linux Kernel ISO 9660 Rock Ridge Symlink Component Bounds Not Enforced Against SL Record on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-64283 | Linux Kernel KVM hypervisor Integer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-64279 | Linux Kernel I2C Adapter Deregistration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64123 | Linux Kernel netlink Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-64117 | Linux Kernel Wi-Fi subsystem Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-64067 | Unauthenticated Remote Improper Locking in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-64057 | Linux Linux Kernel Improper Locking Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-63941 | Linux Kernel KVM hypervisor Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-63879 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-63858 | Linux Kernel Netfilter Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53401 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53400 | Linux Kernel I2C Adapter Registration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53362 | Linux Kernel's Unspecified Flaw Allows Local Attackers to Gain Elevated Privileges on Affected Systems; CISA's August 30th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-10-15 | CVE-2026-53358 | Linux Kernel Bluetooth stack Improper Locking Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-53356 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53275 | Linux Kernel IPv6 Multicast MLD Query Processing Use-After-Free on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-53268 | Linux Kernel netfilter conntrack_irc Out-of-Bounds Read on Command Parse Failure on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-53265 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53264 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53256 | Linux Kernel Bluetooth stack Use-After-Free Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-15 | CVE-2026-53255 | Linux Kernel Bluetooth stack Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-53254 | Linux Kernel Bluetooth stack Out-Of-Bounds Read Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-53253 | Linux Kernel Bluetooth stack Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-53242 | Linux Kernel ALSA sound subsystem Null Pointer Dereference Allows Kernel Panic | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53239 | Linux Kernel xfrm Policy Inexact Bin Use-After-Free in xfrm_policy_bysel_ctx on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53228 | Critical Linux Kernel IPv6 network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-53225 | Linux Kernel SCTP ASCONF Lookup Reads Past the Validated Header Boundary, Exposing Uninitialized Memory to Downstream Address Parameter Processing | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-53223 | Linux Kernel Timestamp Control Message Handling Gap in Non-Error Queue skbs on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-53221 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-53212 | Linux Kernel Netfilter Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53198 | Linux Kernel ksmbd SMB server Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-53192 | Linux Kernel kernel performance subsystem Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53184 | Linux Kernel TCP stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-53183 | Linux Kernel TCP stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-53149 | Linux Linux Kernel Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-53148 | Linux Kernel XDP Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53147 | Linux Kernel XDP Out-Of-Bounds Read Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-53146 | Linux Linux Kernel Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-53131 | Critical Linux Kernel Netfilter Vulnerability Scores 9.4 CVSS | 9.4 Critical | Updated |
| 2026-10-15 | CVE-2026-53050 | Linux Kernel Quota dquot_scan_active Race with Quota Deactivation on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53025 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53009 | Red Hat Enterprise Linux Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-53006 | Linux Kernel ICMPv6 Use-After-Free via Pointer Cached Before pskb_pull on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-53002 | Linux Kernel netfilter Conntrack sprintf Usage Risks Buffer Overrun on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-52999 | Linux Kernel netfilter nfnetlink_osf Out-of-Bounds Read in Option Matching on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-52998 | Linux Kernel netfilter nfnetlink_osf NULL Pointer Dereference in TTL Check on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-52986 | Linux Kernel SIP Conntrack NULL Pointer Dereference via Unsafe Port Parsing on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-52960 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-52956 | Linux Kernel Traffic Control (tc) Out-Of-Bounds Read Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-52947 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-52946 | Linux Kernel fcntl Async Signal Lock Order Inversion Between SOFTIRQ-Safe and SOFTIRQ-Unsafe Paths on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-52943 | Linux Kernel sk_buff Zerocopy Reference Missing in pskb_carve Helpers on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-52942 | Linux Kernel netfilter nf_log MAC Header Dump Not Guarded Against Unset Headers on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-52933 | Linux Kernel io_uring Poll Ownership Check Uses Signed Comparison, Creating Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-52929 | Linux Kernel SCTP network stack Null Pointer Dereference Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-52923 | Linux Linux Kernel Missing Release Of Memory After Effective Lifetime Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-52918 | Linux Kernel Bluetooth stack Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-52917 | Linux Kernel SCTP network stack Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-52912 | Linux Kernel netfilter nf_queue Bridge Device Reference Held Too Briefly in br_pass_frame_up on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-52910 | Linux Kernel BPF Reuseport cBPF Program Free Before RCU Grace Period on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-52909 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46333 | Linux Kernel ptrace Dumpability Logic Flaw Risks Privilege Escalation via Memory Image Exposure on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46331 | Linux Linux Kernel Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46330 | Linux Kernel TCP stack Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46323 | Linux Kernel GRO zcopy Frags Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46322 | Linux Kernel vhost subsystem Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46321 | Linux Kernel virtio driver Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46320 | Linux Kernel vhost subsystem Vulnerability Rated 7.4 CVSS | 7.4 High | Updated |
| 2026-10-15 | CVE-2026-46311 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46307 | Linux Kernel signal handling Out-Of-Bounds Read Rated 8.3 CVSS | 8.3 High | Updated |
| 2026-10-15 | CVE-2026-46306 | Linux Kernel Flow Dissector PPPoE PFC Frames Dissected When They Should Be Skipped on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-46304 | Linux Kernel TCP stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-46303 | Linux Kernel ISO 9660 Rock Ridge CE Continuation Extent Not Validated Against Volume Size on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-46294 | Linux Kernel TLS offload Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46275 | Linux Kernel Bluetooth stack Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46243 | Linux Linux Kernel Improper Input Validation Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46234 | Linux Kernel VSOCK driver Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46227 | Linux Kernel SCTP network stack Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46210 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46209 | Linux Kernel DRM graphics subsystem Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46195 | Unauthenticated Remote Null Pointer Dereference in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-46191 | Linux Linux Kernel Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46190 | Linux Linux Kernel Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46185 | Unauthenticated Remote Out-Of-Bounds Read in Linux Linux Kernel Rates 9.1 CVSS | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-46180 | Linux Kernel Wi-Fi subsystem Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46177 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-46174 | Linux Kernel AMD Zen2 Op Cache Improper Resource Isolation on Siemens SIMATIC S7-1500 MFP Enables Cross-Process Leakage | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-46173 | Linux Kernel Exit Path Race Causes Preemption of Oopsing TASK_DEAD Task on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46163 | Linux Kernel Wi-Fi subsystem Improper Validation Of Array Index Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46150 | Linux Linux Kernel Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46149 | Linux Linux Kernel Uncontrolled Recursion Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46137 | Critical Linux Kernel TCP stack Race Condition Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-46136 | Linux Kernel Wi-Fi subsystem Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46125 | Linux Kernel Wi-Fi subsystem Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-46124 | Linux Kernel NFS client Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-46122 | Linux Kernel Wi-Fi subsystem Improper Validation Of Array Index Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46120 | Linux Kernel IPv6 network stack Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46116 | Linux Kernel xfrm_state List Defensively Not Unhashed in __xfrm_state_delete on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46113 | Linux Kernel KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-46110 | Linux Linux Kernel Null Pointer Dereference Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-46107 | Linux Linux Kernel Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46102 | Linux Linux Kernel Missing Release Of Memory After Effective Lifetime Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-46099 | Linux Kernel IPv6 network stack Improper Update Of Reference Count Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-46070 | Linux Linux Kernel Out-Of-Bounds Write Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46069 | Linux Kernel Wi-Fi subsystem Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46065 | Linux Kernel signal handling Missing Release Of Memory After Effective Lifetime Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46064 | Linux Kernel kernel performance subsystem Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46056 | Linux Kernel Bluetooth stack Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-46047 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-46037 | Linux Kernel IPv4 ICMP Extended Echo Reply Type Not Validated Before Pointer Use on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-46033 | Linux Kernel authencesn Instance Creation Accepts Short Hash Digests That Could Lead to Incorrect Authentication on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46022 | Linux Kernel kernel performance subsystem Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-46015 | Linux Kernel TCP Listener Migration Race on Siemens SIMATIC S7-1500 MFP After Listening Socket Closes | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-45991 | Linux Linux Kernel Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-45843 | Linux Kernel TCP stack Vulnerability Rated 8.2 CVSS | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-45839 | Linux Linux Kernel Improper Validation Of Array Index Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43503 | Linux Kernel TCP stack Improper Control Of A Resource Through Its Lifetime Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-43502 | Linux Linux Kernel Missing Release Of Memory After Effective Lifetime Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43501 | Linux Kernel IPv6 RPL Source Routing Header Recompression Buffer Headroom Not Reserved on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-43499 | Linux Kernel rtmutex Slow Lock Waiter Task Reference Incorrect in remove_waiter on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43493 | Critical Linux Kernel kernel crypto subsystem Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-43414 | Unauthenticated Remote Double-Free in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-43350 | Linux Kernel NFS client Vulnerability Rated 7.6 CVSS | 7.6 High | Updated |
| 2026-10-15 | CVE-2026-43303 | Linux Kernel Page Allocator Free Path Leaves page->private Stale on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43117 | Critical Linux Kernel Btrfs filesystem Vulnerability Scores 9.1 CVSS | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-43116 | Linux Kernel netfilter ctnetlink Master Conntrack Access Without Sufficient Reference on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43114 | Critical Linux Kernel Netfilter Use Of Incorrect Operator Scores 9.4 CVSS | 9.4 Critical | Updated |
| 2026-10-15 | CVE-2026-43112 | Linux Kernel kernel audit subsystem Out-Of-Bounds Read Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-43111 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43110 | Linux Kernel Wi-Fi subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-43099 | Linux Kernel kernel performance subsystem Null Pointer Dereference Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-43093 | Linux Kernel XDP Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43074 | Linux Linux Kernel Missing Release Of Memory After Effective Lifetime Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43071 | Linux Kernel dcache Hashtable Out-of-Bounds Read When dhash_entries Set to 1 on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-43057 | Linux Kernel IPv6 Tunneled Traffic Checksum GSO Fallback Incorrectly Handled on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-43052 | Linux Kernel nl80211 wireless Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-43040 | Linux Kernel IPv6 NDISC Router Advertisement User Option Leaves Padding Fields Uninitialized on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-43038 | Linux Kernel IPv6 ICMP Error Generation Leaves skb2->cb[] Uncleared on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-43033 | Linux Kernel authencesn Out-of-Place Decryption Writes hiseq at Wrong Destination on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43030 | Linux Kernel BPF Verifier Incorrect Packet Pointer Safety Check on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43028 | Linux Kernel netfilter x_tables Name Null-Termination Gap Risks Out-of-Bounds Read on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-43027 | Linux Kernel netfilter CT Helper Pass-Through on Expect Cleanup on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-43025 | Linux Kernel netfilter ctnetlink Helper Out-of-Bounds Read on New Expectations on Siemens SIMATIC S7-1500 MFP | 7.3 High | Updated |
| 2026-10-15 | CVE-2026-43011 | Linux Kernel X.25 Socket Double-Free of skb on Memory Allocation Failure on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-33389 | Nozomi Networks Guardian Lack Of Administrator Control Over Security Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-33388 | Nozomi Networks Guardian Authorization Bypass Rated 7.4 CVSS | 7.4 High | Updated |
| 2026-10-15 | CVE-2026-31771 | Linux Kernel Bluetooth stack Vulnerability Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-31768 | Linux Kernel TI ADC SPI Read Uses Non-DMA-Safe Stack Buffer on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31761 | Linux Kernel IIO Gyro MPU3050 Device Registration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31712 | Linux Kernel ksmbd SMB server Out-Of-Bounds Write Rated 8.3 CVSS | 8.3 High | Updated |
| 2026-10-15 | CVE-2026-31711 | Linux Kernel ksmbd SMB server Missing Release Of Memory After Effective Lifetime Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-31709 | Linux Linux Kernel Improper Validation Of Consistency Within Input Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-31708 | Linux Linux Kernel Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-31705 | Critical Linux Kernel ksmbd SMB server Out-Of-Bounds Write Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31700 | Linux Kernel PACKET_VNET_HDR TOCTOU Race on mmap'd vnet_hdr in tpacket_snd on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31699 | Linux Kernel kernel crypto subsystem Out-Of-Bounds Write Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-31698 | Linux Kernel kernel crypto subsystem Out-Of-Bounds Write Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-31697 | Linux Kernel kernel crypto subsystem Out-Of-Bounds Write Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-31696 | Linux Linux Kernel Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31685 | Critical Linux Kernel Netfilter Vulnerability Scores 9.4 CVSS | 9.4 Critical | Updated |
| 2026-10-15 | CVE-2026-31682 | Linux Kernel Bridge Neighbor Discovery Sends ND Options Parsing Without Linearizing skb First on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-31680 | Linux Kernel IPv6 Flow Label Exclusive Option Freed Before RCU Teardown on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31676 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-31674 | Linux Kernel IPv6 Routing Match addrnr Exceeding IP6T_RT_HOPS Causes Out-of-Bounds Read on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-31673 | Linux Kernel Unix domain socket Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31669 | Linux Kernel MPTCP slab-use-after-free in __inet_lookup_established via Lockless ehash Table Walk on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31665 | Linux Kernel nftables CT Timeout Object Use-After-Free on Destroy on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31649 | Linux Kernel stmmac Ethernet Chain Mode Integer Underflow on Jumbo Frame Transmission on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31637 | Critical Linux Kernel kernel crypto subsystem Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31630 | Linux Kernel IPv6 network stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31629 | Linux Linux Kernel Improper Locking Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-31622 | Linux Linux Kernel Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-31613 | Linux Linux Kernel Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-31612 | Linux Kernel ksmbd SMB server Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-31611 | Linux Kernel ksmbd SMB server Vulnerability Rated 8.6 CVSS | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-31586 | Linux Kernel cgroup v1/v2 Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31583 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31580 | Linux Kernel TCP stack Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31563 | Linux Kernel MACB Network Driver Frees TX sk_buff in IRQ-Disabled Context Using Wrong Function on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-31533 | Linux Kernel TLS Encryption EBUSY Error Path Use-After-Free on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31532 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31508 | Linux Kernel Open vSwitch Teardown Releases Network Device Before Completion on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31507 | Linux Kernel SMC double-free of smc_spd_priv When tee() Duplicates Splice Pipe Buffer on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31504 | Linux Kernel PACKET Socket Fanout Use-After-Free via NETDEV_UP Race in packet_release on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31501 | Unauthenticated Remote Use-After-Free in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31500 | Linux Kernel Bluetooth stack Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31494 | Linux Kernel MACB Ethernet Driver Queue Statistics Array Size Mismatch on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31488 | Linux Kernel DRM graphics subsystem Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31485 | Linux Kernel SPI FSL LPSPI Teardown Order Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31469 | Linux Kernel virtio_net Use-After-Free in Destination Route on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31452 | Linux Kernel ext4 Inline-to-Extents Conversion Missing When Truncation Exceeds Inline Data Size on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31450 | Linux Kernel ext4 jinode Published Before Initialization Completes on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-10-15 | CVE-2026-31449 | Linux Kernel ext4 Extent Tree Index Bounds Validation Gap on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31448 | Linux Kernel ext4 mkdir/mknod Logical to Physical Block Mapping Infinite Loop via Residual Data on Siemens SIMATIC S7-1500 MFP | 9.4 Critical | Updated |
| 2026-10-15 | CVE-2026-31447 | Linux Kernel ext4 Rejects Mount of bigalloc Filesystems with s_first_data_block Not Zero on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31446 | Linux kernel ext4 use-after-free in update_super_work races with unmount after sysfs unregistration | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31417 | Linux Kernel X.25 Packet Fragment Length Integer Overflow on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-31414 | Linux Kernel netfilter Conntrack Expectation Helper Name Resolved from Wrong Source on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31407 | Linux Kernel Netfilter Out-Of-Bounds Write Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-31403 | Linux Kernel NFSD Network Reference Not Held for Full /proc/fs/nfs/exports Lifetime on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31402 | Linux Kernel NFSv4.0 LOCK Replay Cache Heap Overflow Corrupts Memory on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-31396 | Linux Kernel MACB Network Driver PTP Clock Use-After-Free on Interface Open and Close on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-31389 | Linux Kernel SPI Controller Registration Failure Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-23458 | Linux kernel ctnetlink multi-round dump dereferences freed conntrack pointer in second callback invocation | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-23457 | Linux Kernel SIP Content-Length Integer Truncation in nf_conntrack on Siemens SIMATIC S7-1500 MFP | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-23456 | Linux Kernel netfilter H.323 Conntrack Out-of-Bounds Read in DecodeQ931 Integer Decode on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-23455 | Linux Kernel H.323 Conntrack DecodeQ931 Reads Past Zero-Length UserUserIE Field on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-10-15 | CVE-2026-23454 | Linux Kernel MANA Network Driver Use-After-Free in HWC Channel Teardown Reordering on Siemens SIMATIC S7-1500 MFP | 7.0 High | Updated |
| 2026-10-15 | CVE-2026-23450 | Linux Kernel SMC-over-TCP SYN Receive Path Calls sock_hold Then Schedules a tcp_close Work Item Without Synchronizing Against Concurrent Stack Cleanup, Enabling Use-After-Free and Null Dereference | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2026-23449 | Linux Kernel Network Scheduler TEQL Double-Free with Lockless Qdisc Root on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-23444 | Linux Kernel Wi-Fi subsystem Missing Release Of Memory After Effective Lifetime Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-23434 | Linux Kernel NAND Flash Lock/Unlock Not Serialized Against Other NAND Operations on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-23422 | Linux Kernel dpaa2-switch Out-of-Bounds Write from Malformed Interrupt Scores 7.8 | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-23414 | Linux Kernel TLS Memory Leak in Async Decrypt Wait Scores 7.5 | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-19550 | FreeIPA trust-fetch-domains Is Gated by Read-Only Permission Rather Than Admin Rights, Letting Non-Privileged Users Trigger Privileged AD Trust Refreshes | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-18147 | FreeIPA Login Page Is Vulnerable to Unauthenticated DOM Cross-Site Scripting via Crafted URL Parameters | 8.1 High | Updated |
| 2026-10-15 | CVE-2026-16438 | Critical Mitsubishi Electric Corporation GENESIS64 Incorrect Privilege Assignment Scores 9.4 CVSS | 9.4 Critical | Updated |
| 2026-10-15 | CVE-2026-16437 | Mitsubishi Electric Corporation GENESIS Weak Password Recovery Mechanism For Forgotten Password Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-15 | CVE-2026-16436 | Unauthenticated Remote Weak Credential in Mitsubishi Electric Corporation GENESIS Rates 9.2 CVSS | 9.2 Critical | Updated |
| 2026-10-15 | CVE-2026-13097 | FreeIPA Kerberos Principal Name Uniqueness Constraint Can Be Abused to Escalate Privileges to the Level of an Existing User | 8.7 High | Updated |
| 2026-10-15 | CVE-2026-11861 | FreeIPA Active Directory Trust Allows AD Users to Impersonate Kerberos TGT Client Names, Bypassing Authentication to IPA Services Including SMB and LDAP | 9.6 Critical | Updated |
| 2026-10-15 | CVE-2026-11824 | Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) Heap Buffer Overflow Permits Remote Code Execution | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-11822 | Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) Heap Buffer Overflow Permits Remote Code Execution | 7.8 High | Updated |
| 2026-10-15 | CVE-2026-109832 | Red Hat Red Hat Enterprise Linux 10 Exposes Loop With Unreachable Exit Condition ('Infinite Loop') to Unauthenticated Network Attackers, Enabling Denial Of Service | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-102558 | libsoup WebSocket Connection Grows Its Receive Buffer Without Bound When max-incoming-payload-size Is Zero, Enabling Remote Memory Exhaustion | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-102557 | libsoup WebSocket Fragment Reassembly Does Not Cap Total Message Size, Allowing Heap Exhaustion via Large Fragmented Payloads | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-102556 | libsoup Passes Internal Buffer Memory in the WebSocket Pong Signal GByteArray, Creating a Use-After-Free Exposure for Signal Handler Code | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-102555 | Red Hat Enterprise Linux 10 libsoup Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-15 | CVE-2026-101290 | Sick AG Sick_Safetyscanners_Base CPP Driver Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-15 | CVE-2026-100236 | Red Hat Red Hat Enterprise Linux 10 Out-Of-Bounds Write Exposed to Unauthenticated Network Attackers | 8.6 High | Updated |
| 2026-10-15 | CVE-2026-100232 | SonicWall Network Security Manager (NSM) Os Command Injection Permits Remote Code Execution | 7.2 High | Updated |
| 2026-10-15 | CVE-2026-0310 | Palo Alto Networks Cloud NGFW Exposes Out-Of-Bounds Write to Unauthenticated Network Attackers, Enabling Remote Code Execution | 7.2 High | Updated |
| 2026-10-15 | CVE-2026-0301 | PAN-OS URL Filtering feature exposes sensitive information to unauthenticated network attacker | 7.5 High | Exploited |
| 2026-10-15 | CVE-2025-71316 | Unauthenticated Remote Improper Handling Of Unicode Encoding in SQLite sqldiff Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-15 | CVE-2024-22031 | suse Rancher Authorization Bypass Permits Privilege Escalation | 8.5 High | Updated |
| 2026-10-15 | CVE-2024-14040 | Linux Kernel Traffic Control (tc) Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-15 | CVE-2023-32198 | suse steve Certificate Validation Bypass Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-14 | CVE-2026-46242 | Linux Linux Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | EPSS-Imminent |
| 2026-10-14 | CVE-2026-97830 | Windows IIS Web Server Double-Free Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-96951 | CISA's October 16th KEV Deadline Adds Federal Urgency to Microsoft Windows Shell Command Injection That Lets Network Attackers Bypass a Security Feature | 8.8 High | KEV |
| 2026-10-14 | CVE-2026-96934 | Critical Windows Windows DHCP Server Use-After-Free Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-96864 | Unauthenticated Remote Double-Free in Microsoft Windows Server 2025 Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-96541 | Red Hat Red Hat Enterprise Linux 10 Uncontrolled Resource Consumption Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-96320 | Critical Windows Windows DHCP Server Heap Buffer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-96252 | Critical Windows Active Directory Signature Verification Bypass Scores 9.1 CVSS | 9.1 Critical | Updated |
| 2026-10-14 | CVE-2026-96108 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-95943 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-92817 | Inductive Automation Ignition Authorization Bypass Permits Remote Code Execution | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-8947 | Red Hat Red Hat Enterprise Linux 10 Use-After-Free Exposed to Unauthenticated Network Attackers | 7.3 High | Updated |
| 2026-10-14 | CVE-2026-8946 | Red Hat Red Hat Enterprise Linux 10 Improper Restriction Of Operations Within The Bounds Of A Memory Buffer Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-88102 | Unauthenticated Remote Use-After-Free in Microsoft Windows Server 2025 Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-87699 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-86848 | Red Hat Red Hat Enterprise Linux 10 Race Condition Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-86563 | Red Hat Red Hat Enterprise Linux 10 Incorrect Calculation Of Buffer Size Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-86476 | Red Hat Red Hat Enterprise Linux 10 Out-Of-Bounds Write Permits Denial Of Service | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-85928 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-85927 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-85863 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-85861 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-85856 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-85834 | Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-85368 | Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-85356 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-85341 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-85197 | Red Hat Red Hat Enterprise Linux 10 Exposes Use-After-Free to Unauthenticated Network Attackers, Enabling Remote Code Execution | 7.6 High | Updated |
| 2026-10-14 | CVE-2026-84838 | Red Hat Red Hat Enterprise Linux 10 Os Command Injection Permits Command Injection | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-84837 | Red Hat Red Hat Enterprise Linux 10 Os Command Injection Permits Information Disclosure | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83930 | Windows Windows Update Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83911 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83901 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83868 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83862 | Unauthenticated Remote Use-After-Free in Microsoft Windows Server 2025 Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83847 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83846 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83842 | Windows Windows TCP/IP stack Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83841 | Windows Win32k graphics driver Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83793 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83782 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83748 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83694 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83693 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83682 | Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83679 | Windows Windows Defender Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83678 | Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83674 | Windows Active Directory Weak Authentication Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-14 | CVE-2026-83666 | Windows Active Directory Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83659 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83638 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83588 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83578 | Critical Windows PowerShell Heap Buffer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83566 | Windows Win32k graphics driver Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-83519 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83517 | Critical Windows Windows Media Heap Buffer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-83513 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-83511 | Windows Active Directory Weak Authentication Reachable by Unauthenticated Network Attackers | 7.4 High | Updated |
| 2026-10-14 | CVE-2026-78367 | Red Hat Red Hat Enterprise Linux 10 Code Injection Permits Remote Code Execution | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-74860 | libxml2 Python Bindings Double-Free DTD Enumerated Attribute During SAX Parsing, Causing Denial of Service with Scope Impact Scoring 8.5 | 8.5 High | Updated |
| 2026-10-14 | CVE-2026-74731 | Linux Kernel cgroup v1/v2 Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74730 | Critical Linux Kernel NFS client Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74727 | Critical Linux Kernel netlink Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74726 | Linux Linux Kernel Vulnerability Permits Kernel Panic | 7.3 High | Updated |
| 2026-10-14 | CVE-2026-74725 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74724 | Linux Kernel IPv6 network stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74720 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74717 | Linux Kernel IPv6 network stack Vulnerability Allows Unauthenticated Remote Kernel Panic | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74714 | Linux Kernel TCP stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74712 | Critical Linux Linux Kernel Vulnerability Scores 9.3 CVSS | 9.3 Critical | Updated |
| 2026-10-14 | CVE-2026-74711 | Linux Linux Kernel Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-74710 | Linux Kernel XDP Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74708 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74707 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74705 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 10.0 CVSS | 10.0 Critical | Updated |
| 2026-10-14 | CVE-2026-74704 | Linux Kernel TCP stack Vulnerability Rated 8.2 CVSS | 8.2 High | Updated |
| 2026-10-14 | CVE-2026-74703 | Linux Kernel vhost subsystem Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-74702 | Linux Kernel virtio driver Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74701 | Linux Kernel Open vSwitch Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74700 | Linux Kernel cgroup v1/v2 Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74697 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 8.2 High | Updated |
| 2026-10-14 | CVE-2026-74696 | Linux Kernel TCP stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74695 | Linux Kernel Netfilter Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74692 | Linux Kernel TCP stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74691 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74690 | Linux Linux Kernel Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-74689 | Linux Kernel eBPF Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-74688 | Critical Linux Kernel SCTP network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74687 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74684 | Linux Kernel virtio driver Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-74678 | Linux Kernel USB core Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74675 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74674 | Linux Kernel Traffic Control (tc) Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74670 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74669 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74668 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74667 | Linux Kernel Traffic Control (tc) Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74666 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74665 | Critical Linux Kernel XDP Vulnerability Scores 9.1 CVSS | 9.1 Critical | Updated |
| 2026-10-14 | CVE-2026-74663 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74662 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74661 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74660 | Linux Kernel Netfilter Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74656 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74655 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74652 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74651 | Linux Kernel cfg80211 wireless Vulnerability Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-14 | CVE-2026-74649 | Linux Kernel kernel performance subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74648 | Linux Kernel cfg80211 wireless Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74647 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74646 | Linux Kernel signal handling Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74641 | Linux Kernel USB core Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74640 | Linux Kernel ALSA sound subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74637 | Linux Kernel cgroup v1/v2 Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74635 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74634 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74631 | Linux Linux Kernel Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-74630 | Linux Kernel IPv6 network stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74629 | Linux Linux Kernel Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74628 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74627 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74626 | Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74625 | Linux Kernel Netfilter Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74624 | Linux Kernel Netfilter Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74621 | Linux Kernel IPv6 network stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74617 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74616 | Critical Linux Kernel XDP Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74615 | Linux Kernel kernel performance subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74614 | Linux Kernel virtio driver Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-74613 | Linux Kernel virtio driver Vulnerability Allows Kernel Panic | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74612 | Critical Linux Kernel XDP Vulnerability Scores 10.0 CVSS | 10.0 Critical | Updated |
| 2026-10-14 | CVE-2026-74611 | Critical Linux Kernel TLS offload Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74610 | Linux Kernel TCP stack Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74609 | Linux Kernel TIPC protocol Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74608 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74607 | Linux Kernel kernel performance subsystem Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-74606 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74604 | Linux Linux Kernel Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-74603 | Linux Linux Kernel Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-74601 | Linux Kernel kernel performance subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74598 | Linux Kernel IPv6 network stack Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-74597 | Critical Linux Kernel IPv6 network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74595 | Linux Kernel ext4 filesystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74594 | Linux Kernel cgroup v1/v2 Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74592 | Linux Kernel kernel audit subsystem Vulnerability Rated 8.1 CVSS | 8.1 High | Updated |
| 2026-10-14 | CVE-2026-74591 | Unauthenticated Remote Vulnerability in Linux Linux Kernel Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74590 | Linux Kernel eBPF Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74589 | Linux Kernel TCP stack Vulnerability Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-74588 | Critical Linux Kernel SCTP network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74587 | Critical Linux Kernel SCTP network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74586 | Critical Linux Kernel SCTP network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-74584 | Linux Kernel InfiniBand subsystem Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-74583 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74582 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-74581 | Critical Linux Kernel IPv6 network stack Vulnerability Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-70255 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70247 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70238 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70228 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70164 | Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-70153 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-70147 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-70142 | Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70139 | Windows Windows Update Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70076 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-70067 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-70060 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-70056 | Windows Windows Update Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-69970 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-69966 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-69964 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-69963 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-69856 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-69766 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-69763 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-69639 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-69634 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-62824 | Microsoft Windows 10 (version 1607) Stack Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-62712 | Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-58619 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-58016 | Enterprise Linux GLib Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-57090 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-5433 | Honeywell Control Network Module Web Interface Passes User Input Through Command Delimiters Without Escaping, Enabling Remote Code Execution on Versions 100.1, 101.1, 110.1, and 110.2 | 9.1 Critical | Updated |
| 2026-10-14 | CVE-2026-54100 | Red Hat's Windows Machine Config Operator skips SSH host-key checks, letting adjacent attackers capture node bootstrap credentials | 8.3 High | Updated |
| 2026-10-14 | CVE-2026-54099 | A compromised Windows node can forge a cluster-administrator certificate through WMCO's CSR auto-approver, CVSS 8.8 | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-50480 | Microsoft Windows 10 (version 1607) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-50465 | Microsoft Windows 11 (version 24H2) Improper Access Control Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-50461 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-50436 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-50392 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-50390 | Windows Windows Kernel Type Confusion Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-50387 | Microsoft Windows 11 (version 24H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-50331 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-50323 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-49802 | Microsoft Windows 11 (version 24H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-49790 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.3 CVSS | 7.3 High | Updated |
| 2026-10-14 | CVE-2026-49789 | Microsoft Windows 11 (version 24H2) Stack Buffer Overflow Rated 7.3 CVSS | 7.3 High | Updated |
| 2026-10-14 | CVE-2026-49238 | canonical multipass Path Traversal Permits Arbitrary File Read | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-49237 | canonical multipass Incorrect Default Permissions Permits Local Privilege Escalation | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-48864 | Enterprise Linux libsolv Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-42013 | Red Hat OpenShift AI 3.4 gnutls Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-14 | CVE-2026-42012 | Red Hat OpenShift AI 3.4 gnutls Information Disclosure Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-42011 | Red Hat OpenShift AI 3.4 gnutls Authorization Bypass Reachable by Unauthenticated Remote Attackers (CVSS 7.4) | 7.4 High | Updated |
| 2026-10-14 | CVE-2026-42010 | Enterprise Linux gnutls Authorization Bypass Reachable by Low-Privilege Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-42009 | Enterprise Linux gnutls Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-33846 | Red Hat OpenShift AI 3.4 Buffer Overflow Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-33845 | Enterprise Linux Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-33827 | Windows Windows TCP/IP stack Race Condition Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-14 | CVE-2026-33104 | Windows Win32k graphics driver Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-33100 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-33099 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-33098 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-33096 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-32225 | Microsoft Windows 11 (version 23H2) Exposes Protection Mechanism Failure to Unauthenticated Network Attackers, Enabling Command Injection | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-32183 | Microsoft Windows 11 (version 23H2) Os Command Injection Permits Command Injection | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32165 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32164 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32163 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32162 | Microsoft Windows 11 (version 23H2) Acceptance Of Extraneous Untrusted Data With Trusted Data Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-32160 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32159 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32158 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32156 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.4 CVSS | 7.4 High | Updated |
| 2026-10-14 | CVE-2026-32155 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32154 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32152 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32150 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32149 | Windows Hyper-V Improper Input Validation Rated 7.3 CVSS | 7.3 High | Updated |
| 2026-10-14 | CVE-2026-32093 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32091 | Race Condition in Microsoft Brokering File System Allows Unauthorized Privilege Escalation | 8.4 High | Updated |
| 2026-10-14 | CVE-2026-32090 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32089 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32087 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32086 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32083 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32082 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32078 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32077 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32076 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32075 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32074 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32073 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32071 | Microsoft Windows 11 (version 23H2) Null Pointer Dereference Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-32070 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-32069 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-32068 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27929 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27927 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27926 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27924 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27923 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27922 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27921 | Windows Windows TCP/IP stack Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27920 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27919 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27918 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27917 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27916 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27915 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27914 | Improper Access Control in Microsoft Management Console Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27911 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27910 | Microsoft Windows 11 (version 23H2) Improper Handling Of Insufficient Permissions Or Privileges Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27909 | Use-After-Free in Windows Search Component Allows Authorized Attacker to Escalate Privileges | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-27908 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-27907 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26184 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26182 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-26181 | Use-After-Free in Microsoft Brokering File System Lets Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26180 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26179 | Windows Windows Kernel Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26178 | Microsoft Windows 11 (version 23H2) Integer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-26177 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-26176 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26173 | Windows Winsock Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-26172 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26170 | Input Validation Flaw in Microsoft PowerShell Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26167 | Microsoft Windows 11 (version 23H2) Race Condition Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-14 | CVE-2026-26166 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-26165 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-26163 | Windows Windows Kernel Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26162 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26161 | Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26160 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26159 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26156 | Windows Hyper-V Improper Input Validation Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26153 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-26152 | Microsoft Windows 11 (version 23H2) Insecure Storage Of Sensitive Information Permits Information Disclosure | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-26151 | Microsoft Windows 11 (version 23H2) Insufficient Ui Warning Of Dangerous Operations Exposed to Unauthenticated Network Attackers | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-2611 | Unauthenticated Remote Origin Validation Error in lfprojects MLflow Rates 9.6 CVSS | 9.6 Critical | Updated |
| 2026-10-14 | CVE-2026-25184 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-20930 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-19685 | Red Hat Red Hat Enterprise Linux 10 Authorization Bypass Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-16118 | Red Hat OpenShift AI 3.3 xdgmime Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-14 | CVE-2026-14164 | Red Hat OpenShift AI 3.4 Double-Free Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-14 | CVE-2026-13732 | GDB STABS Parser C++ Destructor List Removal Writes Out of Bounds, Enabling Code Execution When Processing Crafted Debug Symbols | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-12505 | Red Hat Red Hat Enterprise Linux 10 Execution With Unnecessary Privileges Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-109439 | Unauthenticated Remote Authentication Bypass in Lantronix XPress-DR Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-105010 | Unauthenticated Remote Use-After-Free in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-14 | CVE-2026-105003 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-103553 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-102218 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2026-102208 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-14 | CVE-2026-0322 | Palo Alto Networks PAN-OS Code Injection Enabling Remote Code Execution Now Has a October 17 CISA KEV Remediation Requirement for Covered Entities | 8.6 High | KEV |
| 2026-10-14 | CVE-2025-71311 | Linux Linux Kernel Use Of Uninitialized Resource Exposed to Unauthenticated Network Attackers | 8.2 High | Updated |
| 2026-10-14 | CVE-2025-71306 | Linux Linux Kernel Out-Of-Bounds Read Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2025-71302 | Linux Kernel DRM graphics subsystem Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2025-71300 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2025-71292 | Linux Kernel kernel performance subsystem Vulnerability Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-14 | CVE-2025-71289 | Linux Linux Kernel Vulnerability Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-14 | CVE-2025-71286 | Linux Linux Kernel Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2025-71274 | Linux Linux Kernel Race Condition Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-14 | CVE-2025-62718 | Unauthenticated Remote Unintended Proxy Or Intermediary ('Confused Deputy') in Red Hat Red Hat Ansible Automation Platform 2.6 Rates 9.9 CVSS | 9.9 Critical | Updated |
| 2026-10-13 | CVE-2026-97803 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-97789 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-96945 | Microsoft Windows Server 2025 Uncaught Exception Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-96929 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-96868 | Windows Windows Kernel Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-96867 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-96866 | Microsoft Windows Server 2025 Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-96862 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-96861 | Microsoft Windows Server 2025 Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-96248 | Microsoft Windows Server 2025 Stack Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-96113 | Critical Windows Windows DNS Server Heap Buffer Overflow Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-89201 | Siemens RUGGEDCOM CROSSBOW Bulk Export Workflow Does Not Sanitize Device Group and Facility Names Before Using Them in Database Queries, Enabling SQL Injection | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-89199 | Siemens RUGGEDCOM CROSSBOW Allows Low-Privileged Authenticated Users to Retrieve Administrative Credentials for Internal Systems via Insufficiently Restricted Database Queries | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-89198 | Siemens RUGGEDCOM CROSSBOW Does Not Sanitize Firmware Upload Filenames Before Using Them in Database Queries, Enabling SQL Injection for Low-Privileged Authenticated Users | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-89197 | Siemens RUGGEDCOM CROSSBOW Does Not Sanitize the Notification Condition Value Field, Enabling SQL Injection for Low-Privileged Authenticated Users | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-89196 | Siemens RUGGEDCOM CROSSBOW Does Not Sanitize Facility Names in Bulk Import and Export Workflows, Enabling SQL Injection for Low-Privileged Authenticated Users | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-88174 | Microsoft Windows Server 2025 Race Condition Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-88173 | Microsoft Windows Server 2025 Race Condition Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-88171 | Windows Windows DHCP Server Double-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-88159 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-88157 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-88152 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88149 | Windows Winsock Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88147 | Windows SSTP VPN Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88146 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88142 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-88141 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88139 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88136 | Microsoft Windows 11 (version 23H2) Improper Resolution Of Path Equivalence Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-88135 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88134 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88133 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88128 | Windows Desktop Window Manager (DWM) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88127 | Windows Server Message Block (SMB) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88126 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88124 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88121 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-13 | CVE-2026-88120 | Windows Windows DHCP Server Use-After-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-88119 | Windows Windows DHCP Server Use-After-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-88118 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-88117 | Windows Windows DHCP Server Use-After-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-88115 | Microsoft Windows Server 2025 Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-88113 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88110 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88107 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-88106 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-87708 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-87707 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-87706 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-87705 | Windows Hyper-V Signature Verification Bypass Rated 7.4 CVSS | 7.4 High | Updated |
| 2026-10-13 | CVE-2026-87704 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-87702 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-87700 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-87694 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-87693 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-87691 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85945 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85943 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85941 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85936 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-85934 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85933 | Windows Print Spooler Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85931 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-85930 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85912 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85911 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85908 | Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85906 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85905 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-85884 | Microsoft Windows 11 (version 24H2) Authentication Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85874 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85872 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85871 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85870 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85869 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85868 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85867 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85864 | Microsoft Windows 11 (version 23H2) Improper Restriction Of Names For Files And Other Resources Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85860 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85858 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85855 | Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85854 | Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85853 | Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85851 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85850 | Windows Windows Kernel Release Of Invalid Pointer Or Reference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85849 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85848 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85846 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85843 | Microsoft Windows 11 (version 23H2) Use Of Uninitialized Resource Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85842 | Microsoft Windows 11 (version 23H2) Format String Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85833 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85832 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85829 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85828 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85827 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85370 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85369 | Windows Hyper-V Out-Of-Bounds Read Rated 8.2 CVSS | 8.2 High | Updated |
| 2026-10-13 | CVE-2026-85367 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85366 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85364 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85362 | Microsoft Windows 11 (version 23H2) Release Of Invalid Pointer Or Reference Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85361 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85359 | Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85358 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85357 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85355 | Microsoft Windows 11 (version 23H2) Inclusion Of Functionality From Untrusted Control Sphere Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85354 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85353 | Windows Print Spooler Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-85352 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85343 | Windows Hyper-V Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85342 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-85339 | Windows Routing and Remote Access Service (RRAS) Heap Buffer Overflow Allows Unauthenticated Remote Remote Code Execution | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-85324 | Windows Active Directory Memory Allocation With Excessive Size Value Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-85321 | Windows Active Directory Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-85319 | Windows Active Directory Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-85318 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-85114 | Siemens SIMATIC S7 Webserver API .NET Client Library Writes Files to Attacker-Chosen Paths When a Ticket Download Response Supplies a Crafted Filename | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-84012 | Microsoft Windows Server 2025 Double-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-83932 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83931 | Windows Hyper-V Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83929 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83928 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83927 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83924 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83923 | Microsoft Windows 11 (version 23H2) Path Traversal Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83922 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83921 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83920 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83919 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83918 | Windows Windows Kernel Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83917 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83916 | Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83915 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83914 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-83913 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83912 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83910 | Critical Windows Remote Procedure Call (RPC) Out-Of-Bounds Write Scores 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-83908 | Windows Remote Procedure Call (RPC) Release Of Invalid Pointer Or Reference Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83903 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83902 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83877 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83863 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83852 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83851 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83850 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83848 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83845 | Microsoft Windows 11 (version 23H2) Authentication Bypass By Spoofing Rated 8.4 CVSS | 8.4 High | Updated |
| 2026-10-13 | CVE-2026-83843 | Windows IKE/IPsec Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83840 | Microsoft Windows 11 (version 23H2) Weak Authentication Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83839 | Windows Hyper-V Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83838 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-13 | CVE-2026-83837 | Windows Windows Kernel Unintended Proxy Or Intermediary ('Confused Deputy') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83836 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83834 | Windows Windows Kernel Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83833 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83832 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83830 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83829 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83828 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83827 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83826 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83797 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83796 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83795 | Windows IKE/IPsec Heap Buffer Overflow Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83792 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83791 | Microsoft Windows 11 (version 23H2) Unverified Ownership Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83790 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83789 | Windows Server Message Block (SMB) Heap Buffer Overflow Reachable by Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83785 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83784 | Microsoft Windows 11 (version 23H2) Path Traversal Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83783 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83781 | Microsoft Windows 11 (version 23H2) Improper Null Termination Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83780 | Unauthenticated Remote Use-After-Free in Microsoft Windows Server 2025 Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-83779 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83778 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83777 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83775 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83771 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83770 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-83769 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83767 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83763 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83762 | Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83759 | Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83758 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83757 | Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83754 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83753 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83752 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83751 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83750 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83749 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83741 | Windows Internet Explorer Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83740 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83739 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83738 | Windows Winsock Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83735 | Windows Windows Kernel Release Of Invalid Pointer Or Reference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83732 | Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83728 | Windows Hyper-V Improper Validation Of Syntactic Correctness Of Input Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83727 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83726 | Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83725 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83724 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83722 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83721 | Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83720 | Windows Kerberos Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83718 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83717 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83716 | Windows Hyper-V Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83715 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-13 | CVE-2026-83712 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83710 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83709 | Windows NTLM authentication Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83708 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83707 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83704 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83702 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83701 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83700 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83699 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83698 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83696 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83692 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83691 | Windows Windows DHCP Server Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83690 | Windows Windows Kernel Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83689 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83688 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83687 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83680 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83677 | Microsoft Windows 11 (version 24H2) Missing Release Of Memory After Effective Lifetime Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83676 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83675 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83670 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83669 | Microsoft Windows 11 (version 23H2) Use Of Uninitialized Resource Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83665 | Windows Windows DHCP Server Null Pointer Dereference Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83655 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83654 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83652 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83650 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83647 | Windows Active Directory Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83645 | Windows Active Directory Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83644 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83643 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83641 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83640 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83639 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83637 | Windows Windows Kernel Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83635 | Windows Windows DNS Server Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83634 | Windows BitLocker Double-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83587 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83586 | Microsoft Windows 11 (version 23H2) Weak Authentication Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83585 | Microsoft Windows 11 (version 23H2) Format String Vulnerability Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83584 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83583 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83580 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83579 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83575 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83574 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83570 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83569 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83568 | Windows Windows Kernel Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83567 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83564 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83523 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-83522 | Windows IKE/IPsec Reliance On Untrusted Inputs In A Security Decision Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-83518 | Windows Remote Procedure Call (RPC) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83516 | Microsoft Windows 11 (version 24H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-83514 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83510 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83509 | Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83508 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83506 | Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-83505 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-83499 | Microsoft Windows Server 2025 Insufficient Granularity Of Access Control Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-81971 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-81969 | Microsoft Windows Server 2025 Insufficient Granularity Of Access Control Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-78557 | Siemens Industrial Edge App Publisher Renders Unsanitized Backend Data in a Node.js UI, Allowing Cross-Site Scripting That Achieves Remote Code Execution | 8.3 High | Updated |
| 2026-10-13 | CVE-2026-78556 | Siemens Industrial Edge App Publisher Does Not Validate Server Certificates During TLS Connections, Enabling Man-in-the-Middle Interception | 7.4 High | Updated |
| 2026-10-13 | CVE-2026-78459 | Windows IIS Web Server Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-77496 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-73027 | Microsoft Windows 11 (version 23H2) External Control Of System Or Configuration Setting Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-72969 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-72968 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-72955 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-72934 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-72895 | Siemens SIMATIC IPC Products Include a BIOS Vendor Test Key in the UEFI Secure Boot Database, Allowing Locally Privileged Attackers to Boot Unsigned Software | 7.7 High | Updated |
| 2026-10-13 | CVE-2026-70580 | Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70566 | Windows SChannel TLS Null Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70299 | Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70286 | Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70278 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70275 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70274 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70272 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70262 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70258 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70252 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70250 | Microsoft Windows Server 2025 Race Condition Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70245 | Windows Winsock Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70243 | Windows Windows Kernel Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70241 | Windows Kerberos Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70237 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70233 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70230 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70229 | Windows Active Directory Authorization Bypass Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-70225 | Windows Winsock Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70223 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70222 | Microsoft Windows 11 (version 23H2) Path Traversal Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70218 | Microsoft Windows 11 (version 24H2) Authorization Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70212 | Microsoft Windows 11 (version 23H2) Improper Restriction Of Communication Channel To Intended Endpoints Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70210 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70207 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70205 | Windows Winsock Type Confusion Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70198 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70187 | Microsoft Windows Server 2025 Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-70185 | Windows PowerShell Authorization Bypass Through User-Controlled Key Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70184 | Microsoft Windows 11 (version 23H2) Improper Resolution Of Path Equivalence Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70177 | Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70172 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70169 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70168 | Windows Winsock Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70167 | Windows Windows DNS Server Untrusted Pointer Dereference Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70163 | Microsoft Windows 11 (version 23H2) Allocation Of Resources Without Limits Or Throttling Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70158 | Windows Routing and Remote Access Service (RRAS) Double-Free Allows Remote Code Execution | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70157 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-70156 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70155 | Microsoft Windows Server 2025 Missing Release Of Memory After Effective Lifetime Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70151 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70150 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70149 | Microsoft Windows 11 (version 23H2) Exposes Heap Buffer Overflow to Unauthenticated Network Attackers, Enabling Information Disclosure | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70143 | Windows NFS client Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70140 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70138 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70136 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70134 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70133 | Windows Server Message Block (SMB) Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70132 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70131 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70127 | Windows Windows DNS Server Use-After-Free Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-70126 | Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-13 | CVE-2026-70123 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70118 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70115 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70113 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70112 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70110 | Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70109 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70096 | Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-70089 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70086 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70082 | Microsoft Windows Server 2025 Uncaught Exception Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70079 | Microsoft Windows Server 2025 Improper Enforcement Of Behavioral Workflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70069 | Windows Windows DHCP Server Stack Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70068 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-70066 | Windows Windows DHCP Server Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-70064 | Windows Kerberos Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70062 | Microsoft Windows 11 (version 23H2) Double-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-70059 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70058 | Windows Windows DHCP Server Out-Of-Bounds Write Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70054 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70052 | Windows PowerShell Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70051 | Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70048 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70033 | Microsoft Windows Server 2025 Missing Release Of Memory After Effective Lifetime Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-70010 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70008 | Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-70006 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69988 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69987 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69986 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69985 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-69984 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69977 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69976 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69884 | Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69867 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69850 | Windows Windows Certificate Services Untrusted Pointer Dereference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69840 | Windows Windows Certificate Services Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69830 | Windows Windows DHCP Server Race Condition Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-69802 | Microsoft Windows Server 2025 Weak Authentication Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-69798 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69795 | Microsoft Windows 11 (version 23H2) Null Pointer Dereference Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69789 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69783 | Microsoft Windows 11 (version 23H2) External Control Of File Name Or Path Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69765 | Microsoft Windows Server 2025 Use-After-Free Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-69743 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69736 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69733 | Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69718 | Microsoft Windows 11 (version 23H2) Os Command Injection Permits Command Injection | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69673 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69650 | Microsoft Windows 11 (version 24H2) Signature Verification Bypass Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69633 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69596 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69577 | Windows Azure Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69521 | Microsoft Windows 11 (version 23H2) Integer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-69471 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69454 | Windows Azure Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-69452 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.1 CVSS | 7.1 High | Updated |
| 2026-10-13 | CVE-2026-69387 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-69363 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.0 CVSS | 8.0 High | Updated |
| 2026-10-13 | CVE-2026-69354 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-69326 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-68836 | Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-65198 | Huawei openUBMC Ships Identical Hard-Coded SNMPv3 Authentication and Encryption Keys That Are Not Reset by Admin Password Changes and Grant Full Device Control | 8.6 High | Updated |
| 2026-10-13 | CVE-2026-64039 | Linux Kernel DRM graphics subsystem Incorrect Calculation Of Buffer Size Rated 7.7 CVSS | 7.7 High | Updated |
| 2026-10-13 | CVE-2026-64037 | Unauthenticated Network Attacker Can Leverage Linux Kernel TCP stack Vulnerability for Memory Corruption (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-64036 | Linux Kernel cgroup rstat BPF kfunc Accepts a Caller-Controlled CPU Index Without Bounds Checking, Enabling Array Out-of-Bounds | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64035 | Linux Kernel igc Driver Does Not Initialize the TX Buffer Type for SMD Frames, Letting a Stale XDP or XSK Entry Direct TX Completion to the Wrong Cleanup Path | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-64034 | Linux Kernel MANA Driver TOCTOU Double-Fetch of hwc_msg_id from Unencrypted DMA Memory Bypasses Bounds Validation in Confidential VMs | 9.3 Critical | Updated |
| 2026-10-13 | CVE-2026-64033 | Linux Kernel RDMA/rtrs Server Path Error Cleanup Frees srv_path via kobject_put Before the sysfs Teardown Finishes Reading It | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-64032 | Linux Kernel Bridge Per-Port Multicast Context Remains Active After Port Removal When Both Global and Per-VLAN Snooping Have Been Enabled, Triggering Use-After-Free | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64031 | Linux Kernel erofs Unaligned Compressed Extent Race Allows Two Pclusters to Concurrently Add the Same folio to the Managed Cache | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64030 | Linux Kernel mac80211 EPCS Handler Does Not Bound link_id to the Valid Range, Letting a Connected WiFi 7 AP Trigger a Kernel Crash via a Crafted Action Frame | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-64029 | Linux Kernel ALSA UMP Sequence Client Borrows the Output File Without Synchronizing Against Its Close, Enabling Use-After-Free in snd_rawmidi_kernel_write1 | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64027 | Linux Kernel Network Shaper XArray Entry Swap Invalidates a Concurrently Read VALID Mark, Causing Use-After-Free in Rollback | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64026 | Linux Kernel rxrpc Decrypts DATA Packets In Place When splice() Shares the Pages, Corrupting the Pagecache | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64025 | Linux Kernel BPF sockmap Verdict Data-Ready Handler Drains the TCP Receive Queue Without Advancing copied_seq When kTLS RX Is Active, Causing Use-After-Free in TLS Decryption | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-64024 | Linux Kernel TCP Leaves tcp_tw_isn Set in a Per-CPU Variable When SYN Packets Are Dropped Mid-Path, Exposing Initial Sequence Numbers to Prediction | 9.4 Critical | Updated |
| 2026-10-13 | CVE-2026-64023 | Linux Kernel GPIO Aggregator Error Path Frees the Lookup dev_id Before Removing the Entry, Causing Use-After-Free Under Concurrent gpiod_find | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64020 | Linux Kernel nvme-pci Leaks the dma_vecs Allocation on Every P2P Memory Completion | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-64018 | Linux Kernel MANA Rx Handler Indexes reqs[] with an Unbounded DMA-Coherent rx_req_idx, Enabling Out-of-Bounds Array Access in Confidential VMs | 9.3 Critical | Updated |
| 2026-10-13 | CVE-2026-64017 | Linux Kernel blk-mq Cached Request Can Be Freed by a Plug Flush While the Issuing Task Is Sleeping Between Peek and Pop | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64016 | Linux Kernel ksmbd Durable Reconnect Error Path Frees the Republished File Object Twice, Leaving a Stale Volatile-ID Table Entry | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-64014 | Linux Kernel NEXIO USB Touchscreen Driver Fails to Clamp data_len and x_len, Letting a Malicious Device Leak ~64 KiB of Kernel Memory as Touch Coordinates | 7.1 High | Updated |
| 2026-10-13 | CVE-2026-64011 | Linux Kernel NFC LLCP Use-After-Free in llcp_sock_release When Socket Is on the Connecting List | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64010 | Linux Kernel NFC LLCP nfc_llcp_recv_cc Moves a Socket to the Live List Without Holding the Socket Lock, Enabling a Concurrent Use-After-Free | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-64009 | Linux Kernel xfrm_state_mtu Integer Underflow on a Crafted ESP Tunnel SA Triggers a Near-2^32 Byte Out-of-Bounds Memset | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-64007 | Linux Kernel netfilter synproxy Passes a Cached tcphdr Pointer Into skb_ensure_writable, Which Can Free the Buffer and Leave the Pointer Stale | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-64005 | Linux Kernel SMC Reinitializes Socket Hash Tables After Registration, Potentially Corrupting In-Use Entries | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-63354 | Siemens SIMATIC S7-1500 MFP Renders Visual Marker Data from Imported CSV Trace Files Without Sanitization, Enabling Cross-Site Scripting Against Diagnostics Users | 9.6 Critical | Updated |
| 2026-10-13 | CVE-2026-63353 | Siemens SIMATIC S7-1500 MFP Renders Comment Fields from Imported Trace Files Without Sanitization, Enabling Cross-Site Scripting Against Diagnostics Users | 9.6 Critical | Updated |
| 2026-10-13 | CVE-2026-63350 | Siemens SIMATIC S7-1500 MFP Executes Arbitrary Code Embedded in Imported Trace Files Without Validating Their Content | 9.6 Critical | Updated |
| 2026-10-13 | CVE-2026-61931 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-59241 | Siemens SIMATIC WinCC Assigns Overly Broad Permissions to a Database Role, Letting Authenticated Low-Privileged Users Escalate Database Privileges | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-49785 | Microsoft Windows 11 (version 23H2) Improper Resource Shutdown Or Release Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-44415 | Siemens SIMATIC HMI MTP Panels Do Not Restrict Authenticated Administrators From Accessing Internal APIs and Paths, Enabling Sensitive Data Retrieval and Deletion | 9.1 Critical | Updated |
| 2026-10-13 | CVE-2026-21413 | Unauthenticated Remote Improper Validation Of Array Index in Red Hat Red Hat Enterprise Linux 8 Rates 9.8 CVSS | 9.8 Critical | Updated |
| 2026-10-13 | CVE-2026-12656 | Rockwell Automation 1732E ArmorBlock I/O Crashes and Requires Power Cycle After Network Storm Traffic | 8.7 High | Updated |
| 2026-10-13 | CVE-2026-12655 | Rockwell Automation 1732E ArmorBlock I/O Accepts Unauthenticated Requests to Change the Web Server Password, Enabling Admin Account Takeover | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-11837 | ansible.posix authorized_key Calls os.chown() Without O_NOFOLLOW, Allowing a Local Attacker to Redirect Ownership Changes to Arbitrary Files | 7.3 High | Updated |
| 2026-10-13 | CVE-2026-109453 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108471 | Microsoft Windows 10 (version 1809) Untrusted Pointer Dereference Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-108468 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108467 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-108465 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108464 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108463 | Microsoft Windows 11 (version 24H2) Improper Resolution Of Path Equivalence Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-108461 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108460 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-108458 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-108457 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Exposed to Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-108399 | Windows Hyper-V Heap Buffer Overflow Rated 7.2 CVSS | 7.2 High | Updated |
| 2026-10-13 | CVE-2026-108396 | Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108136 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-108135 | Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108134 | Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108133 | Microsoft Windows Server 2022 Release Of Invalid Pointer Or Reference Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-108132 | Windows Kerberos Double-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-108131 | Windows Active Directory Authentication Bypass By Spoofing Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-108130 | Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-105733 | Windows Hyper-V Vulnerability Rated 8.8 CVSS | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-105723 | Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-105722 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-105009 | Microsoft Windows Server 2025 Incorrect Default Permissions Rated 7.5 CVSS | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-105008 | Critical Windows SChannel TLS Authentication Bypass By Spoofing Scores 9.0 CVSS | 9.0 Critical | Updated |
| 2026-10-13 | CVE-2026-105007 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-105005 | Windows SChannel TLS Out-Of-Bounds Write Reachable by Unauthenticated Network Attackers | 8.1 High | Updated |
| 2026-10-13 | CVE-2026-105004 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-103577 | Microsoft Windows 11 (version 23H2) Insecure Default Variable Initialization Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-103575 | Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-103569 | Windows IKE/IPsec Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-103568 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-103565 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-103558 | Windows Routing and Remote Access Service (RRAS) Deadlock Reachable by Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-103555 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-103554 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-102250 | Schneider Electric Sage RTU Series Does Not Verify Firmware Image Authenticity During Admin-Initiated Updates, Allowing Modified Firmware to Be Installed | 8.6 High | Updated |
| 2026-10-13 | CVE-2026-102227 | Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-102225 | Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers | 8.8 High | Updated |
| 2026-10-13 | CVE-2026-102220 | Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS | 7.8 High | Updated |
| 2026-10-13 | CVE-2026-102209 | Microsoft Windows 11 (version 26H1) Heap Buffer Overflow Rated 7.0 CVSS | 7.0 High | Updated |
| 2026-10-13 | CVE-2026-102192 | Microsoft Windows Server 2025 Integer Overflow Exposed to Unauthenticated Network Attackers | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-102076 | Siemens APOGEE and TALON Building Controllers Web Service Does Not Validate Upload Code Input Length, Allowing Unauthenticated Denial of Service | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-102075 | Siemens APOGEE and TALON Building Controllers Web Service Does Not Validate Multipart Input, Allowing Unauthenticated Denial of Service | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-102074 | Siemens APOGEE and TALON Building Controllers FTP Service Does Not Validate Input Length, Allowing Unauthenticated Denial of Service | 7.5 High | Updated |
| 2026-10-13 | CVE-2026-102073 | Siemens APOGEE and TALON Building Controllers Web Service Integer Underflow in Length Validation Lets Unauthenticated Attackers Read Device Memory or Cause Denial of Service | 8.2 High | Updated |
| 2026-10-12 | CVE-2026-66758 | GIMP FITS Plugin Uses Signed Integer Arithmetic for Memory Allocation Sizes, Allowing Overflow When Processing Large FITS Images | 7.8 High | Updated |
| 2026-10-12 | CVE-2026-59090 | GIMP PSD Plugin Integer Underflow in block_rem Triggers Heap Buffer Overflow When Processing Crafted PSD Files | 8.4 High | Updated |
| 2026-10-12 | CVE-2026-58384 | GIMP PSD Parser Integer Overflow in read_RLE_channel() Creates Undersized Heap Allocation, Enabling Out-of-Bounds Write via RLE Row Data | 7.3 High | Updated |
| 2026-10-12 | CVE-2026-58380 | GIMP PNM File Parser Out-of-Bounds Read in pnmscanner_gettoken() Triggered by Specially Crafted PNM Files | 7.3 High | Updated |
| 2026-10-12 | CVE-2026-42169 | GIMP APNG Frame Loader Heap Buffer Overflow Can Be Triggered by Crafted Animated PNG Files | 7.3 High | Updated |
| 2026-10-12 | CVE-2026-108094 | Mutter Wayland Color Management Use-After-Free Lets a Local Attacker Destroy an ICC Image Description Resource During an Active Asynchronous Read | 7.8 High | Updated |
| 2026-10-12 | CVE-2026-103903 | MikroTik RouterOS WinBox EC-SRP Authentication Flaw Lets Low-Privilege Users Read the Authorization Policy of Any Other Account | 8.8 High | Updated |
| 2026-10-11 | CVE-2016-3081 | Apache Struts Remote Code Execution via method: Prefix in Dynamic Method Invocation, Actively Exploited Since 2016 | 8.1 High | KEV |
| 2026-10-11 | CVE-2026-89764 | Linux Kernel Rust Devres Race Between Concurrent Revoke Paths Triggers Use-After-Free on Driver Cleanup | 7.8 High | Updated |
| 2026-10-11 | CVE-2026-89630 | Linux Kernel SMB Client data_offset Bound Check Regressed After Header Restructure, Enabling Out-of-Bounds Reads in Oplock Break Handling | 9.1 Critical | Updated |
| 2026-10-11 | CVE-2026-79992 | Emacs TRAMP Concatenates Login Arguments Without Sanitization, Letting a Local Attacker Run Arbitrary Commands via Crafted Filenames | 7.8 High | Updated |
| 2026-10-11 | CVE-2026-72064 | Linux Kernel MANA Driver Skips DMA Sync for Page Pool RX Fragments, Causing Memory Corruption Under Network Load | 9.8 Critical | Updated |
| 2026-10-10 | CVE-2026-93565 | Security Flaw in Netty RtspDecoder Affects Single Sign-On 7 | 7.5 High | Updated |
| 2026-10-10 | CVE-2026-93564 | Netty HAProxy PROXY-v2 Decoder Reference-Count Leak Lets Unauthenticated Remote Attackers Cause Denial of Service (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-10 | CVE-2026-93558 | Netty WebSocketServerExtensionHandler Flaw Lets Unauthenticated Remote Attackers Cause Denial of Service in Red Hat AMQ Broker (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-10 | CVE-2026-93491 | Denial of Service in Netty's HttpServerCodec Affects Single Sign-On 7, Leading to Service Disruption | 7.5 High | Updated |
| 2026-10-10 | CVE-2026-93488 | Denial of Service in Netty Affects Single Sign-On 7, Leading to Service Disruption (CVE-2026-93488) | 7.5 High | Updated |
| 2026-10-10 | CVE-2026-19611 | Red Hat JBoss Enterprise Application Platform 7 WildFly Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.4) | 7.4 High | Updated |
| 2026-10-09 | CVE-2015-5477 | ISC BIND Crashes on Malformed TKEY Queries, Exposing DNS Infrastructure to Unauthenticated Remote Denial of Service; CISA KEV Program Sets an October 11th Deadline for Covered Entities | 7.5 High | KEV |
| 2026-10-09 | CVE-2015-3306 | ProFTPD SITE CPFR/CPTO Commands Enable Unauthenticated Remote File Read and Write; CISA KEV Mandate Requires Covered Entities to Act by October 11th | 10.0 Critical | KEV |
| 2026-10-09 | CVE-2026-89091 | ansible-core Galaxy Collection Install Follows Symlinks Through Path Traversal, Enabling Arbitrary File Writes on the Installing Host | 8.8 High | Updated |
| 2026-10-09 | CVE-2026-72693 | openvt -u Ownership Check on TTY stat Can Be Bypassed to Gain Root Login Without a Password | 7.8 High | Updated |
| 2026-10-09 | CVE-2026-42784 | sequoia-openpgp Incorrect Key Flags Inference for Older Certificates Enables Unauthenticated Attackers to Forge Signatures (CVSS 7.4) | 7.4 High | Updated |
| 2026-10-09 | CVE-2026-15688 | Mitsubishi Electric GX Works3 Block Password Validation Bypassed via In-Memory Executable Modification, Letting Local Users View, Tamper with, or Delete Control Programs | 9.2 Critical | Updated |
| 2026-10-09 | CVE-2026-107161 | Cyrus SASL DIGEST-MD5 add_to_challenge Function Overflows a Heap Buffer During SASL Negotiation | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-98136 | Linux Kernel NTFS attrdef Parser Reads Past a Short Attribute-Definition Table, Triggering Out-of-Bounds Access | 7.1 High | Updated |
| 2026-10-08 | CVE-2026-85234 | tftp-hpa Remap Engine Inverse Rule Processing Reads and Writes Out of Bounds, Crashing the Server Without Authentication | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-76560 | 389 Directory Server SELFDN Access Control Logic Matches an Empty Anonymous Bind DN Against Empty Stored Attributes, Bypassing ACI Restrictions | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-64015 | Linux Kernel security/keys Persistent Key Path Drops RCU Read Lock Too Early, Yielding a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-08 | CVE-2026-64004 | Linux Kernel AF_IUCV HIPER Transport Race Between getsockopt and recvmsg Yields a Null Dereference | 7.8 High | Updated |
| 2026-10-08 | CVE-2026-64003 | Linux Kernel SCSI Host Recovery Leaves SDEV_CANCEL Queue Unkicked, Causing Requests to Stall and the Device to Hang on Removal | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-64002 | Linux Kernel IPv4 sysctl_local_reserved_ports Freed Before Sysctl Table Unregistration, Opening a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-08 | CVE-2026-64000 | Linux Kernel HSR Protocol Skips TLV Header Linearization, Exposing an Unauthenticated Remote Out-of-Bounds Read Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-08 | CVE-2026-63987 | Linux Kernel ethtool Coalesce Profile Handler Writes Without Bounds Enforcement, Enabling a Local Out-of-Bounds Write | 7.8 High | Updated |
| 2026-10-08 | CVE-2026-63985 | Linux Kernel ethtool EEPROM Netlink Handler Skips Bounds Validation, Exposing Kernel Memory via Out-of-Bounds Read | 7.8 High | Updated |
| 2026-10-08 | CVE-2026-4408 | Samba check password Script Expands %u Without Shell Escaping, Enabling Unauthenticated Remote Code Execution with Scope Impact | 9.0 Critical | Updated |
| 2026-10-08 | CVE-2026-34499 | Johnson Controls ADVMS Embeds a Hard-Coded Cryptographic Key, Exposing Sensitive Key Material to Local Low-Privilege Users on Versions Before 3.10 | 8.5 High | Updated |
| 2026-10-08 | CVE-2026-19843 | 389 Directory Server Cockpit Component Passes Unsanitized LDAP DN to ldapsearch Shell, Allowing Privileged Users to Execute Commands as Root | 8.4 High | Updated |
| 2026-10-08 | CVE-2026-1933 | Samba Read-Only Share NTFS Reparse Point Bypasses SMB-Layer Access Checks, Allowing Writes Through the Reparse Target | 7.1 High | Updated |
| 2026-10-08 | CVE-2026-18922 | 389 Directory Server SASL Stale Cyrus Auxiliary Property Grants Directory Manager Access Without Credentials, Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-08 | CVE-2026-18453 | 389 Directory Server Paged Results with USE_ONE_BACKEND Triggers a Null Pointer Dereference Reachable Without Authentication | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-18355 | 389 Directory Server SASL I/O Layer Underflows on Small Wire Lengths, Causing a Heap Buffer Overflow for Authenticated Users | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-15722 | 389 Directory Server RUV berval Digit Parser Stack Overflow Reachable Without Credentials | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-14476 | SSSD AD GPO gPCFileSysPath Path Traversal Sequences Let Privileged Attackers Write Files Outside the GPO Cache and Inject Kerberos Configuration as Root | 8.0 High | Updated |
| 2026-10-08 | CVE-2026-14474 | SSSD ldap_sudo with Unconfigured Search Base Accepts Injected sudoRole Entries, Granting Low-Privileged Accounts Root-Level sudo | 8.8 High | Updated |
| 2026-10-08 | CVE-2026-11770 | 389 Directory Server CleanAllRUV Operation Accepts Unsanitized Input in an LDAP Filter, Enabling Unauthenticated Extraction of Replication Secrets | 7.5 High | Updated |
| 2026-10-08 | CVE-2026-106062 | GIMP DDS Loader Integer Overflow in 32-Bit Arithmetic Leads to Heap Overflow When Opening Crafted Image Files | 7.8 High | Updated |
| 2026-10-08 | CVE-2026-102257 | SonicWall SMA1000 AMC Component Zip Slip Path Traversal Enables Remote Code Execution for Administrative Users | 7.2 High | Updated |
| 2026-10-08 | CVE-2026-102256 | SonicWall SMA1000 Command Injection in Authenticated Management Path Yields Operating System Command Execution | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98369 | Linux Kernel xfrm trans_reinject Workqueue Migration Drops Required RCU Lock and Reference Counts, Causing a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98368 | Linux Kernel ESP Zerocopy Path Frees Managed Fragments Early and Leaks Page-Rate References, Opening a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98367 | Linux Kernel RDMA/siw siw_accept Connection Establishment Race Frees QP and cep Under Lock, Enabling a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98366 | Linux Kernel RDMA/rxe rereg_user_mr Reassigns Protection Domain Before Cleanup Completes, Creating a Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98365 | Linux Kernel RDMA/rxe mr_check_range Integer Overflow Produces Unauthenticated Remote Out-of-Bounds Access Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-07 | CVE-2026-98364 | Linux Kernel xfrm Bundle Holds a Stale dst->dev After RTM_DELLINK, Producing a Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98361 | Linux Kernel RDMA/rxe On-Demand Paging Omits HMM_PFN_WRITE Flag, Allowing a Local User to Overwrite Read-Only File Mappings | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98360 | Linux Kernel RDMA/rxe mcg_tree Premature Publish Leaves a Dangling Pointer, Enabling a Local Use-After-Free | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98359 | Linux Kernel RDMA ib_get_eth_speed Calls ethtool on a Netdev Already Unregistering, Enabling a Use-After-Free | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98357 | Linux Kernel IB/iSER Deferred Control PDU Completion Workqueue Accesses Freed Memory, Reachable from the Network Without Authentication | 8.1 High | Updated |
| 2026-10-07 | CVE-2026-98349 | Linux Kernel libipw Beacon and Probe Response Parser Wraps a 16-Bit Length on Short Frames, Reading Up to 64 KiB Out of Bounds | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-98348 | Linux Kernel libipw Association Response Parser Integer Wraps on Short Frames, Triggering an Adjacent Out-of-Bounds Read | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-98341 | Linux Kernel cfg80211 Frees a Driver-Owned Scan Request on Interface Teardown, Yielding a Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98339 | Linux Kernel cfg80211 BSS Type Filter Missing Bounds Check Allows Adjacent Attackers to Trigger Out-of-Bounds Access | 8.8 High | Updated |
| 2026-10-07 | CVE-2026-98331 | Linux Kernel mac80211 Virtual Interface Left in local->interfaces List After Network Namespace Destruction, Creating a Stale Reference | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98330 | Linux Kernel cfg80211 wiphy Allocation Failure During Network Namespace Move Leaves a Stale Namespace Pointer | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98324 | Linux Kernel dmaengine/pxa kzalloc_flex Double-Counts nb_desc, Overflowing the Allocation Size and Corrupting Kernel Memory | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98323 | Linux Kernel RDMA/siw Fails to Reassemble Fragmented DDP Headers, Allowing Unauthenticated Remote Out-of-Bounds Write Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-07 | CVE-2026-98320 | Linux Kernel netfilter Flowtable Releases Conntrack Reference Before Teardown Completes, Producing a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98318 | Linux Kernel SMB Client Accepts Absolute Symlink NT Prefix Without Validation, Allowing a Rogue SMB Server to Trigger Out-of-Bounds Write | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98315 | Linux Kernel NTFS Runlist Shrink and Cluster Map Operations Lack Lock Protection, Exposing a Local Race Condition | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98311 | Linux Kernel virt_wifi Transfers Operstate to a Netdev Not Yet Registered, Creating a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98305 | Linux Kernel DSA mxl862xx Statistics Poll Accesses a Freed Port Structure, Yielding a Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98290 | Linux Kernel Bluetooth RFCOMM Listener Cleanup Lock Inversion Can Deadlock, Causing Adjacent Denial of Service | 7.5 High | Updated |
| 2026-10-07 | CVE-2026-98283 | Linux Kernel KVM PPC Book3S HV Nested Guest IDR Pointer Freed Without Clearing Reference, Enabling Host Use-After-Free from Guest Context | 8.8 High | Updated |
| 2026-10-07 | CVE-2026-98282 | Linux Kernel PowerPC IOMMU TCE Check Integer Overflows npages, Enabling a Guest-to-Host Boundary Violation Scoring 8.8 | 8.8 High | Updated |
| 2026-10-07 | CVE-2026-98281 | Linux Kernel Futex vfork Path Allocates Private Hash Incorrectly, Exposing a Local Memory Corruption Condition | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98276 | Linux Kernel sock_gettstamp SOCK_RCU_FREE Lost-Update Race Opens a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98261 | Linux Kernel CIFS Secondary Channel Shutdown Race Leaves a Dangling Primary Server Pointer, Triggering a Network-Accessible Use-After-Free | 8.1 High | Updated |
| 2026-10-07 | CVE-2026-98260 | Linux Kernel exec() de_thread Path Frees Per-Thread CPU Timers Prematurely on Non-Leader exec, Enabling a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98258 | Linux Kernel POSIX CPU Timer Firing State Check Uses a Freed Object, Opening a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98257 | Linux Kernel RDS/IB Version Mismatch Triggers a Deadlock in rds_conn_destroy, Causing Network Denial of Service | 7.5 High | Updated |
| 2026-10-07 | CVE-2026-98256 | Linux Kernel exec() Race with POSIX Timer sigqueue Leaves a Dangling Pointer Exploitable as Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98254 | Linux Kernel swiotlb Highmem Page Lookup Address Mismatch Copies Data to the Wrong Physical Page | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98253 | Linux Kernel RDMA/ucma Multicast Join Mutex Race Produces a Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98252 | Linux Kernel RDMA iwpm_get_nlmsg_request Refcount Race Produces a Local Use-After-Free | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98251 | Linux Kernel Open vSwitch Conntrack Labels Extension Reallocation Leaves a Stale Reference, Creating a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98243 | Linux Kernel dma-buf Fence Signaling Bit Check Outside RCU Protection Opens a Local Use-After-Free Window | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-98241 | Linux Kernel IPv6 xfrm Error Path Casts request_sock as a Full Socket, Triggering a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98239 | Linux Kernel LAN743x RX Checksum Path Reads ip_summed from a Freed Fragment Socket Buffer, Enabling a Network-Triggered Use-After-Free | 8.1 High | Updated |
| 2026-10-07 | CVE-2026-98230 | Linux Kernel xfrm state_cache hlist_del_rcu Missing Initialization Enables a Double-Free Under High Contention | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98229 | Linux Kernel xfrm Input State Pointer Dereferenced After VTI/XFRM Interface Resets the Security Path, Yielding a Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98228 | Linux Kernel MIPS I6500 LL/SC Ordering Lacks Required Sync Instruction, Causing Kernel Null Dereference on Affected Hardware | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98216 | Linux Kernel IB/hfi1 PIO_CRED mmap Pointer Arithmetic Is Off by a Factor of 64, Mapping the Wrong Physical Memory Region | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-98197 | Linux Kernel hwmon w83791d Leaves fan/pwm sysfs Entries Present After Driver Unbind, Enabling a Local Use-After-Free | 7.0 High | Updated |
| 2026-10-07 | CVE-2026-98180 | Linux Kernel drm/msm GPU Scheduler Frees a Fence Too Early, Leaving a Use-After-Free Window | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-98175 | Linux Kernel SMB Client Leaves Reconnect Delayed Work Running After Socket Close, Creating a Network-Triggered Use-After-Free | 7.5 High | Updated |
| 2026-10-07 | CVE-2026-98174 | Linux Kernel SMB Client TCP_Server_Info rlist Zero-Initialized Instead of Self-Linked, Causing a Null Dereference on Network Operations | 7.5 High | Updated |
| 2026-10-07 | CVE-2026-98173 | Linux Kernel SMB Client iface_list Race During Concurrent Interface Refresh Creates a Network-Triggered Use-After-Free | 7.5 High | Updated |
| 2026-10-07 | CVE-2026-98171 | Linux Kernel SMB Client Compound PDU next_buffer Pointer and Pre-Decryption pdu_length Mismatch Enable a Network-Triggered Use-After-Free Scoring 8.8 | 8.8 High | Updated |
| 2026-10-07 | CVE-2026-98169 | Linux Kernel SMB Client smb3_enum_snapshots Trusts Server-Supplied Length, Allowing a Rogue Server to Trigger Out-of-Bounds Slab Read | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-98166 | Linux Kernel drm/ttm Swapout Path Omits bulk_move List Removal, Opening a Local Use-After-Free | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-98164 | Linux Kernel KVM x86 MMU Write Tracking Under SMM Only Scans the Current Address Space, Leaving Other Mappings Unprotected | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-93538 | Registering SUSE Rancher Fleet Agent Can Spoof Reserved Management Namespace Labels, Creating Cross-Tenant Policy Confusion in Multi-Tenancy Deployments | 7.1 High | Updated |
| 2026-10-07 | CVE-2026-88808 | SUSE Rancher Fleet Agent Uses Cluster-Admin Credentials for Downstream Writes, Exposing Cross-Tenant Data in Shared Cluster Environments | 8.8 High | Updated |
| 2026-10-07 | CVE-2026-78446 | Windows Distributed File System Use-After-Free Lets Authorized Network Users Execute Code Remotely | 7.5 High | Updated |
| 2026-10-07 | CVE-2026-63995 | Linux Kernel ethtool CMIS start_cmd_payload_size Lacks Bounds Enforcement, Permitting a Local Out-of-Bounds Write | 7.8 High | Updated |
| 2026-10-07 | CVE-2026-63994 | Linux Kernel iptunnel_pmtud_build_icmp Caches ip_hdr Before skb_cow May Reallocate the Buffer, Enabling Unauthenticated Remote Use-After-Free Scoring 9.8 | 9.8 Critical | Updated |
| 2026-10-07 | CVE-2026-63992 | Linux Kernel iptunnel_pmtud_check_icmp Reads Transport Header Before It Is Set, Allowing Unauthenticated Remote Out-of-Bounds Access Scoring 9.1 | 9.1 Critical | Updated |
| 2026-10-07 | CVE-2026-20230 | Cisco Unified Communications Manager SSRF Flaw Routes Attacker Requests to Internal Resources; CISA's June 28th KEV Deadline for Covered Entities Has Lapsed | 8.6 High | KEV |
| 2026-10-07 | CVE-2026-107194 | Sungrow iSolarCloud login_type Authentication Bypass Enables Account Takeover on Solar Grid Infrastructure, with NVD Citing Potential for Europe-Wide Outages | 9.2 Critical | Updated |
| 2026-10-07 | CVE-2026-102255 | SonicWall SMA1000 Workplace Pre-Authentication Server-Side Request Forgery Scores 10.0 CVSS Without Requiring Credentials | 10.0 Critical | Updated |
| 2026-10-07 | CVE-2026-101258 | Ghostscript -dSAFER Sandbox Bypass Coupled with Memory Corruption Enables Shell Execution on Processed Documents | 7.8 High | Updated |
| 2026-10-07 | CVE-2025-71261 | SUSE Harvester TLS Certificate Validation Flaw Exposes Rancher Manager Communication to Man-in-the-Middle Bypass for Network-Level Attackers | 8.6 High | Updated |
| 2026-10-07 | CVE-2025-53844 | Siemens RUGGEDCOM APE1808 FortiOS Out-of-Bounds Write in Specific Versions Allows Attacker to Execute Unauthorized Code | 8.8 High | Updated |
| 2026-10-07 | CVE-2025-24818 | Nokia MantaRay NM Log Search Component Injects Log Search Terms Into OS Commands, Giving Low-Privileged Adjacent Attackers Code Execution | 8.0 High | Updated |
| 2026-10-07 | CVE-2025-24817 | Nokia MantaRay NM Symptom Collector Passes User Input Directly to OS Commands, Allowing Low-Privileged Adjacent Attackers to Execute Arbitrary Commands | 8.0 High | Updated |
| 2026-10-07 | CVE-2025-15480 | Ubuntu ubuntu-desktop-provision Writes User Password Hashes to Crash Report Logs, Exposing Credentials Scoring 9.1 CVSS | 9.1 Critical | Updated |
| 2026-10-07 | CVE-2025-14813 | Bouncy Castle Java G3413CTRBlockCipher Implements CTR Mode Incorrectly, Silently Weakening Encryption for Network-Accessible Applications | 7.5 High | Updated |
| 2026-10-07 | CVE-2025-14576 | Qt SVG VectorImage Skips Node ID Validation, Allowing Code Injection When an Application Renders a Crafted SVG File | 7.8 High | Updated |
| 2026-10-07 | CVE-2025-14551 | Ubuntu Subiquity Writes Wi-Fi Credentials in Plaintext to Crash Logs, Exposing Passwords to Local or Remote Log Readers | 8.1 High | Updated |
| 2026-10-07 | CVE-2025-13914 | Juniper Networks Apstra Skips SSH Host Key Validation, Exposing Managed Device Connections to Unauthenticated Man-in-the-Middle Attacks | 8.7 High | Updated |
| 2026-10-06 | CVE-2026-98050 | Linux Kernel mlxsw PTP Garbage Collection Workqueue Corrupts the GRO List via napi_gro_receive, Triggering Adjacent Network Instability | 7.5 High | Updated |
| 2026-10-06 | CVE-2026-94293 | Murrelektronik AAS Edge Client All Versions Allow Unauthenticated Remote Attacker to Read and Modify Asset Administration Shell Submodel Data | 9.8 Critical | Updated |
| 2026-10-06 | CVE-2026-79655 | sos clean Extracts tar Archives Without Resolving Symlinks or Hardlinks, Allowing Path Traversal Writes to Arbitrary Paths as Root | 7.8 High | Updated |
| 2026-10-06 | CVE-2026-7507 | Keycloak Login-Actions Restart Endpoint Session Fixation Lets Unauthenticated Attackers Hijack Required-Action Flows and Take Over Accounts | 7.5 High | Updated |
| 2026-10-06 | CVE-2026-7307 | Keycloak SAML XML Processing Exhausts CPU and Starves Worker Threads, Enabling Unauthenticated Denial of Service | 7.5 High | Updated |
| 2026-10-06 | CVE-2026-56211 | Red Hat AI Inference Server 3.3 libaom Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-06 | CVE-2026-56210 | Red Hat AI Inference Server 3.3 libaom Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-06 | CVE-2026-56209 | Red Hat AI Inference Server 3.3 libaom Arbitrary Filesystem Write Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-06 | CVE-2026-56208 | Red Hat AI Inference Server 3.3 libaom Buffer Overflow Reachable by Unauthenticated Remote Attackers (CVSS 7.6) | 7.6 High | Updated |
| 2026-10-06 | CVE-2026-4634 | Keycloak OIDC Token Endpoint Processes Excessively Long scope Parameters Without Bounds, Enabling Unauthenticated Denial of Service | 7.5 High | Updated |
| 2026-10-05 | CVE-2026-97185 | GIMP GIMPressionist Plugin Does Not Validate Preset Vector Indices, Writing Out of Bounds When Processing Crafted Presets | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-92248 | GIMP PSD Loader Integer Overflow in Embedded JPEG Header Computation Causes Heap Overflow When Opening Crafted PSD Files | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-90948 | GIMP ICO Loader Integer Overflow in Embedded PNG Processing Leads to Heap Overflow on Crafted Image Files | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-90947 | GIMP Lighting Effects Plugin Trusts Preset Light Source Count Without Bounds Checking, Writing Out of Bounds on Crafted Presets | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-89793 | Linux Kernel ublk Leaves VM_MAYWRITE Set on PROT_READ Mappings, Allowing Low-Privileged Processes to Upgrade to Write Permissions via mprotect | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-64042 | Linux Kernel vfio/pci Exports BAR DMABUF Without Verifying BAR Reservation, Allowing a Guest to Access Host Memory Scoring 8.8 | 8.8 High | Updated |
| 2026-10-05 | CVE-2026-64041 | Linux Kernel ASoC fs210x strscpy Bound Derives from Source Length, Overflowing the Destination Buffer | 7.8 High | Updated |
| 2026-10-04 | CVE-2026-86060 | MikroTik RouterOS's Argument Injection in a Command-Processing Component Allows Unauthenticated Attackers to Execute Arbitrary Commands on the Router; CISA's September 13th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-10-04 | CVE-2026-67276 | MikroTik RouterOS SSH Key Comparison Omits RSA Exponent, Letting an Attacker with a Known Modulus Authenticate as Another User | 8.1 High | EPSS-Imminent |
| 2026-10-04 | CVE-2026-20181 | Cisco Identity Services Engine Authenticated Admin Command Injection Enables Arbitrary OS Command Execution on the Underlying System | 9.1 Critical | EPSS-Imminent |
| 2026-10-03 | CVE-2026-98154 | Linux Kernel nvme-rdma: Failure to Fix -EIO cleanup order in queue_rq | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98130 | Linux Kernel sctp: Failure to Fix a TOCTOU race in SCTP_CMD_TIMER_START, Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-03 | CVE-2026-98122 | Linux Kernel vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98116 | Linux Kernel ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98108 | Linux Kernel Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-98096 | Linux Kernel ipv6: sr: restore network header before routing and forwarding, Reachable from the Network Without Credentials (CVSS 7.4) | 7.4 High | Updated |
| 2026-10-03 | CVE-2026-98083 | Linux Kernel btrfs: Failure to Fix transaction use-after-free in raid stripe insertion | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98070 | Linux Kernel net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks(), Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-03 | CVE-2026-98069 | Linux Kernel net/rds: acquire the fastpath locks in rds_conn_shutdown(), Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-03 | CVE-2026-98052 | Linux Kernel net: bcmasp: clear txcb->last before writing each descriptor | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98030 | Linux Kernel net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98027 | Linux Kernel net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98023 | Linux Kernel vxlan: reject dynamic fdb entries that reference a nexthop id | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98017 | Linux Kernel net/sched: defer qdisc freeing after failed creation | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-97991 | Linux Kernel vdpa_sim_blk: reject out-of-range sector starts | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-97990 | Linux Kernel vdpa_sim_net: Failure to Check TX pull result before RX copy | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-97957 | Linux Kernel net: hinic: fix mailbox segment buffer overflow | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-97509 | Linux Kernel thunderbolt: Keep XDomain reference during the lifetime of a service | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-97508 | Linux Kernel thunderbolt: Set tb->root_switch to NULL when domain is stopped | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-97497 | Linux Kernel drm/amdkfd: Failure to Check bounds for allocate_sdma_queue restore_sdma_id | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-97496 | Linux Kernel drm/amdkfd: Failure to Fix OOB memory exposure in get_wave_state() | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-97455 | Linux Kernel ACPICA: Failure to Fix use-after-free in acpi_ds_terminate_control_method() | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97454 | Linux Kernel ACPICA: Failure to Add boundary checks in acpi_ps_get_next_field() | 7.7 High | Updated |
| 2026-10-03 | CVE-2026-97452 | Linux Kernel ACPICA: Failure to Prevent adding invalid references | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97451 | Linux Kernel ACPICA: Failure to Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97450 | Linux Kernel ACPICA: Failure to Validate handler object type in two places | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97448 | Linux Kernel ACPICA: Failure to Add validation for node in acpi_ns_build_normalized_path() | 7.7 High | Updated |
| 2026-10-03 | CVE-2026-93196 | Linux Kernel nvdimm: virtio_pmem: refcount requests for token lifetime | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-90030 | Linux Kernel usb: dwc3: clear forceRM when issuing EndTransfer | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-90016 | Linux Kernel staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-90013 | Linux Kernel tracing: Take trace_array reference when opening options file | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-90002 | Linux Kernel ftrace: Take trace_array reference before accessing its ftrace_ops | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89972 | Linux Kernel nvme: Failure to Add missing SRCU grace period in error path, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-89971 | Linux Kernel nvme: skip the zoned limits update if the zone info query failed, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-89840 | Linux Kernel f2fs: Failure to Validate MOVE_RANGE destination size | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-89838 | Linux Kernel f2fs: limit recovery filename logging to stored length | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-89832 | Linux Kernel f2fs: Failure to Fix to clear dirty flag on folio in error path | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89806 | Linux Kernel drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89795 | Linux Kernel PCI: Allow per function PCI slots to fix slot reset on s390 | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89792 | Linux Kernel ksmbd: Failure to Prevent out-of-bounds reads in share config responses | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-89560 | Linux Kernel landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89520 | Linux Kernel sched/core: Make core-sched flips wait for in-flight selections | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89503 | Linux Kernel ring-buffer: Failure to Fix subbuf resize race with ring_buffer_alloc_read_page() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89500 | Linux Kernel ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89452 | Linux Kernel iommu/msm: Unwind probe state on registration failure | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89445 | Linux Kernel iommufd: Failure to Fix UAF in selftest IOPF reporting | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-89441 | Linux Kernel mmc: via-sdmmc: cancel card-detect work on remove | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-81016 | Linux Kernel platform/x86/amd/pmc: Propagate SMU errors and validate S2D address | 7.7 High | Updated |
| 2026-10-03 | CVE-2026-81015 | Linux Kernel platform/x86/amd/pmc: Failure to Fix LPS0 and debugfs leaks when STB init fails | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-80980 | Linux Kernel net/smc: stop killed, freed and out_of_sync sharing a byte, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-80937 | Linux Kernel wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-80935 | Linux Kernel wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-80926 | Linux Kernel ksmbd: Failure to Fix use-after-free in oplock break notification, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-80726 | Linux Kernel KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (CVSS 9.3) | 9.3 Critical | Updated |
| 2026-10-03 | CVE-2026-80521 | Linux Kernel af_unix: Unlink scc_entry in unix_del_edge() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-76504 | CISA's October 3rd KEV Remediation Deadline for Cisco Catalyst SD-WAN Manager URI Encoding Bypass Has Passed; Covered Entities Still Exposed Are Out of Compliance | 9.8 Critical | KEV |
| 2026-10-03 | CVE-2026-74743 | Linux Kernel macvlan: inherit needed_headroom and needed_tailroom from lowerdev, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-74521 | Linux Kernel ksmbd: Failure to Use memcmp() to compare ClientGUIDs, Reachable Without Authentication (CVSS 9.1) | 9.1 Critical | Updated |
| 2026-10-03 | CVE-2026-74496 | Linux Kernel fou: Failure to Fix use-after-free in fou_create() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-74347 | Linux Kernel netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-74294 | Linux Kernel ASoC: meson: aiu: Validate written enum values | 7.3 High | Updated |
| 2026-10-03 | CVE-2026-74289 | Linux Kernel ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-74258 | Linux Kernel bpf: Guard __get_user acesss with access_ok for uprobe_multi data | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-72496 | Linux Kernel RDMA/bnxt_re: Proper rollback if the ioremap fails (CVSS 9.2) | 9.2 Critical | Updated |
| 2026-10-03 | CVE-2026-72485 | Linux Kernel coresight: platform: defer connection counter increment until alloc succeeds | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-72334 | Linux Kernel Bluetooth: ISO: fix malformed ISO_END/CONT handling | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-68391 | Linux Kernel Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-68287 | Linux Kernel drop_monitor: Failure to Fix size calculations for 64-bit attributes, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-68236 | Linux Kernel drm/amd/display: set new_stream to NULL after release | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-68161 | Linux Kernel sctp: close UDP tunnel sockets during netns teardown, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-68155 | Linux Kernel libceph: Reject monmaps advertising zero monitors, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-68097 | Linux Kernel ksmbd: Failure to Validate ACE size against SID sub-authorities | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-53359 | Linux Kernel KVM: x86: Fix shadow paging use-after-free due to unexpected role | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-53005 | Linux Kernel AF_UNIX SOCKMAP Redirect Hides Inflight File Descriptors from the Garbage Collector, Leaking Inflight Sockets Indefinitely | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-52988 | Linux Kernel netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-20273 | Cisco IOS XE's Improper Input Validation Allows a Remote Attacker to Trigger a Device Crash or Disruption via a Specially Crafted Input | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20272 | Cisco IOS XE's Injection Flaw Allows Remote Attackers to Execute Arbitrary Commands via a Specially Crafted Input Reaching a Downstream Component | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-20271 | Cisco IOS XE's Insufficient Control Flow Management Allows a Remote Attacker to Disrupt Device Operation via a Crafted Packet | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20270 | Cisco IOS XE's Incorrect Calculation Vulnerability Allows a Remote Attacker to Cause an Unrecoverable Device Condition via a Specially Crafted Input | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20269 | Cisco IOS XE's Improper Resource Lifetime Management Allows Remote Attackers to Exhaust Device Resources and Cause a Denial of Service | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20268 | Cisco IOS XE's Improper Restriction of Memory Buffer Operations Allows Remote Attackers to Potentially Execute Code or Crash the Device via a Malformed Packet | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20267 | Cisco IOS XE's Improper Access Control Allows Network-Based Attackers to Access Protected Functions or Data Without Proper Authorization | 9.0 Critical | Updated |
| 2026-10-02 | CVE-2026-98163 | Linux Kernel cgroup: Failure to Avoid iteration of dying tasks with zero refcount | 7.0 High | Updated |
| 2026-10-02 | CVE-2026-98115 | Linux Kernel ksmbd: Failure to Safely drain sessions during logoff | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-97415 | Linux Kernel btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-94422 | Red Hat Enterprise Linux 10 Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-86345 | Red Hat Enterprise Linux 10 389-ds-base Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 9.0) | 9.0 Critical | Updated |
| 2026-10-02 | CVE-2026-86344 | Red Hat Enterprise Linux 10 389-ds-base Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-86326 | Moxa MGate MB3170 Series Security Vulnerability Exploitable by Authenticated Admin Network Attackers (CVSS 8.6) | 8.6 High | Updated |
| 2026-10-02 | CVE-2026-86325 | Moxa MGate MB3170 Series Buffer Overflow Exploitable by Low-Privilege Network Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-84411 | MikroTik RouterOS Remote Code Execution Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-10-02 | CVE-2026-84233 | Red Hat Enterprise Linux 10 rpm Security Flaw Reachable by Unauthenticated Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-10-02 | CVE-2026-75937 | Digi International IX Family Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-71452 | Johnson Controls EasyIO FS32 Command Injection Exploitable by Authenticated Admin Adjacent-Network Attackers (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-71449 | Johnson Controls EasyIO FS32 Security Vulnerability Reachable Without Authentication at CVSS 9.3 | 9.3 Critical | Updated |
| 2026-10-02 | CVE-2026-6893 | Red Hat Enterprise Linux 10 dracut Remote Code Execution Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-64893 | Johnson Controls EasyIO NEO Security Vulnerability Exploitable by Low-Privilege Network (High-Complexity Exploit) Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-64008 | Linux Kernel accel/rocket: Failure to Fix UAF via dangling GEM handle in create_bo | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-64001 | Linux Kernel ALSA: pcm: oss: Fix setup list UAF on proc write error | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63996 | Linux Kernel ethtool: cmis: require exact CDB reply length | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63993 | Linux Kernel vxlan: Missing Guard: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu(), Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-02 | CVE-2026-63975 | Linux Kernel Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-63972 | Linux Kernel net: mana: Skip redundant detach on already-detached port, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-63971 | Linux Kernel sctp: Failure to Fix race between sctp_wait_for_connect and peeloff | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63970 | Linux Kernel vsock/virtio: bind uarg before filling zerocopy skb | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63622 | Red Hat Enterprise Linux 10 libvirt Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-55396 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 8.5) | 8.5 High | Updated |
| 2026-10-02 | CVE-2026-55395 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-55393 | Teledyne FLIR Aware2 Path Traversal Reachable Without Authentication at CVSS 10.0 | 10.0 Critical | Updated |
| 2026-10-02 | CVE-2026-34494 | Johnson Controls Neo Series MVP2 Unauthenticated Security Vulnerability over Network (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-34493 | Johnson Controls EasyIO FS32 Unauthenticated Security Vulnerability over Network (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-18917 | Red Hat Enterprise Linux 10 libvirt Buffer Overflow Reachable by Low-Privilege Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-17523 | Linux Kernel can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-16529 | Red Hat Enterprise Linux 10 Integer Overflow Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-16527 | Red Hat Enterprise Linux 10 Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-16526 | PCP linux_sockets PMDA Accepts Connections on an Unsecured Internal Channel, Allowing Low-Privileged Users to Escalate to Root | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-16524 | PCP linux_sockets PMDA network.persocket.filter Metric Passes Filter Input to OS Commands, Allowing Low-Privileged Users to Execute Commands as the PMDA User | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-15816 | Red Hat Enterprise Linux 10 dracut Security Flaw Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-14984 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-14983 | Teledyne FLIR Aware2 Denial of Service Reachable by Adjacent Unauthenticated Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-02 | CVE-2026-12912 | Red Hat OpenShift AI 3.4 libtiff Buffer Overflow Reachable by Low-Privilege Local Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-104988 | Red Hat Enterprise Linux 10 Dogtag Security Flaw Reachable by Low-Privilege Remote Attackers (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-02 | CVE-2026-102757 | Eclipse ThreadX Security Vulnerability Exploitable by Low-Privilege Local Attackers (CVSS 8.5) | 8.5 High | Updated |
| 2026-10-02 | CVE-2026-102010 | Red Hat Enterprise Linux 10 GCC Use-After-Free Reachable by Unauthenticated Remote Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-10-02 | CVE-2026-10118 | Red Hat AI Inference Server 3.3 Poppler's Out-of-Bounds Write Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-100075 | Linux Kernel RDMA/srpt: Failure to Fix srpt_alloc_rw_ctxs() unwind counters, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-01 | CVE-2026-90949 | Red Hat Enterprise Linux 8 GIMP's Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69594 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69576 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69549 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-10-01 | CVE-2026-69546 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network | 8.1 High | Updated |
| 2026-10-01 | CVE-2026-69541 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69524 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network | 8.1 High | Updated |
| 2026-10-01 | CVE-2026-48710 | Kludex Starlette's HTTP Request Smuggling Vulnerability Allows Network-Adjacent Attackers to Bypass Security Controls and Poison Shared HTTP Connections | 6.5 Medium | KEV |
| 2026-10-01 | CVE-2026-42965 | OpenShift Container Platform Security Flaw Reachable by Low-Privilege Remote Attackers (CVSS 7.7) | 7.7 High | Updated |
| 2026-10-01 | CVE-2026-3012 | Enterprise Linux Samba’s Security Flaw Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 8.0) | 8.0 High | Updated |
| 2026-10-01 | CVE-2026-1784 | OpenShift Container Platform Injection Reachable by Low-Privilege Local Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-01 | CVE-2026-16313 | Red Hat Enterprise Linux 10 sg3_utils Security Flaw Reachable by Unauthenticated Local Attackers (CVSS 7.6) | 7.6 High | Updated |
| 2026-10-01 | CVE-2026-101322 | Eclipse Eclipse BaSyx AAS Web UI Unauthenticated Security Vulnerability over Network (CVSS 8.3) | 8.3 High | Updated |
| 2026-10-01 | CVE-2025-41753 | WAGO 0751-9x01 Security Vulnerability Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-30 | CVE-2026-98156 | Linux Kernel virtio DRM Driver Bypasses DMA API for Resource Backing on Xen PV, Leading to Memory Corruption | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-98150 | Linux Kernel BPF CPU Validation Fails for Sparse CPU ID Configurations, Permitting Invalid CPU Targeting in BPF Programs | 7.0 High | Updated |
| 2026-09-30 | CVE-2026-98143 | Linux Kernel EthoS-U Accelerator Driver Misreads U65 Rounding Mode as Storage Mode, Producing Incorrect Compute Results | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-98112 | Linux Kernel ksmbd SMB Server Does Not Manage Listener Task Lifetime on Network Device Events, Leading to Use-After-Free | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-98073 | Linux Kernel Fails to Remove Conflicting Network Altnames for Dying Network Namespaces, Causing cfg80211 Warning and Potential Instability | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-98056 | Linux Kernel NVMe Driver Removes Stale Namespaces by NSID Range on Rescan, Potentially Exposing Stale Namespace Data | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-95509 | Qt for MCUs String.arg() Calculates Wrong Buffer Size for Latin-1 Strings, Reading Out of Bounds During Argument Formatting | 8.8 High | Updated |
| 2026-09-30 | CVE-2026-91191 | Lantronix G520 Boot Process Disables Firmware Signature Verification, Allowing Unauthorized Software to Pass as Authentic | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-91149 | Cockpit Web Service Accepts Unlimited Sustained Unauthenticated Connections, Enabling Remote Denial of Service | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-84409 | Lantronix G520 Management Interface Returns Metadata Fetched Over Unencrypted HTTP, Enabling Man-in-the-Middle Attacks on Update Mechanism | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-83596 | WebKitGTK Memory Corruption on Malicious Web Content Can Be Triggered by Processing a Specially Crafted Page | 8.8 High | Updated |
| 2026-09-30 | CVE-2026-81665 | Corosync Totem Process Group Message Reassembly Heap Overflow in totempg When Processing Fragments That Exceed Expected Bounds | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-79625 | CODESYS Runtime Monitoring Race Condition Under Concurrent Client Requests Risks Incorrect Reads, Writes, and Data Corruption | 8.1 High | Updated |
| 2026-09-30 | CVE-2026-78376 | WebKitGTK Use-After-Free Triggered by Malicious Web Content Enables Remote Code Execution | 8.8 High | Updated |
| 2026-09-30 | CVE-2026-76992 | CODESYS Gateway Client Allocates Unbounded Memory from Server-Controlled Size Field, Enabling Unauthenticated Remote Denial of Service | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-69358 | Remote Desktop Client Uninitialized Resource Use Lets Authorized Attacker Execute Code Over the Network | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-69338 | Windows Remote Desktop Gateway Service Use-After-Free Lets Authorized Network Attacker Escalate Privileges | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-69336 | Microsoft Standard XPS Heap Overflow Can Be Triggered Over the Network by an Authorized Attacker to Escalate Privileges | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-69329 | Windows BranchCache Out-of-Bounds Read Lets Unauthenticated Remote Attacker Deny Service | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-69325 | Microsoft JScript Heap Buffer Overflow Enables Unauthenticated Network Attacker to Execute Arbitrary Code | 8.1 High | Updated |
| 2026-09-30 | CVE-2026-69313 | Authorized Network Attackers Can Exploit a Microsoft Standard XPS Heap Overflow to Gain Elevated Privileges | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-69292 | Windows Remote Desktop Gateway Service Double-Free Lets Locally Authorized User Escalate Privileges | 7.0 High | Updated |
| 2026-09-30 | CVE-2026-69277 | Windows Local Security Authority Server Stack Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-69276 | Microsoft UxTheme Library Integer Underflow Enables Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-30 | CVE-2026-69275 | Windows Kernel Streaming WOW Thunk Service Driver Use-After-Free Lets Locally Authorized User Escalate Privileges | 7.0 High | Updated |
| 2026-09-30 | CVE-2026-69272 | Microsoft Standard XPS Heap Overflow Reachable Over the Network by Authorized Attackers for Privilege Escalation | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-69271 | Authorized Network Attackers Can Use a Microsoft Standard XPS Heap Overflow to Elevate Privileges | 8.0 High | Updated |
| 2026-09-30 | CVE-2026-69269 | Microsoft Standard XPS Integer Underflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-68897 | Microsoft Standard XPS Heap Overflow Is Reachable Locally by Authorized Users for Privilege Escalation | 7.0 High | Updated |
| 2026-09-30 | CVE-2026-68892 | Microsoft Standard XPS Heap-Based Buffer Overflow Gives Locally Authorized Attacker Elevated Privileges | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-68890 | Microsoft Standard XPS Heap-Based Buffer Overflow Lets Locally Authorized Attacker Elevate Privileges | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-68889 | Microsoft Standard XPS Heap Overflow Lets Authorized Network Attacker Escalate Privileges | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-6384 | GIMP GIF Loader ReadJeffsImage Buffer Overflow Can Execute Arbitrary Code When Opening a Crafted GIF File | 7.3 High | Updated |
| 2026-09-30 | CVE-2026-62813 | Active Directory Domain Services Use-After-Free Lets Authorized Network Attacker Execute Arbitrary Code | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-62810 | Active Directory Certificate Services Heap Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-30 | CVE-2026-103242 | rpm Accepts Wrong Header Type for RPMTAG_FILESIGNATURES, Allocating a One-Byte Buffer for Attacker-Controlled Hex-Decoded Payload | 7.1 High | Updated |
| 2026-09-30 | CVE-2026-102709 | Eclipse ThreadX TrustZone-M Non-Secure Callable Entry Functions Dereference Attacker-Controlled NS Pointers Without Validation, Exposing Secure Memory | 8.4 High | Updated |
| 2026-09-30 | CVE-2025-14272 | Rockwell Automation FactoryTalk PavilionX API Improper Authorization Allows Unauthenticated Actors to Execute Privileged Operations | 8.3 High | Updated |
| 2026-09-30 | CVE-2025-13036 | Rockwell Automation FactoryTalk Historian SE Login Endpoint Race Condition Allows Unauthenticated Authentication Token Harvest | 9.2 Critical | Updated |
| 2026-09-30 | CVE-2025-12659 | Siemens Simcenter Femap Memory Corruption on Parsing Specially Crafted IPT Files Enables Code Execution in Current Process | 7.8 High | Updated |
| 2026-09-30 | CVE-2025-11694 | Rockwell Automation 1769 CompactLogix Missing CIP Protocol Sequence Number Validation Enables Denial of Service by Network Attacker | 8.7 High | Updated |
| 2026-09-29 | CVE-2026-97024 | Flatpak Path Traversal in files/etc Directory During App Deployment Lets a Malicious Flatpak App Overwrite Host Configuration Files | 7.1 High | Updated |
| 2026-09-29 | CVE-2026-97023 | Flatpak Malicious App Can Use Path Traversal in the export/bin Directory During Deployment to Write Files Outside Its Sandbox | 7.1 High | Updated |
| 2026-09-29 | CVE-2026-96280 | OCI Delta Stream Parser Reads Sizes as 64-Bit Values but Passes Them to 32-Bit GLib Functions, Causing Truncation on 32-Bit Systems | 7.5 High | Updated |
| 2026-09-29 | CVE-2026-95520 | rpm Parses Crafted Symlink Entry with Overflow RPMTAG_LONGFILESIZES, Shrinking the Allocation to One Byte and Triggering Out-of-Bounds Write | 7.1 High | Updated |
| 2026-09-29 | CVE-2026-93834 | QEMU 9pfs Subsystem Race Between Main and Worker Threads During Request Processing Causes Use-After-Free | 8.8 High | Updated |
| 2026-09-29 | CVE-2026-88805 | SUSE Rancher Fails to Clear Credentials on Logout, Letting Remote Attackers Retain Access After Session End | 8.1 High | Updated |
| 2026-09-29 | CVE-2026-88804 | Unauthenticated Write to Public UI Settings in SUSE Rancher Enables Stored Cross-Site Scripting Attacks Against the Web Console | 9.6 Critical | Updated |
| 2026-09-29 | CVE-2026-87799 | Canonical LXD Migration Receive Path Resolves Symlinks Improperly, Allowing Authenticated User to Write Files Anywhere on the Host | 9.9 Critical | Updated |
| 2026-09-29 | CVE-2026-85921 | Windows Secure Kernel Mode Double-Free Allows Locally Authorized User to Escalate Privileges | 8.2 High | Updated |
| 2026-09-29 | CVE-2026-85526 | Canonical LXD btrfs unpackVolume Path Traversal Gives Authenticated Users with Instance Creation Rights Arbitrary Write Access to the Host Filesystem | 9.9 Critical | Updated |
| 2026-09-29 | CVE-2026-8066 | Hitachi Energy RTU500 End-of-Life Firmware Directory Traversal via File Upload Allows Unauthenticated Attacker to Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-29 | CVE-2026-8065 | Hitachi Energy RTU500 End-of-Life Firmware Update Endpoint Bypasses Authentication, Allowing Unauthenticated Arbitrary Firmware Upload | 9.1 Critical | Updated |
| 2026-09-29 | CVE-2026-78424 | NeuVector Runtime Policies Write Permission or Internal gRPC Certificate Key Enables OS Command Injection in the Privileged Enforcer Container | 8.8 High | Updated |
| 2026-09-29 | CVE-2026-77504 | Microsoft Office Word Double-Free Enables Unauthenticated Remote Code Execution Over the Network | 8.8 High | Updated |
| 2026-09-29 | CVE-2026-7395 | Hitachi Energy Asset Suite Exposes Configuration Upload Servlet to Unauthenticated Users Without Network Restrictions | 8.5 High | Updated |
| 2026-09-29 | CVE-2026-69611 | Windows Virtual Hard Disk Miniport Driver Use-After-Free Allows Locally Authorized User to Elevate Privileges | 7.0 High | Updated |
| 2026-09-29 | CVE-2026-69605 | Windows Install Service Use-After-Free Allows Locally Authorized User to Escalate Privileges | 7.0 High | Updated |
| 2026-09-29 | CVE-2026-69530 | Windows Reliable Multicast Transport Driver Use-After-Free Enables Unauthenticated Remote Code Execution | 8.1 High | Updated |
| 2026-09-29 | CVE-2026-69516 | Windows Connected Devices Platform Service Use-After-Free Lets Locally Authorized User Elevate Privileges | 7.0 High | Updated |
| 2026-09-29 | CVE-2026-69485 | Windows Remote Desktop Client Uses Uninitialized Memory, Allowing Authorized Attacker to Execute Code Over the Network | 8.8 High | Updated |
| 2026-09-29 | CVE-2026-69438 | Microsoft JScript Incorrect Numeric Conversion Allows Unauthenticated Remote Code Execution Over the Network | 8.1 High | Updated |
| 2026-09-29 | CVE-2026-69432 | Windows Volume Manager Driver Heap Overflow Allows Locally Authorized User to Escalate Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2026-69431 | Windows Telnet Client Heap Overflow Allows Unauthenticated Remote Attacker to Execute Arbitrary Code | 9.8 Critical | Updated |
| 2026-09-29 | CVE-2026-69418 | Windows Volume Manager Driver Heap Overflow Enables Authorized Attacker to Escalate Privileges Over the Network | 8.0 High | Updated |
| 2026-09-29 | CVE-2026-69407 | Windows Volume Manager Driver Integer Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2026-69401 | Windows Audio Video Control Transport Protocol Use-After-Free Lets Locally Authorized User Escalate Privileges | 7.0 High | Updated |
| 2026-09-29 | CVE-2026-69384 | Windows Virtual Hard Disk Miniport Driver Null Pointer Dereference Lets Unauthenticated Attacker Crash the Service Locally | 7.1 High | Updated |
| 2026-09-29 | CVE-2026-69365 | Windows Local Security Authority Server Out-of-Bounds Read Lets Authorized Network Attacker Escalate Privileges | 8.0 High | Updated |
| 2026-09-29 | CVE-2026-69360 | Microsoft Office Word Heap Overflow Allows Unauthenticated Remote Code Execution Over the Network | 8.8 High | Updated |
| 2026-09-29 | CVE-2026-69359 | Active Directory Domain Services Heap Overflow Allows Locally Authorized User to Escalate Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2026-68888 | Locally Authorized Users Can Exploit a Microsoft Standard XPS Heap Overflow to Raise Their Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2026-68885 | Microsoft Standard XPS Heap Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2026-68850 | Microsoft Account Component Heap Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2026-68828 | Windows Remote Desktop Client Heap Overflow Allows Unauthenticated Network Attacker to Execute Arbitrary Code | 8.8 High | Updated |
| 2026-09-29 | CVE-2026-56198 | Windows Trace Data Helper Out-of-Bounds Read Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-29 | CVE-2025-7639 | AVEVA Enterprise SCADA Authenticated Operator Can Tamper Serialized Data to Achieve Code Execution Under DNA Apps Security Privileges | 7.1 High | Updated |
| 2026-09-29 | CVE-2025-7406 | Nokia MantaRay NM sudo Misconfiguration Allows Local Administrator to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-09-29 | CVE-2025-59172 | Ericsson Packet Core Controller Versions Prior to 1.38 Fail to Neutralize Special Elements in Input, Enabling Command Injection | 8.5 High | Updated |
| 2026-09-29 | CVE-2025-41770 | Phoenix Contact AXC F PLC PLCnext Engineer Communication Interface Unauthenticated Denial-of-Service Vulnerability | 7.5 High | Updated |
| 2026-09-29 | CVE-2025-41769 | Phoenix Contact AXC F PLC PROFINET Service Buffer Overflow in Default Configuration Allows Unauthenticated Remote Reboot | 9.8 Critical | Updated |
| 2026-09-29 | CVE-2025-24815 | Nokia MantaRay NM Insufficient File Type Validation Allows Unrestricted File Upload, Enabling Remote Code Execution | 7.8 High | Updated |
| 2026-09-29 | CVE-2025-12012 | Rockwell Automation CompactLogix and ControlLogix 5370/5570 Can Be Forced into Non-Recoverable Fault via Invalid Project File Write | 9.2 Critical | Updated |
| 2026-09-29 | CVE-2025-12011 | Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Can Be Forced into Non-Recoverable Fault by Invalid Project File Write | 9.2 Critical | Updated |
| 2026-09-29 | CVE-2025-11698 | Rockwell Automation 5380/5480/5580 Controller Boot Firmware Below Version 1.072 Allows Invalid File Writes That Force Non-Recoverable Device Fault | 9.2 Critical | Updated |
| 2026-09-28 | CVE-2026-97520 | Linux Kernel GFS2 Filesystem Increments Quota Iterator at the Wrong Point, Causing Incorrect Quota Accounting | 7.1 High | Updated |
| 2026-09-28 | CVE-2026-97513 | Linux Kernel Wave5 Media Driver Releases m2m Context After Instance List Removal, Causing Use-After-Free | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-97478 | Linux Kernel ACRN Hypervisor irqfd Path Accesses Freed Memory During eventfd Shutdown | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-97474 | Linux Kernel iwlwifi Driver Retains Async Notifications After NIC Error, Causing Kernel Panic During Firmware Reconfig Failure | 7.4 High | Updated |
| 2026-09-28 | CVE-2026-97335 | Canonical LXD Incorrect Authorization on Custom Storage Volume Endpoint Lets Project-Scoped Users Copy and Read Volumes from Any Other Project | 7.7 High | Updated |
| 2026-09-28 | CVE-2026-90049 | Linux Kernel skb_zerocopy() Calls skb_tx_error() on the Source Buffer, Corrupting Transmit State on Zero-Copy Failure | 9.3 Critical | Updated |
| 2026-09-28 | CVE-2026-90048 | Linux Kernel NTFS3 Filesystem Driver Out-of-Bounds Write in ni_create() Is Reachable via a Crafted NTFS Volume | 9.8 Critical | Updated |
| 2026-09-28 | CVE-2026-90047 | Linux Kernel DRM/XE Driver Exposes Flat CCS Storage as Usable Memory, Leading to Silent Data Corruption | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-90046 | Linux Kernel Page Allocator Calls spin_trylock in NMI Context on Uniprocessor, Causing Deadlock Under Memory Pressure | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-90045 | Linux Kernel USB FunctionFS io_data Holds a Dangling Pointer Past Its Allocation Lifetime, Triggering Use-After-Free on I/O Completion | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-90044 | Linux Kernel USB Gadget FunctionFS AIO Error Handler Accesses Freed Memory on Asynchronous I/O Failure | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-85185 | Canonical LXD btrfs Storage Driver Path Traversal Lets Authenticated Users Escape Container Storage and Write Files to the Host Filesystem | 9.6 Critical | Updated |
| 2026-09-28 | CVE-2026-78428 | Concurrent SAML and OIDC Login Attempts in NeuVector Can Deliver One User's Authenticated Session to a Different User | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-78425 | NeuVector Accepts Reused SAML Assertions Issued to Users of Other Corporate IdP Applications, Enabling Cross-Application Identity Forgery | 7.6 High | Updated |
| 2026-09-28 | CVE-2026-77505 | Windows DNS Server Use-After-Free Allows Unauthenticated Network Attacker to Execute Arbitrary Code | 8.1 High | Updated |
| 2026-09-28 | CVE-2026-76693 | Unauthenticated Remote Attackers Can Deny Service to HPE EdgeConnect SD-WAN Gateway Services | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-76692 | Unauthenticated Adjacent Attackers Can Leak Memory and Crash HPE EdgeConnect SD-WAN Gateways via Malformed Input | 7.1 High | Updated |
| 2026-09-28 | CVE-2026-76691 | HPE EdgeConnect SD-WAN API Buffer Overflow Allows Authenticated User to Execute Commands as a Privileged OS Account | 7.2 High | Updated |
| 2026-09-28 | CVE-2026-76690 | HPE EdgeConnect SD-WAN Accepts Crafted Input That Runs Arbitrary OS Commands as an Authenticated Remote User | 7.2 High | Updated |
| 2026-09-28 | CVE-2026-76689 | HPE EdgeConnect SD-WAN Configuration Parser Stack Overflow Is Reachable by Authenticated Administrators via Crafted Config Data | 7.2 High | Updated |
| 2026-09-28 | CVE-2026-76686 | HPE EdgeConnect SD-WAN Gateway OS Exposes Unauthenticated Remote Denial-of-Service Condition | 7.5 High | Updated |
| 2026-09-28 | CVE-2026-76685 | HPE EdgeConnect SD-WAN Gateways Integer Overflow in Proxy Packet Processing Enables Unauthenticated Remote Code Execution | 8.1 High | Updated |
| 2026-09-28 | CVE-2026-76683 | HPE EdgeConnect SD-WAN API Endpoint Buffer Overflow Reaches Remote Code Execution Without Credentials When Preconditions Are Met | 8.1 High | Updated |
| 2026-09-28 | CVE-2026-76682 | HPE EdgeConnect SD-WAN Network Monitoring Component Buffer Overflow Can Crash or Execute Code Remotely Without Credentials | 8.2 High | Updated |
| 2026-09-28 | CVE-2026-76679 | Adjacent Network Attacker Can Force HPE EdgeConnect SD-WAN Gateways Into an Unrecoverable Crash Requiring Manual Reboot | 8.6 High | Updated |
| 2026-09-28 | CVE-2026-76678 | HPE EdgeConnect SD-WAN API Privilege Flaw Lets Low-Privilege Authenticated Users Execute System Commands as Root | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-76677 | Low-Privilege HPE EdgeConnect SD-WAN API Users Can Escalate to Administrative Access on the Web Management Interface | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-76676 | HPE EdgeConnect SD-WAN OS Stack Buffer Overflow Is Reachable by Adjacent Attackers for Arbitrary Code Execution Under Specific Preconditions | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-76675 | HPE EdgeConnect SD-WAN CLI Command Injection Gives Authenticated High-Privilege Users Full OS Control | 9.1 Critical | Updated |
| 2026-09-28 | CVE-2026-76674 | Unauthenticated Remote Buffer Overflow in HPE EdgeConnect SD-WAN Gateway OS Can Execute Arbitrary Commands | 9.8 Critical | Updated |
| 2026-09-28 | CVE-2026-76425 | Cisco ISE APIs Vulnerable to SQL Injection by Authenticated Remote Attacker | 7.6 High | Updated |
| 2026-09-28 | CVE-2026-76424 | Authenticated Attacker Can Upload or Copy Arbitrary Files on Cisco ISE Through the REST API | 7.2 High | Updated |
| 2026-09-28 | CVE-2026-70583 | Windows Core Messaging Heap Overflow Allows Locally Authorized User to Escalate Privileges | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-69499 | Windows Imaging Component Integer Overflow Enables Unauthenticated Network Attacker to Execute Arbitrary Code | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-69498 | Windows Win32K Use-After-Free Allows Locally Authorized User to Escalate Privileges | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-69495 | Windows Event Logging Service Heap Overflow Enables Unauthenticated Network Attacker to Execute Code | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-69494 | Windows Event Logging Service Out-of-Bounds Read Enables Unauthenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-69493 | Windows Event Logging Service Out-of-Bounds Read Allows Unauthenticated Remote Attacker to Execute Code | 9.8 Critical | Updated |
| 2026-09-28 | CVE-2026-69492 | Locally Authorized User Can Exploit a Second Windows Partition Management Driver Heap Overflow to Elevate Privileges | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-69488 | Windows Device Association Service Second Use-After-Free Path Allows Locally Authorized User to Escalate Privileges | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-69482 | Windows Error Reporting Creates Temporary Files in an Insecure Directory, Letting Locally Authorized Attacker Tamper with the Reporting Process | 7.1 High | Updated |
| 2026-09-28 | CVE-2026-69481 | Windows Enterprise App Management Service Heap Overflow Lets Authorized Network User Escalate Privileges | 8.0 High | Updated |
| 2026-09-28 | CVE-2026-69480 | Windows Partition Management Driver Heap Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-69478 | Windows Device Association Service Heap Overflow Allows Locally Authorized User to Escalate Privileges | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-69472 | Windows Human Interface Device Driver Use-After-Free Lets Locally Authorized User Escalate Privileges | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-69470 | Windows Connected User Experiences and Telemetry Service Use-After-Free Allows Locally Authorized User to Escalate Privileges | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-69468 | Windows Volume Manager Extension Driver Heap Overflow Lets Locally Authorized User Escalate Privileges | 7.0 High | Updated |
| 2026-09-28 | CVE-2026-69462 | Windows Error Reporting Service Heap Overflow Lets Authorized Network Attacker Escalate Privileges | 8.0 High | Updated |
| 2026-09-28 | CVE-2026-69460 | Windows Modern Device Management Use-After-Free Lets Authorized Attacker Escalate Privileges Over the Network | 7.1 High | Updated |
| 2026-09-28 | CVE-2026-69459 | Windows Power Dependency Coordinator Heap Overflow Lets Locally Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-62744 | Microsoft Windows Media Foundation Heap Overflow Enables Unauthenticated Attacker to Execute Code Over the Network | 8.8 High | Updated |
| 2026-09-28 | CVE-2026-43958 | rrdcached Stack Buffer Overflow via Crafted Command on a Local Socket Lets an Attacker with Socket Access Execute Arbitrary Code | 7.8 High | Updated |
| 2026-09-28 | CVE-2026-20263 | Cisco IOS XE BEEP Feature Crashes on a Specific Malformed SOAP Request, Enabling Unauthenticated Remote Denial of Service | 8.6 High | Updated |
| 2026-09-28 | CVE-2026-20234 | Cisco Identity Services Engine Second Critical Vulnerability Identified in Cisco Proactive Security Audit (CVSS 9.9) | 9.9 Critical | Updated |
| 2026-09-28 | CVE-2026-20192 | Cisco Identity Services Engine Critical Vulnerability Disclosed Through Cisco Proactive Security Review (CVSS 10.0) | 10.0 Critical | Updated |
| 2026-09-28 | CVE-2026-20130 | Cisco ISE Passive Identity Connector Critical Vulnerability Identified in Cisco Proactive Security Program (CVSS 10.0) | 10.0 Critical | Updated |
| 2026-09-26 | CVE-2026-94640 | rpcbind Crashes Under Large Unauthenticated Requests, Letting a Remote Attacker Deny RPC Services to Dependent Applications | 7.5 High | Updated |
| 2026-09-26 | CVE-2026-80152 | Lantronix SLC/EMG/SLB Web Management Services Endpoint Lets Authenticated Users Inject OS Commands as Root | 9.1 Critical | Updated |
| 2026-09-26 | CVE-2026-80151 | Lantronix SLC/EMG/SLB Web Management Services Endpoint Contains a Second Command Injection Path Allowing Root Execution by Authenticated Users | 9.1 Critical | Updated |
| 2026-09-26 | CVE-2026-80150 | Lantronix SLC8000/SLC9000/EMG/SLB882 WebSSH Listener Accepts Unauthenticated Server-Side Request Forgery Targets | 7.5 High | Updated |
| 2026-09-26 | CVE-2026-80149 | Lantronix WebSSH and WebTelnet Server-Side Request Forgery Lets Unauthenticated Attackers Redirect Device Requests to Internal Hosts | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80148 | Lantronix SLC/EMG/SLB882 WebSSH Listener Processes SSRF Probes From Unauthenticated Callers, Enabling Internal Network Mapping | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80146 | A Second Lantronix SLC/EMG/SLB Stack Buffer Overflow via Undocumented Interface Allows Authenticated Attackers to Execute Arbitrary Code | 9.9 Critical | Updated |
| 2026-09-26 | CVE-2026-67279 | MikroTik RouterOS Unauthenticated Session Bypass Carries Federal Remediation Deadline of September 28 | 6.5 Medium | KEV |
| 2026-09-26 | CVE-2023-45796 | Pilz PASvisu and PMI v8xx Stored Cross-Site Scripting in Runtime Component Exploitable by Low-Privilege Unauthenticated Remote Attacker | 8.1 High | Updated |
| 2026-09-26 | CVE-2023-45795 | Pilz PASvisu Builder Component Cross-Site Scripting Allows Local Unauthenticated Attacker to Gain Full Device Control | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-76460 | Cisco Identity Services Engine's Incorrect Use of Privileged APIs Allows Unauthenticated Remote Attackers to Gain Full Administrative Control; CISA's September 19th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-25 | CVE-2026-97941 | Linux Kernel SLAB Allocator Optimistic Freelist Return Races Against Concurrent Object Free, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97940 | Linux Kernel IPv6 fib6 Route Walker Use-After-Free on seq Stop Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97937 | Linux Kernel ftrace Function Graph State Initialized After Task Structure Copy, Enabling Local Privilege Escalation on Fork | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97931 | Linux Kernel ALSA us122l mmap Leaves VM_MAYWRITE on Read-Only Mappings, Enabling Privilege Escalation | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97926 | Linux Kernel UFS Filesystem Caches On-Disk Cylinder Group Metadata Without Validation, Enabling Local Memory Corruption | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97911 | Linux Kernel Arm Ethos-U NPU Driver Allows Zero-Size SRAM Job Configuration While Command Stream Still Accesses SRAM | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97910 | Linux Kernel Spreadtrum ASoC Compress Driver Does Not Validate Buffer Sizes Against Fixed Allocations, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97903 | Linux Kernel Process Exit Releases thread_pid Reference Before proc_flush_pid Completes, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97612 | Linux Kernel MPLS Stack Pop Leaves Stale Inner Protocol Record Set by Prior Push, Enabling Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97611 | Linux Kernel Open vSwitch Flow Table Mask Array Retired to RCU Before Last Dereference Completes, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97609 | Linux Kernel Netfilter Connection Timeout Module Unload Unregisters Per-Net Operations Before Clearing Global Hook, Enabling Use-After-Free | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97608 | Linux Kernel Netfilter Logger Teardown Leaves sysctl Exposed After Logger Unregistered but Before Backend Removed | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97602 | Linux Kernel IP Fragment Queue Flushed While Completion State Unchanged Allows Concurrent Fragment to Acquire Lock | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97595 | Linux Kernel 802.15.4 Receiver Queues Beacon Frames Against Interface Being Torn Down, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97594 | Linux Kernel Landlock Security Module Reads Parent Directory Without Reference or Lock, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97589 | Linux Kernel s390 Crypto Engine Wrong Async Callback Return Code Causes Request Re-queue Loop, Enabling Denial of Service | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97584 | Linux Kernel AFS Server Lookup Frees Existing Endpoint State When Cleaning Up Candidate, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97583 | Linux Kernel AFS File Server Leaves Stale Peer App Data After Address List Change, Causing Crash on Reconnect | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97580 | Linux Kernel Rockchip HEVC Decoder Unbounded Tile Loop and Unvalidated PPS ID Enable Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97579 | Linux Kernel MediaTek AV1 Video Decoder Tile Start Array Copy Exceeds Array Capacity, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97578 | Linux Kernel Rockchip VPU981 AV1 Decoder Missing Divisor Guard Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97577 | Linux Kernel Rockchip VPU981 AV1 Decoder Tile Group Entry Indexing Past Array Capacity Enables Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97576 | Linux Kernel V4L2 Stateless HEVC Decoder Uses Unvalidated Tile Counts as Loop Bounds, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97575 | Linux Kernel V4L2 Stateless AV1 Decoder Uses Unvalidated Tile Counts as Array Indices and Loop Bounds, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97573 | Linux Kernel Broadcom bnxt_en Ignores Ring Buffer Allocation Failure During RX Ring Reset, Enabling Local Memory Corruption | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-97570 | Linux Kernel Broadcom bnxt_en TPA ID Indexing Without Software Bound Allows Memory Corruption on High-ID Aggregations | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-97562 | Linux Kernel CIFS DFS Superblock Iterator Stores Raw Pointer Before Reference Acquired, Enabling Race-Condition Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97557 | Linux Kernel CIFS Oplock Break Queue Takes File Reference Unconditionally, Leaking It on Failure Paths | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97555 | Linux Kernel CIFS DACL Rewrite Allocates Buffer From On-Disk Length Then Writes Beyond It, Enabling Cross-Scope Heap Overflow | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97548 | Linux Kernel XFS Realtime Block Map and Refcount Cursor Size Miscalculation Enables Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97536 | Linux Kernel Qla2xxx FC Adapter Schedules Work Against Queue Pair Freed During Teardown, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97531 | Linux Kernel Qla2xxx FC Driver Takes Reference on Vport Under Active Deletion, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97528 | Linux Kernel Qla2xxx NVMe Unsolicited Context Freed While Still Linked in fcport List, Enabling Cross-Scope Use-After-Free | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97527 | Linux Kernel Qla2xxx NVMe Unsolicited Context List Modified From Multiple Contexts Without Locking, Enabling Cross-Scope Use-After-Free | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97525 | Linux Kernel x86 PAT Large-Page Split Allocates Page Tables Outside Standard Path, Enabling Cross-Scope Memory Corruption | 8.2 High | Updated |
| 2026-09-25 | CVE-2026-97524 | Linux Kernel MPTCP Subflow Reset Triggers Recursive Data-Ready Call, Causing Double Lock and Denial of Service | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97523 | Linux Kernel MPTCP Scheduler Uses Zero MSS When Subflow State Changes Race Data Transmission | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97445 | Linux Kernel ACPICA AML Resource Walker Insufficient Buffer Validation Allows Cross-Scope Overflow | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-97444 | Linux Kernel ACPICA Parser Missing Boundary Checks in Two Namestring and Opcode Functions Allow Out-of-Scope Memory Access | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-97442 | Linux Kernel ath11k Wi-Fi Driver Out-of-Bounds Write on Oversized Native Wi-Fi Headers Enables Cross-Scope Memory Corruption | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97438 | Linux Kernel NTFS3 Directory Index Entry Accepts Advertised key_size Exceeding Actual Payload, Enabling Out-of-Bounds Read | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-97437 | Linux Kernel NTFS3 Directory Entry Bounds Check Confuses Character Count with Byte Count, Enabling Out-of-Bounds Read | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-97433 | Linux Kernel NVMe FDP Configuration Log Parser Accepts Zero Descriptor Size, Enabling Unbounded Iteration and Cross-Scope Memory Access | 8.2 High | Updated |
| 2026-09-25 | CVE-2026-97429 | Linux Kernel AMD KFD Queue Destruction Drops Locks While Waiting for Resume, Enabling Concurrent Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97428 | Linux Kernel AMD GPU FRU PIA TLV Parser Reads EEPROM Data Without Bounds, Allowing Cross-Scope Out-of-Bounds Access | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-97421 | Linux Kernel RDMA umem iova Truncated to 32-Bit on Page-Size Selection, Enabling Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97417 | Linux Kernel Netfilter Connection Tracker TCP SACK Parser Dereferences Unaligned Pointer, Enabling Remote Memory Corruption | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97413 | Linux Kernel RDMA/RTRS Server Integer Underflow in Network-Supplied Length Field Enables Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-25 | CVE-2026-97409 | Linux Kernel NVMe-FC Aborts Inflight Admin Requests Before Controller Initialization Completes, Enabling Out-of-Scope Memory Corruption | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-96889 | librsvg XInclude Processing of Nested Duplicate Entity Declarations Frees and Reuses Memory, Causing a Use-After-Free on Crafted SVG Files | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-96275 | Flatpak extra_data Download Symlinks Combined with Path Traversal Write Files to Arbitrary Host Paths as Root, Scoring 8.8 | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-95519 | rpm Manifest Macro Expansion Executes Embedded Shell Commands During rpm -q -p Queries on Untrusted Package Files | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93830 | Linux Kernel stmmac XGMAC2 Default Interrupt Mask Triggers a MAC Interrupt Storm Reaching 695 Times the Actual RX Completion Rate | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-93827 | Linux Kernel virtio-fs Double-Free on Failed Queue Setup Leads to Cross-Component Memory Corruption | 8.4 High | Updated |
| 2026-09-25 | CVE-2026-93826 | Linux Kernel HID++ Driver Keeps Stale Input Device Pointer After Failed Registration, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-93817 | Linux Kernel perf Subsystem addr_filter_ranges RCU Use-After-Free Exposes Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93816 | Linux Kernel F2FS Inline Dentry Conversion Copies Names Before Validating Length Against Available Slots, Enabling Out-of-Bounds Write | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-93813 | Linux Kernel btrfs Tree Checker Accepts Malformed INODE_REF namelen, Enabling Local Privilege Escalation via Crafted Image | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93810 | Linux Kernel cachefiles Double File Reference Release in tmpfile Error Path Allows Local Privilege Escalation | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-93806 | Linux Kernel cfg80211 Wi-Fi Association Response Parser Accesses Status Fields Before Length Validation, Enabling Cross-Scope Memory Corruption | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93801 | Linux Kernel CIFS Client Stack-Allocated cifs_open_info_data May Expose Uninitialized Kernel Memory | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-93799 | Linux Kernel iwlwifi BA Window Status Handler Indexes Station Data Using Unvalidated Firmware-Supplied ID, Enabling Out-of-Scope Write | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93798 | Linux Kernel btrfs Relocation Root Reset Without Memory Barrier Exposes Race Condition Leading to Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93796 | Linux Kernel iwlwifi PCIe Transport Keeps Non-Null RX Pointers After Free, Enabling Use-After-Free on Reinitialize | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-93793 | Linux Kernel iwlwifi TX_CMD Response Parser Uses Firmware-Supplied frame_count Without Validation, Allowing Out-of-Scope Memory Access | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93790 | Linux Kernel iwlwifi BA Handler Indexes tid_data by Loop Counter Instead of Actual TID, Enabling Cross-Scope Out-of-Bounds Write | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93787 | Linux Kernel CIFS filldir Copies Directory Entry Name Using Server-Supplied Length Without Bounding to Response, Enabling Heap Overflow | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93786 | Linux Kernel ksmbd SMB Server Mutates Parent POSIX ACL Instead of Inheriting It, Corrupting Child Access Permissions | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93782 | Linux Kernel vhost-scsi Races VHOST_SET_MEM_TABLE Against Async Command Completion, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93345 | MikroTik RouterOS Labelled-VPN NLRI Iterator Accepts Below-Minimum Prefix Length in BGP UPDATE, Enabling On-Path Service Crash | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-93288 | Linux Kernel Netfilter Logging Namespace Teardown Clears Logger Pointer Without RCU Grace Period, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93287 | Linux Kernel I2C SMBus Block Transfer Length Validated After Tracepoint Use, Enabling Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93284 | Linux Kernel DRM Pagemap Migration Clears Page Array Before DMA Unmap Walk, Enabling Out-of-Scope Memory Corruption on Failure | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93282 | Linux ksmbd Accumulates ACEs from Every Principal Rather Than the Requesting User, Granting Authenticated Network Clients File Rights They Were Not Assigned | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93280 | Linux Kernel Greybus Audio Driver Walks Module-Supplied Topology Sections Without Bounding Sub-Section Sizes, Enabling Local Code Execution | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93277 | Linux Kernel bnxt_re RDMA Destroy Callback Writes Output Before Validating Userspace Access, Enabling Double-Destroy Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93265 | Linux Kernel tc9563 PCI Power Controller Misparses Integrated Ethernet MAC Endpoint, Enabling Cross-Component Impact | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-93262 | Linux Kernel RAID5 PPL Log Flush Iterator Continues After Entry Freed, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93260 | Linux Kernel PowerPC XIVE IPI Init Error Ignored in SMP Probe, Enabling Use-After-Free on Freed xive_ipis Array | 7.4 High | Updated |
| 2026-09-25 | CVE-2026-93250 | Linux Kernel VXLAN MDB Flush Continues Iterating Past Removed Entry, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93237 | Linux Kernel LoongArch's Compile-Time DIRECT_MAP_PHYSMEM_END Ignores cpu_pabits, Letting vmemmap_populate() Wrap Into Low Memory and Corrupt Page Tables on Loongson-2K CPUs | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93229 | Linux Kernel NFS Server RPC Status Dump Missing Read Memory Barrier Before Seqcount Retry Enables Information Disclosure Race | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-93228 | Linux Kernel RDMA svcrdma Accepts Zero-Segment Write/Reply Chunks From Unauthenticated Peers, Enabling Remote Memory Corruption | 9.1 Critical | Updated |
| 2026-09-25 | CVE-2026-93225 | Linux Kernel fsl-imx8mq USB PHY Driver Leaks typec Switch Reference on Probe Failure | 7.4 High | Updated |
| 2026-09-25 | CVE-2026-93224 | Linux Kernel svcrdma Accept Error Path Calls Unregister Notification Before Register Succeeds, Enabling Double-Unregister Corruption | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93221 | Linux Kernel NFS Server Boolean Flags Accessed Without Serialization Enable Data Race Leading to Memory Corruption | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93207 | Linux Kernel SUNRPC GSS Credential Decoder Uses Uninitialized Stack Memory, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-25 | CVE-2026-72463 | Linux Kernel xfrm IPsec Async Resumption Modifies Device Pointer Without Reference, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-25 | CVE-2026-72315 | Linux Kernel CIFS Client Deferred Close Holds Dentry Reference, Causing Use-After-Free on Unmount After Direct I/O | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69458 | Windows BitLocker Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges Over a Network Connection | 8.0 High | Updated |
| 2026-09-25 | CVE-2026-69456 | Windows Speech Heap Buffer Overflow Spans Windows Server 2012 Through Server 2025, Letting Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69455 | Windows Remote Access Connection Manager Heap Buffer Overflow Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69451 | Windows Management Instrumentation Use-After-Free Lets Authorized Attackers Escalate Privileges Over a Network Connection | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-69448 | Windows Bluetooth Service Race Condition Lets a Local Low-Privilege User Gain Elevated Privileges on Windows 10, 11, and Server | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69447 | Windows Audio Service Heap Buffer Overflow Lets Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69445 | Windows Compressed Folder Path Traversal Lets Authorized Local Attackers Elevate Privileges Across All Supported Windows Versions | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69444 | Windows Speech Heap Buffer Overflow from Windows Server 2016 Upward Lets Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69441 | Windows Installer Race Condition Lets Authorized Local Attackers Escalate Privileges Across All Supported Windows Versions | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69440 | Windows MIDI Service TOCTOU Race Condition Enables Local Privilege Escalation on Windows 11 | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69436 | Windows Error Reporting Heap Buffer Overflow from Windows 10 Version 1809 Upward Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69434 | Windows URL Moniker Heap Buffer Overflow Lets Unauthenticated Network Attackers Execute Code Across All Supported Windows Versions | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-69433 | Windows Error Reporting Heap Buffer Overflow, Including Windows Server 2012, Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69396 | Windows NDIS Use-After-Free Lets Authorized Attackers Escalate Privileges Over a Network Connection | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-69394 | Windows Audio Service Heap Buffer Overflow Lets a Low-Privilege Local User Elevate Privileges Across Windows 10 Through Server 2025 | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69392 | Windows Shell Use-After-Free Lets Authorized Local Attackers Escalate Privileges on Windows 11 and Server 2025 | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69391 | Windows Broker Infrastructure Service Stack Buffer Overflow Lets Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69389 | Windows Storage Management Provider Heap Buffer Overflow Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-67281 | MikroTik RouterOS WebFig Stale Session Pointer Lets Unauthenticated Attackers Read Arbitrary Files | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-67278 | MikroTik RouterOS Accepts Malformed RSA/PKCS#1 v1.5 Signatures Across TLS and SSH, and Its Trust Store Includes an e=3 Root CA, Letting a Network Attacker Forge Valid Signatures Without the Private Key | 9.1 Critical | Updated |
| 2026-09-25 | CVE-2026-33824 | Microsoft Windows IKE Service Extensions' Double Free Enables Unauthenticated Remote Attackers to Execute Arbitrary Code; CISA's August 21st KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-25 | CVE-2026-32157 | Windows Remote Desktop Client Use-After-Free Lets Unauthenticated Network Attackers Execute Code | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-26174 | Windows Server Update Service Race Condition Lets Authorized Local Attackers Escalate Privileges Across All Supported Windows Versions | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-20190 | Cisco Identity Services Engine Improper Authorization Exposes Sensitive Information to Unauthenticated Remote Attackers | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-20147 | Critical Cisco ISE and ISE-PIC Command Injection Scores 9.9 | 9.9 Critical | EPSS-Imminent |
| 2026-09-24 | CVE-2026-89028 | MikroTik RouterOS SMB1 Session Setup Handler Accepts Crafted uniPwdLen That Corrupts Adjacent Heap Memory | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-89025 | Belden Hirschmann HiOS Switch Platform Missing HTTP Content Validation Allows Unauthenticated Attacker to Cause Web Server Denial of Service | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-85880 | Microsoft Windows' Heap-Based Buffer Overflow Allows Local Attackers to Escalate Privileges by Corrupting Heap Memory; CISA's September 22nd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-24 | CVE-2026-80156 | Lantronix SLC8000/SLC9000/EMG Series Web Upload Path Traversal Lets Authenticated Attackers Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-80155 | Lantronix SLC8000/SLC9000/EMG Series Web Upload Authentication Bypass Lets Unauthenticated Attackers Write Arbitrary Files | 10.0 Critical | Updated |
| 2026-09-24 | CVE-2026-80154 | All Lantronix SLC/EMG/SLB Firmware Versions Use Predictable Session Tokens, Letting Unauthenticated Attackers Hijack Active Sessions | 9.6 Critical | Updated |
| 2026-09-24 | CVE-2026-80147 | Lantronix SLC8000/SLC9000/EMG/SLB Stack Buffer Overflow via Undocumented Interface Allows Authenticated Attackers to Execute Arbitrary Code | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-80145 | Lantronix SLC8000/SLC9000/EMG Series Services Permission Allows Authenticated Command Injection as Root via a Distinct Injection Path | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-80144 | Lantronix SLC/EMG/SLB Undocumented Management Feature Lets Authenticated Attackers Execute Arbitrary Root Shell Commands | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-80143 | A Second Undocumented Lantronix SLC/EMG/SLB Command Path Lets Authenticated Attackers Execute Arbitrary Root Shell Commands | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-78312 | Delta DIAEnergie Path Traversal Allows Unauthenticated Attackers to Write or Overwrite Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-78311 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-78309 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-78308 | Delta DIAEnergie Authentication Bypass Vulnerability Allows Unauthenticated Access to Protected Functions | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69567 | Windows NTFS Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69563 | Windows Program Compatibility Assistant Service Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69561 | Windows CD-ROM Driver Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69560 | Windows Work Folder Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69553 | Windows Hyper-V Missing authorization Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69551 | Windows DNS Use after free Lets Authorized Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69547 | Windows DHCP Server Heap-based buffer overflow Lets Authorized Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69544 | Windows SMB Client Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69542 | Windows Camera Frame Server Monitor Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69540 | Windows Audio Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69539 | Windows Remote Desktop Services Use after free Lets Authorized Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69538 | Windows Spaceport.sys Out-of-bounds read Lets Authorized Attackers Execute Code Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69535 | Windows Spaceport.sys Numeric Truncation Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69534 | Windows Program Compatibility Assistant Service Command Injection Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69532 | Windows NTFS Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69525 | Windows Remote Desktop Services Use after free Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69518 | Windows Remote Desktop Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69514 | Windows Remote Desktop Services Heap-based buffer overflow Lets Authorized Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69511 | Microsoft Windows Media Foundation Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69510 | Windows DHCP Server Stack-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.1) | 8.1 High | Updated |
| 2026-09-24 | CVE-2026-69509 | Windows Fax Service Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69505 | Windows NTFS Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69500 | Windows Image Acquisition Use after free Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69500) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69496 | Windows Compressed Folder Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69491 | Windows Microsoft DirectMusic Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69479 | Windows NTFS Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code Locally (CVSS 8.4) | 8.4 High | Updated |
| 2026-09-24 | CVE-2026-69475 | Windows Remote Desktop Services Untrusted Pointer Dereference Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69473 | Windows Kernel Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69466 | Windows Kernel TOCTOU Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69463 | Windows NTFS Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69461 | Windows NTFS Stack-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69450 | Windows Error Reporting Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69430 | Windows Embedded Mode Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69429 | Windows IKE Extension Heap-based buffer overflow Lets Authorized Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Out-of-bounds read Lets Unauthenticated Attackers Disclose Sensitive Information over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69427 | Windows VOLSNAP.SYS Out-of-bounds read Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69426 | Windows VOLSNAP.SYS Heap-based buffer overflow Lets Authorized Attackers Execute Code Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69424 | Windows Distributed File System (DFS) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69423 | Windows USB Video Driver Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69421 | Windows Kernel Mode Driver Integer Underflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69420 | Windows VOLSNAP.SYS Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69412 | Windows DHCP Server Stack-based buffer overflow Lets Authorized Attackers Execute Code (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69410 | Windows Win32K Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69408 | Microsoft Windows Media Foundation Integer overflow or wraparound Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69404 | Windows TCP/IP Race Condition Lets Authorized Attackers Execute Code over the Network (CVSS 8.1) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69398 | Windows Bluetooth Service Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69397 | OpenSSH for Windows Use after free Lets Unauthenticated Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69388 | Windows Bluetooth Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69386 | Microsoft Windows Media Foundation Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69385 | Windows TCP/IP Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69383 | Windows Shell Arbitrary File Path Control Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69377 | Windows Modern Device Management (MDM) Missing authorization Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69371 | Windows Overlay Filter Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69368 | Windows Overlay Filter Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69366 | Windows Kernel Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69364 | Windows Print Spooler Components Race Condition Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69362 | Windows Error Reporting Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69357 | Windows NDIS Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69347 | Windows Fast FAT Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code Locally (CVSS 7.4) | 7.4 High | Updated |
| 2026-09-24 | CVE-2026-69346 | Windows Print Spooler Components Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69342 | Windows DHCP Server Out-of-bounds read Lets Unauthenticated Attackers Disclose Sensitive Information over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69341 | Windows Image Acquisition Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69340 | Windows NTFS Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69337 | Windows Registry Double free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69335 | Windows Win32K Use after free Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69335) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69334 | Windows Volume Manager Extension Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69332 | Windows NTFS Out-of-bounds read Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69331 | Windows Remote Access Connection Manager Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69328 | Windows Storage Untrusted search path Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69324 | Windows Performance Monitor Type Confusion Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69322 | Microsoft Windows Search Component Double free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69319 | Windows USB Video Driver Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69312 | Windows NTFS Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69312) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69311 | Windows Audio Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69310 | Windows DNS Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69309 | Windows Print Spooler Components Double free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69305 | Microsoft Windows Search Component Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69301 | Windows Win32K Stack-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69300 | Windows Push Notifications Use after free Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69300) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69299 | Microsoft COM for Windows Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69296 | Windows Device Association Service Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69295 | Windows USB Driver Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69291 | Windows Volume Manager Extension Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69290 | Windows Storage Spaces Controller Stack-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69289 | Windows Setup Files Cleanup Symbolic Link Following Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69287 | Windows Remote Desktop Services Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69284 | Windows DCOM Server Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69283 | Windows CD-ROM Driver Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69281 | Windows License Manager Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69280 | Windows Push Notifications Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69274 | Windows Win32K Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Heap-based buffer overflow Lets Authorized Attackers Execute Code Locally (CVSS 7.8) (CVE-2026-69270) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69266 | Windows DHCP Server Integer Overflow or Wraparound Lets Unauthenticated Attackers Execute Code over the Network | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69265 | Windows NTFS Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69265) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68896 | Microsoft Windows Search Component Absolute path traversal Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68894 | Windows Error Reporting Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68893 | Windows Remote Desktop Licensing Service Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-68887 | Windows Message Queuing Queue Manager Out-of-Bounds Read Lets Unauthenticated Attackers Access Sensitive Data over the Network | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-68880 | Windows Win32K Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68878 | Windows Fast FAT Driver Stack-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68877 | Windows Storage Spaces Controller Heap-Based Buffer Overflow Lets Authorized Attackers Execute Code Locally (CVE-2026-68877) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68876 | Windows Program Compatibility Assistant Service Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68875 | Windows NTFS Buffer Over-read Lets Authorized Attackers Execute Code Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68848 | Windows Print Spooler Components Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68846 | Windows Kernel Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-68845 | Windows Program Compatibility Assistant Service Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68844 | Windows Storage Spaces Controller Heap-Based Buffer Overflow Lets Authorized Attackers Execute Code Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68841 | Windows NTFS Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68840 | Windows USB Driver Concurrent execution using shared resource with improper synchronization ('race condition') Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-68839 | Windows USB Mass Storage Class Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-68838 | Windows NTFS Stack-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68835 | Windows Print Spooler Components Use-After-Free Lets Authorized Attackers Escalate Privileges over the Network | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-68834 | Windows NTFS Stack-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network (CVE-2026-68834) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68832 | Windows NTFS Integer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68827 | Windows GDI+ Integer Underflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-62759 | Windows Netlogon Authentication Bypass Lets Unauthenticated Attackers Compromise the System Locally | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-62706 | Microsoft Windows Media Foundation Out-of-Bounds Read Lets Unauthenticated Attackers Execute Code over the Network | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-62694 | Windows Installer Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-5857 | Contiki-NG MQTT Client Over-Length Topic Sets Received Flag Before Rejection, Enabling Out-of-Bounds Write on Subsequent TCP Segment | 8.1 High | Updated |
| 2026-09-24 | CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Race Condition Lets Authorized Attackers Escalate Privileges Locally | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-15711 | libsoup WebSocket Frame Parsing Denial of Service Affects Red Hat Enterprise Linux and SAP Solutions (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-15709 | libsoup WebSocket permessage-deflate Decompression Loop Denial of Service Affects Red Hat Enterprise Linux (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-13249 | Honeywell PD45 Industrial Printer Web Management Interface Accepts Unauthenticated File Uploads That Enable Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-13248 | Honeywell PD45 Industrial Printer Intermec Fingerprint Interface Lets Authenticated Admin Accounts Write Arbitrary Files, Enabling Remote Code Execution | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-83998 | Remote Desktop Client Heap-Based Buffer Overflow Lets Unauthenticated Attackers Execute Code over the Network | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-82028 | absmach magistrala SQL Injection Reachable by Authenticated Remote Attackers with High Severity (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-73176 | Advantech EKI-1242IEIMS Firmware V1.06.01 Web Management Interface Command Injection Lets Authenticated Remote Attackers Execute OS Commands | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73175 | Advantech EKI-1242EIMS OPC UA Gateway Session Pool Exhaustion Lets Adjacent Unauthenticated Attackers Cause Complete Denial of Service | 7.1 High | Updated |
| 2026-09-23 | CVE-2026-73174 | Advantech EKI-1242EIMS edgserver Management Protocol Transmits Credentials in Cleartext, Exposing Them to Network-Adjacent Observers | 8.7 High | Updated |
| 2026-09-23 | CVE-2026-73173 | Advantech EKI-1242EIMS edgserver Management Protocol Exposes Critical Device Management Functions Without Authentication | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-73172 | Advantech EKI-1242EIMS edgserver Management Service Unauthenticated OS Command Injection Allows Remote Root Execution | 9.3 Critical | Updated |
| 2026-09-23 | CVE-2026-73171 | Advantech EKI-1242EIMS Backup-Restore Upload Lets Authenticated Remote Attackers Overwrite Arbitrary Device Filesystem Files | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73170 | Advantech EKI-1242EIMS Modbus CSV Import Executes Attacker-Controlled Lua Code via Crafted Upload | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73167 | Advantech EKI-1242IEIMS Web Management Interface Contains a Second OS Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73166 | Advantech EKI-1242IEIMS Web Management Interface Code Injection Lets Authenticated Remote Attackers Execute Arbitrary OS Commands | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73165 | Advantech EKI-1242IEIMS Web Management Interface Has a Third Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73164 | Advantech EKI-1242IEIMS Web Management Interface Contains a Fourth OS Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73163 | Advantech EKI-1242IEIMS Web Management Interface Authenticated Command Injection Allows Remote OS Command Execution via Web Interface | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73014 | Data Sharing Service Client Missing authorization Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-70584 | Windows Core Messaging Type Confusion Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-69528 | Windows Shell Missing Authentication Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-69517 | Windows Wireless Networking Use-After-Free Lets Authorized Attackers Escalate Privileges Locally | 7.0 High | Updated |
| 2026-09-23 | CVE-2026-69512 | Windows Spaceport.sys Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-23 | CVE-2026-69508 | Windows MIDI Service Module Stack-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-69443 | Microsoft Azure Attestation service and Device Health Attestation Service Out-of-Bounds Read Lets Unauthenticated Attackers Access Sensitive Data over the Network | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-53985 | Ground Station Prior to 0.6.0 Socket.IO service_control Handler Allows Unauthenticated Peer to Force Service Shutdown | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-53984 | Ground Station Prior to 0.6.0 Socket.IO database_backup Handler Allows Unauthenticated Peer to Destroy Database and Inject Arbitrary Data | 9.1 Critical | Updated |
| 2026-09-23 | CVE-2026-53983 | Ground Station Orbital-Source Configuration Path Accepts Unauthenticated Socket.IO SSRF Requests, Causing Outbound HTTP Requests to Attacker-Chosen Destinations | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-19535 | Advantech EKI-1242IEIMS LuCI Administrative Interface CSRF Lets Unauthenticated Attackers Perform Unauthorized State Changes via Logged-In Users | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-19438 | ABB Mint Workbench I Path Traversal Lets Unauthenticated Remote Attackers Access Sensitive Files (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-18649 | Denial of Service in the GStreamer gst-plugins-good package Affects Enterprise Linux 8.8 Telecommunications Update Service, Leading to Service Disruption | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-12974 | Forcepoint NGFW Security Policy Bypass via Overly Permissive Input Validation Affects Versions 7.1 Through 7.5 | 7.9 High | Updated |
| 2026-09-22 | CVE-2026-83549 | SonicWall SMA1000 Appliances' OS Command Injection Allows Authenticated Local Attackers to Execute Arbitrary Commands with Root Privileges; CISA's September 5th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-83548 | SonicWall SMA1000 Appliances' Server-Side Request Forgery Allows Unauthenticated Remote Attackers to Reach Internal Services and Compromise the Secure Mobile Access Gateway; CISA's September 5th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock's Use-After-Free Allows a Local Attacker to Gain Elevated Privileges via a Freed Memory Reference; CISA's August 25th KEV Deadline Has Passed | 7.0 High | KEV |
| 2026-09-22 | CVE-2026-64849 | MLflow's Server-Side Request Forgery Flaw Allows Remote Attackers to Use the ML Platform Server as a Proxy to Access Internal Services and Steal Credentials; CISA's September 2nd KEV Deadline Has Passed | 9.3 Critical | KEV |
| 2026-09-22 | CVE-2026-48558 | SimpleHelp Accepts Unverified Cryptographic Signatures, Letting Remote Attackers Bypass Authentication; CISA's July 2nd KEV Deadline for Covered Entities Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-45498 | Microsoft Defender's Unspecified Vulnerability Allows for Denial of Service; CISA's June 3rd KEV Deadline Has Passed | 4.0 Medium | KEV |
| 2026-09-22 | CVE-2026-41091 | Microsoft Defender's Link Following Flaw Enables an Authorized Attacker to Elevate Privileges Locally; CISA's June 3rd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-34486 | Apache Tomcat's Missing Encryption of Sensitive Session Data Exposes Credentials and Tokens to Network Interception; CISA's August 7th KEV Deadline Has Passed | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-34197 | Apache ActiveMQ's Improper Input Validation Enables Code Injection Affecting Both ActiveMQ and Broker Deployments; CISA's April 30th KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-22 | CVE-2026-33825 | Microsoft Defender's Insufficient Access Control Allows an Authorized Attacker to Escalate Privileges Locally; CISA's May 6th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-32202 | Microsoft Windows Shell's Protection Mechanism Failure Allows an Unauthorized Attacker to Perform Spoofing Over the Network; CISA's May 12th KEV Deadline Has Passed | 4.3 Medium | KEV |
| 2026-09-22 | CVE-2026-31431 | Linux Kernel Resource Mishandling That Allows Privilege Escalation Carries a Lapsed May 15th CISA KEV Mandate; Covered Entities on Unpatched Kernels Remain Out of Compliance | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-20316 | Cisco Secure Firewall Management Center Hard-Coded Password Lets Attackers Bypass Authentication; CISA's August 1st KEV Deadline for Covered Entities Has Passed | 5.3 Medium | KEV |
| 2026-09-22 | CVE-2026-20262 | Authenticated Path Traversal in Cisco Catalyst SD-WAN Manager Lets Remote Attackers Write Files Outside Allowed Directories; CISA's June 29th KEV Deadline Has Passed | 6.5 Medium | KEV |
| 2026-09-22 | CVE-2026-20245 | Cisco Catalyst SD-WAN Manager's Improper Encoding Allows an Authenticated Local Attacker to Execute Arbitrary Commands as Root via a Crafted File; CISA's June 23rd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-20200 | Cisco IMC web management command injection allows authenticated low-privilege attacker to execute commands as root | 8.8 High | Exploited |
| 2026-09-22 | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller and Manager's Authentication Bypass Gives Unauthenticated Remote Attackers Administrative Privileges; CISA's May 17th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-20180 | Critical Cisco ISE Path Traversal Enables Remote Code Execution, Scores 9.9 | 9.9 Critical | EPSS-Imminent |
| 2026-09-22 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Leaks Sensitive Configuration Data to Unauthorized Users; CISA's April 23rd KEV Remediation Requirement Has Expired for Covered Entities | 6.5 Medium | KEV |
| 2026-09-22 | CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Stores Credentials in a Recoverable Format, Enabling Credential Theft; CISA's April 23rd KEV Mandate for Covered Entities Has Lapsed | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Exposes Privileged API Functions to Unauthorized Callers; CISA's April 23rd KEV Remediation Deadline for Covered Entities Has Long Passed | 5.4 Medium | KEV |
| 2026-09-22 | CVE-2026-20079 | Cisco Firewall Management Center's Authentication Bypass via an Alternate Path Grants Unauthenticated Remote Attackers Full Administrative Control; CISA's September 12th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-15410 | SonicWall SMA1000's Code Injection Allows a Remote Authenticated Administrator to Execute Arbitrary OS Commands Under Specific Conditions; CISA's July 17th KEV Deadline Has Passed | 7.2 High | KEV |
| 2026-09-22 | CVE-2026-15409 | SonicWall SMA1000 Secure Access Appliances Accept Forged Server-Side Requests, Enabling Internal Network Pivoting; CISA's July 17th KEV Remediation Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-12569 | PTC Windchill and FlexPLM's Improper Input Validation Allows Unauthenticated Remote Attackers to Execute Arbitrary Code via Malicious Network Requests; CISA's June 28th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-0300 | PAN-OS Out-of-Bounds Write Enabling Code Execution Affects Both Palo Alto Networks Firewalls and Siemens RUGGEDCOM APE1808 Industrial Appliances; CISA's May 9th KEV Window Has Closed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-0257 | PAN-OS Authentication Bypass Enabling Unauthorized VPN Tunnels Affects Palo Alto Networks Prisma Access and Siemens RUGGEDCOM APE1808; Now Listed in CISA's Known Exploited Vulnerabilities Catalog | 9.1 Critical | KEV |
| 2026-09-22 | CVE-2026-95619 | Integer Overflow in libstdc++ Affects Enterprise Linux 9 | 7.7 High | Updated |
| 2026-09-22 | CVE-2026-95508 | Heap-Based Buffer Overflow in Enterprise Linux 8, Leading to Service Disruption | 7.4 High | Updated |
| 2026-09-22 | CVE-2026-87742 | Quarkus WebSockets Next Streaming Message Handling Lets Remote Attackers Cause Denial of Service (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-72946 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-72940 | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-72936 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network | 8.1 High | Updated |
| 2026-09-22 | CVE-2026-72929 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-72926 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-7273 | Zyxel GS1900 Series Switches' CGI Program Stack-Based Buffer Overflow Allows a LAN-Side Unauthenticated Attacker to Execute OS Commands via Crafted HTTP Requests; CISA's September 24th KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-22 | CVE-2026-71221 | Enterprise Linux gfs2-utils Code Execution Reachable by Unauthenticated Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-71220 | Enterprise Linux gfs2-utils Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69791 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69790 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-69784 | Windows Hello Use-After-Free Lets Authorized Attackers Escalate Privileges Locally | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-69775 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-22 | CVE-2026-69762 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network | 8.0 High | Updated |
| 2026-09-22 | CVE-2026-69760 | Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-69757 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-22 | CVE-2026-69744 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-69740 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-69735 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69729 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-69725 | Double free in Windows Hello allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-69720 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-69711 | Windows Device Association Service Use-After-Free Lets Authorized Attackers Escalate Privileges Locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69710 | Windows Hello Race Condition Lets Authorized Attackers Escalate Privileges Locally | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-69708 | Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69694 | Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69693 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69689 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network | 8.0 High | Updated |
| 2026-09-22 | CVE-2026-69682 | Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69654 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69652 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-31278 | Suprema BioStar 2 Active Directory Settings Endpoint Exposes Service Account Credentials in Cleartext to Crafted GET Requests | 7.7 High | Updated |
| 2026-09-21 | CVE-2026-90042 | Linux Kernel ceph properly decrypt filenames in vmalloc() buffers, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-90041 | Linux Kernel HID: sony: clean up device list on probe failure | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-90037 | Linux Kernel NFSD: Failure to Prevent client use-after-free during close_lru reaping, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-90036 | Linux Kernel NFSD Prevent client use-after-free during blocked-lock reaping, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89815 | Linux Kernel drm/ttm: Memory Safety Issue Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89799 | Linux Kernel bpf: Disable preemption in bpf_get_stackid | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89763 | Linux Kernel KEYS trusted: Fix TPM teardown ordering | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89755 | Linux Kernel mm/migrate_device: Failure to Clear stale mapping after freeing swapcache | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89731 | Linux Kernel cxl/ras: Out-of-Bounds Read Allows Local Privilege Escalation | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-89708 | Linux Kernel nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89685 | Linux Kernel nfsd fix clock domain mismatch in clients_still_reclaiming(), Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-89676 | Linux Kernel nfsd: Reference Count Error Enables Remote Code Execution (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89667 | Linux Kernel nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache, Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-09-21 | CVE-2026-89660 | Linux Kernel NFSD Prevent client use-after-free during admin state revocation, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89659 | Linux Kernel NFSD Prevent client use-after-free during delegation revoke, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89624 | Linux Kernel HID: universal-pidff: stop the device when force-feedback init fails | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89622 | Linux Kernel HID mcp2221: clear rxbuf after I2C/SMBus transfer completes | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89602 | Linux Kernel erofs: skip sufficiently large global buffers when resizing | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89564 | Linux Kernel ip orphan prefetched skbs before multicast forwarding | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89561 | Linux Kernel ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv(), Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-89545 | Linux Kernel sunrpc: defer rq_argp and rq_resp free until after RCU grace period | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89544 | Linux Kernel SUNRPC: Failure to Fix gssx_dec_option_array error path bugs, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-89535 | Linux Kernel svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id, Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-09-21 | CVE-2026-89492 | Linux Kernel ocfs2: Failure to Validate directory-index entry counts when reading metadata, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-85150 | Red Hat Enterprise Linux 10 GStreamer's Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-85013 | Red Hat Enterprise Linux 10 environment-modules Security Flaw Reachable by Low-Privilege Local Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-09-21 | CVE-2026-83343 | Oracle Utilities Network Management System (System Wide) in Version 2.5.0.2.0 Lets Unauthenticated network attackers Alter or delete records | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-81627 | Security Flaw in QEMU Affects Enterprise Linux 9 | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-80945 | Linux Kernel crypto: iaa - unmap dst before software fallback on decompress, Reachable Without Authentication (CVSS 9.1) | 9.1 Critical | Updated |
| 2026-09-21 | CVE-2026-80734 | Linux Kernel btrfs: Failure to Initialize inode mapping flags for cached inodes | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-80685 | Linux Kernel mm/util: Missing Guard: don't read __page_2 for order-1 folios in snapshot_page() | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-74407 | Linux Kernel wifi ath11k: cancel SSR work items during PCI shutdown | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-74269 | Linux Kernel bnxt: Failure to Fix head underflow on XDP head-grow, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-72989 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-72962 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-72961 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-72960 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-72958 | Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-72953 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-72952 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-72949 | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-72494 | Linux Kernel RDMA/irdma Replace waitqueue and flag with completion, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-72438 | Linux Kernel md/raid10: Failure to Fix writes_pending and barrier reference leaks on discard failures, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-72355 | Linux Kernel netfs: Failure to Fix barriering when walking subrequest list, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-69648 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-69625 | Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network | 8.0 High | Updated |
| 2026-09-21 | CVE-2026-69617 | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-69606 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-69602 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-69597 | Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-69586 | Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-69575 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-54230 | Enterprise Linux Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-16445 | Red Hat Enterprise Linux 8 dracut Remote Code Execution Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-20 | CVE-2026-87886 | Acronis Backup's Incorrect Default Permissions Allow a Local Attacker to Access Backup Files and Configurations Not Intended for Their Account; CISA's September 19th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-84869 | ConnectWise ScreenConnect's Improper Privilege Management and Missing Authorization Allow Unauthenticated Attackers to Gain Administrative Control of the Remote Support Platform; CISA's September 14th KEV Deadline Has Passed | 9.9 Critical | KEV |
| 2026-09-20 | CVE-2026-81963 | Windows Update Stack Symbolic Link Following Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-67277 | MikroTik RouterOS's Missing Authentication for a Critical Function Allows Unauthenticated Attackers to Access and Modify Router Configuration; CISA's September 13th KEV Deadline Has Passed | 8.2 High | KEV |
| 2026-09-20 | CVE-2026-53266 | Linux Kernel's Out-of-Bounds Write Vulnerability Allows Local Attackers to Escalate Privileges or Cause a Kernel Crash; CISA's September 21st KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-20 | CVE-2026-20349 | Cisco Secure Firewall ASA and FTD's Heap Inspection Vulnerability Allows Remote Attackers to Extract Sensitive Memory Contents from the Firewall Device; CISA's August 14th KEV Deadline Has Passed | 8.6 High | KEV |
| 2026-09-20 | CVE-2026-20301 | Cisco IOS and IOS XE malformed XMCP packet causes denial of service via unauthenticated remote attacker | 8.6 High | Exploited |
| 2026-09-20 | CVE-2026-20124 | Cisco IOS XE malformed SNMP request causes device reload affecting SNMP versions 1, 2c, and 3 | 7.7 High | Exploited |
| 2026-09-18 | CVE-2026-80469 | Sick AG Sentio Creator Device Manager Extension Bypasses Driver Signature Verification, Allowing Malicious Package to Execute Arbitrary Code | 8.3 High | Updated |
| 2026-09-18 | CVE-2026-3869 | Schneider Electric Modicon M580 Incorrect Authentication Algorithm Implementation Risks Full PLC Compromise When a Lower Application Level Project Is Running | 9.2 Critical | Updated |
| 2026-09-18 | CVE-2026-27563 | Crafted GET Request to the Datastorage API Lets Admin Credentials Trigger Root Command Execution on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-18 | CVE-2026-27558 | Operator Access to the IODD File Removal Endpoint on Pepperl+Fuchs ICE-Series IO-Link Masters Allows Root Command Injection | 8.8 High | Updated |
| 2026-09-18 | CVE-2026-27548 | Command Injection in the IODD Port Info Endpoint Grants Root Access on Pepperl+Fuchs ICE-Series IO-Link Masters to Any User or Operator Account | 8.8 High | Updated |
| 2026-09-18 | CVE-2026-15579 | Moxa TN-4500B Series Ethernet Switch Out-of-Bounds Write in Web Login Username Field Allows Remote Unauthenticated Attacker to Execute Code | 8.8 High | Updated |
| 2026-09-18 | CVE-2023-5778 | ABB Freelance Controller DCP, AC700, AC800, and AC900 Improper Length Parameter Handling Allows Remote Denial of Service | 7.5 High | Updated |
| 2026-09-16 | CVE-2026-27565 | Unauthenticated IODD File Upload on Pepperl+Fuchs ICE-Series IO-Link Masters Executes a Root Shell Script That Persists Across Reboots | 9.8 Critical | Updated |
| 2026-09-16 | CVE-2026-27564 | Pepperl+Fuchs ICE-Series IO-Link Masters Run Injected Root Commands When Admin Credentials Submit a Crafted PUT Request to the Datastorage API | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27562 | Admin-Level PUT Requests to the IODD Configuration API Execute Injected Commands as Root on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27561 | Admin Credentials Enable Root Command Injection via the IODD Config GET API on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27560 | Admin-Credentialed DELETE Requests to Pepperl+Fuchs ICE-Series IO-Link Masters' Status API Carry Injected Commands Executed at Root | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27559 | User Credentials Are Enough to Inject Root-Level Commands via the Status Data API on Pepperl+Fuchs ICE-Series IO-Link Masters | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27557 | Unauthenticated Path Traversal in Pepperl+Fuchs ICE-Series IO-Link Masters Exposes the Device's SSH Server Private Keys | 7.5 High | Updated |
| 2026-09-16 | CVE-2026-27556 | Operator Cookie Enables Arbitrary PHP Code Execution on Pepperl+Fuchs ICE-Series IO-Link Masters via Local File Inclusion in the IODD Parameter Save Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27555 | A Valid User Cookie Triggers Arbitrary PHP Code Execution on Pepperl+Fuchs ICE-Series IO-Link Masters via Local File Inclusion in the IODD Port Info Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27554 | IODD Parameter Save Endpoint on Pepperl+Fuchs ICE-Series IO-Link Masters Accepts Injected Commands from Operator-Level Accounts, Yielding Root Access | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27552 | Pepperl+Fuchs ICE-Series IO-Link Masters Allow Low-Privileged Users to Upload Arbitrary IODD Files via a Missing Authorization Check, Enabling Device Manipulation or Crashes | 8.1 High | Updated |
| 2026-09-16 | CVE-2026-27551 | User-Level Credentials Give Root Shell on Pepperl+Fuchs ICE-Series IO-Link Masters via the Parameter Management Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27550 | Operator Credentials Can Inject Root-Level OS Commands via the Field_Shadow_Password Handler on Pepperl+Fuchs ICE-Series IO-Link Masters | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27549 | Operator-Level Credentials Suffice to Run Root Commands on Pepperl+Fuchs ICE-Series IO-Link Masters via the IODD Upload Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27547 | IODD Menu Info Request on Pepperl+Fuchs ICE-Series IO-Link Masters Passes Unvalidated Parameters to Root-Level Commands, Reachable with User-Level Credentials | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27546 | The _account_log Function in Pepperl+Fuchs ICE-Series IO-Link Masters Lets Unauthenticated Attackers Log In as Admin Regardless of Account Configuration | 9.8 Critical | Updated |
| 2026-09-14 | CVE-2026-62647 | Siemens Reyrolle 7SR5 Weak Random Number Generator Produces Low-Entropy Session Identifiers | 7.4 High | Updated |
| 2026-09-14 | CVE-2026-34223 | Siemens Desigo CC ClickOnce Client Code Injection Vulnerability Across All Versions from V6 Through V9 | 8.2 High | Updated |
| 2026-09-11 | CVE-2026-81822 | AVEVA Pipeline Integrity Monitor Weak Password Hashing in PIMBoards Project Files Allows Credential Recovery via Brute Force | 8.4 High | Updated |
| 2026-09-11 | CVE-2026-81821 | AVEVA Pipeline Integrity Monitor Hard-Coded Encryption Key in PIMBoards Project Files Exposes Sensitive Information to File Read Access | 8.4 High | Updated |
| 2026-09-11 | CVE-2026-63298 | LXD NVIDIA Instance Configuration Handler Accepts Newline Characters in nvidia.driver.capabilities and nvidia.require.* Values, Letting Authenticated Attackers Inject Arbitrary Directives into the GPU Configuration | 9.9 Critical | Updated |
| 2026-09-10 | CVE-2026-62646 | Siemens Reyrolle 7SR5 Session Identifier Generated with Insufficient Randomness, Enabling Token Prediction Attacks | 7.4 High | Updated |
| 2026-09-10 | CVE-2026-32589 | Red Hat Quay authenticated push access enables interference with other users' in-progress image uploads across repositories | 7.4 High | Updated |
| 2026-09-09 | CVE-2026-9854 | Hitachi Energy MicroSCADA X SYS600 Engineering Tool Access Can Escalate Privileges to Administrator on the Underlying Windows Host | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9853 | Hitachi Energy MicroSCADA X SYS600 RBAC Flaw Lets Any OS-Authenticated User Access and Modify Application Objects Without Application Login | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9852 | Hitachi Energy MicroSCADA X SYS600 CSV Injection Vulnerability Allows Authenticated Users to Inject Formulas into Exported Spreadsheets | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-8044 | Schneider Electric EcoStruxure IT Data Center Expert Argument Injection in Privileged Account Context Enables Remote Code Execution | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-77120 | Schneider Electric PowerLogic T300 OS Command Injection via Admin-Privileged Context Allows Privilege Escalation to Root | 8.7 High | Updated |
| 2026-09-09 | CVE-2026-67367 | Siemens SIMOVE Fleetmanager Path Traversal Allows Unauthenticated Attacker to Read Sensitive Files via Relative Path Manipulation | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-62649 | Siemens Reyrolle 7SR5 Web Server Resource Exhaustion Under High Concurrent HTTP Request Volume Causes Denial of Service | 7.5 High | Updated |
| 2026-09-09 | CVE-2026-32590 | Unsafe Deserialization in Red Hat Quay Resumable Upload Handling | 7.1 High | Updated |
| 2026-09-09 | CVE-2026-19233 | Schneider Electric EcoStruxure IT Data Center Expert Server-Side Request Forgery in Privileged Account Context Risks Unauthorized Command Execution | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-11841 | Sick AG InspectorP Sensor AppEngine HTTP Fileaccess Allows Unauthenticated Read and Write Operations on Sensitive Filesystem Areas | 9.4 Critical | Updated |
| 2026-09-08 | CVE-2026-80465 | Siemens Mendix SAML Module JWT Algorithm Substitution Flaw Allows Unauthenticated Remote Authentication Bypass | 8.7 High | Updated |
| 2026-09-08 | CVE-2026-77393 | Inductive Automation Ignition Blank Project Role Creation Setting Allowed Any Authenticated User to Create Projects in Versions Up to 8.1.53 | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-62650 | Siemens Reyrolle 7SR5 Web Management Server-Side Authorization Not Enforced, Allowing Role-Based Access Control Bypass | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-62648 | Siemens Reyrolle 7SR5 Web Server URL Component Length Not Validated Before Use in Pre-Authenticated HTTP Messages, Enabling Denial of Service | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-62645 | Siemens Reyrolle 7SR5 Web Interface Exposes Session ID Calculation Information, Allowing Session Hijacking Without Credentials | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-50093 | Siemens Siveillance Control Arbitrary File Upload Exploitable by Low-Privilege Authenticated Remote Attacker | 9.0 Critical | Updated |
| 2026-09-08 | CVE-2026-4740 | Red Hat Advanced Cluster Management lets a managed-cluster admin forge certificates for cross-cluster privilege escalation | 8.2 High | Updated |
| 2026-09-08 | CVE-2025-46418 | Westermo WeOS OS Command Injection via Media Definition Requires Authenticated Attacker with High Privileges | 7.6 High | Updated |
| 2026-09-05 | CVE-2026-71474 | Red Hat insights-client logs a long-lived OpenShift pull-secret token that local pod-log access can expose | 7.1 High | Updated |
| 2026-09-03 | CVE-2026-78319 | Sauter modu680 Building Automation Controller TOCTOU Race Condition Allows Unauthenticated Remote Security Bypass | 9.3 Critical | Updated |
| 2026-09-03 | CVE-2026-65423 | open62541 OPC UA Integer Overflow in arrayDimensions Computation Allows Remote Attacker to Trigger Out-of-Bounds Write | 8.8 High | Updated |
| 2026-09-03 | CVE-2026-63559 | open62541 OPC UA Integer Overflow in arrayDimensions Computation Allows Remote Out-of-Bounds Heap Memory Read | 7.5 High | Updated |
| 2026-09-03 | CVE-2026-63035 | open62541 OPC UA TransferSubscriptions Service Heap Use-After-Free Allows Authenticated Attacker to Cause Denial of Service or Code Execution | 8.1 High | Updated |
| 2026-09-03 | CVE-2026-6071 | Rockwell Automation Arena Simulation Out-of-Bounds Write When Parsing DOE Files Enables Code Execution When a User Opens a Malicious File | 7.5 High | Updated |
| 2026-09-03 | CVE-2024-7956 | Rockwell Automation DataMosaix Private Cloud Authorization Flaw Lets Low-Privilege Users Access Other Users' Projects | 7.6 High | Updated |
| 2026-09-01 | CVE-2026-9637 | Rockwell Automation CompactLogix 5380 and ControlLogix 5580 CIP Message Input Length Validation Gap Causes Denial of Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9634 | Rockwell Automation Redundancy Module Configuration Tool DLL Search Order Hijack via Unquoted System Path | 7.0 High | Updated |
| 2026-09-01 | CVE-2026-9633 | Rockwell Automation Redundancy Module Configuration Tool DLL Search Order Hijack via Unquoted System Path in RM3ConfigTool.exe | 7.0 High | Updated |
| 2026-09-01 | CVE-2026-9625 | Rockwell Automation RSLinx Classic Oversized Embedded CIP Message Request Crashes Service, Requiring Manual Restart | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9624 | Rockwell Automation RSLinx Classic Integer Underflow on CIP Packet Data Length Validation Crashes Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9622 | Rockwell Automation RSLinx Classic Forward Close CIP Packet Handling Crash Requires Manual Service Restart | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9621 | Rockwell Automation RSLinx Classic Crashes on Malformed CIP Packet Due to Integer Overflow, Requiring Manual Service Restart | 9.2 Critical | Updated |
| 2026-09-01 | CVE-2026-84235 | Rockwell Automation 1756-ENBT Module Crashes on Crafted CIP Packet, Requiring Device Restart to Recover | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-78317 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78316 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78315 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78314 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-35535 | Sudo Privilege Drop Failure in setuid/setgid Not Treated as Fatal Error, Enabling Privilege Escalation During Mailer Execution | 7.4 High | Updated |
| 2026-09-01 | CVE-2026-19472 | Rockwell Automation ArmorStart LT Embedded Web Server Crashes on Crafted HTTP PUT Request, Causing Denial of Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-16675 | Rockwell Automation FactoryTalk Activation Manager Installer Custom Action Spawns SYSTEM-Level Console Window, Enabling Privilege Escalation | 8.5 High | Updated |
| 2026-09-01 | CVE-2026-13336 | Schneider Electric NetBotz 5 OS Command Injection During System Backup Restore Lets Authenticated Admin Execute Arbitrary Linux Commands | 7.3 High | Updated |
| 2026-09-01 | CVE-2026-12663 | Rockwell Automation ControlFLASH Installer Grants Write Access to Everyone Group on Installation Directory, Enabling Arbitrary Code Execution | 7.0 High | Updated |
| 2026-09-01 | CVE-2025-12768 | Rockwell Automation FactoryTalk Historian Machine Edition Out-of-Bounds Write Accessible to Low-Privilege Adjacent Network Attackers | 8.6 High | Updated |
| 2026-09-01 | CVE-2024-7953 | Rockwell Automation DataMosaix Private Cloud Lets Any Authenticated User Self-Promote to Project Administrator and Modify Project Data | 8.7 High | Updated |
| 2026-09-01 | CVE-2024-7952 | Rockwell Automation DataMosaix Private Cloud Hardcoded Source Code Links Expose JSON Files Containing Sensitive Data Without Authentication | 8.7 High | Updated |
| 2026-09-01 | CVE-2024-10085 | Schneider Electric EcoStruxure OPC UA Server Expert Unconstrained OPC UA Request Allocation Causes Denial of Service | 8.2 High | Updated |
| 2026-08-28 | CVE-2026-66155 | Siemens Element maps-ng Cross-Site Scripting in si-map Component Affects Multiple Software Versions | 7.6 High | Updated |
| 2026-08-28 | CVE-2026-64629 | Siemens Parasolid Out-of-Bounds Read on Specially Crafted File Parse Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59701 | Siemens Simcenter Femap Out-of-Bounds Read Parsing BMP Files Can Lead to Code Execution in the Current User Context | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59700 | Siemens Simcenter Femap Out-of-Bounds Read on Parsing Specially Crafted BMP Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59086 | Siemens Simcenter Femap and Nastran Stack-Based Buffer Overflow When Parsing Specially Crafted Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-58115 | Siemens SIMATIC IoT2050 Advanced with Node-RED Does Not Enforce Authentication on Node-RED API Endpoint | 10.0 Critical | Updated |
| 2026-08-28 | CVE-2026-20094 | Cisco UCS Command Injection Scores 8.8 | 8.8 High | Updated |
| 2026-08-26 | CVE-2026-71276 | Magistrala Message Reader API Interpolates Unvalidated HTTP Query Parameters Directly into Raw SQL Queries | 7.1 High | Updated |
| 2026-08-26 | CVE-2026-71235 | Magistrala Rules Engine Lua Script Engine Performs No Input Validation, Allowing Authenticated Users to Execute Arbitrary Server-Side Code | 8.8 High | Updated |
| 2026-08-25 | CVE-2026-9128 | Rockwell Automation Studio 5000 Logix Designer Unquoted Search Path in External Tools Configuration Allows Low-Privilege Code Execution | 7.5 High | Updated |
| 2026-08-25 | CVE-2026-9127 | Rockwell Automation Studio 5000 Logix Designer External Tool Config File Incorrect Authorization Allows Any Authenticated User to Modify Tool Paths | 7.5 High | Updated |
| 2026-08-25 | CVE-2026-9108 | Rockwell Automation Studio 5000 Logix Designer Path Traversal via Malicious ACD Project File Allows Arbitrary File Write | 7.5 High | Updated |
| 2026-08-24 | CVE-2026-21661 | Johnson Controls AC2000 Access Control System Uncontrolled Search Path Allows Authenticated Local Attacker to Leverage Configuration File Paths | 8.4 High | Updated |
| 2026-08-17 | CVE-2026-25193 | Gallagher Command Centre Service Installer Log File Exposes Service Account Credentials During Installation | 8.1 High | Updated |
| 2026-08-14 | CVE-2026-32153 | Use-After-Free in Windows Speech Component Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-08-13 | CVE-2026-64125 | Linux Kernel bcmgenet Driver Enabling RBUF EEE and PM Bits Stops RX Traffic When MAC EEE Activates, Causing a Denial-of-Service Condition on Broadcom GENET Hardware | 9.8 Critical | Updated |
| 2026-08-11 | CVE-2026-33390 | Nozomi Networks Guardian Arc Sensor Sync Incorrectly Grants CLI Permissions to Low-Privileged Authenticated Users | 8.1 High | Updated |
| 2026-08-11 | CVE-2026-31984 | Nozomi Networks Guardian Audit Logging Missing Input Size Limit Allows Unauthenticated Attacker to Cause Denial of Service | 7.5 High | Updated |
| 2026-08-11 | CVE-2026-31982 | Nozomi Networks Guardian SAML Single Sign-On Open Redirect via Unvalidated Redirection Parameter Allows Unauthenticated Phishing Attack | 7.1 High | Updated |
| 2026-08-11 | CVE-2026-3014 | Milestone XProtect Management Server API Allows Users with Edit Permission to Execute OS Commands via Crafted Requests | 9.1 Critical | Updated |
| 2026-08-11 | CVE-2026-0288 | Multiple Buffer Overflows in the Palo Alto Networks PAN-OS User-ID Terminal Server Agent Allow Unauthenticated Denial of Service or Potential Code Execution | 7.5 High | New |
| 2026-08-11 | CVE-2026-0287 | Palo Alto Networks PAN-OS Multiple Denial-of-Service Vulnerabilities Allow Unauthenticated Network Attacker to Disrupt Firewall Service | 7.5 High | Updated |
| 2026-08-11 | CVE-2026-0286 | Palo Alto Networks PAN-OS Management Plane Command Injection Allows Authenticated Administrator to Execute Arbitrary Root-Level OS Commands | 7.2 High | Updated |
| 2026-08-11 | CVE-2026-0284 | Palo Alto Networks PAN-OS LSVPN XML Injection Allows Unauthenticated Network Attacker to Inject Malicious Content | 9.9 Critical | Updated |
| 2026-08-11 | CVE-2026-0283 | Palo Alto Networks PAN-OS Large Scale VPN Authentication Bypass Allows Network Attackers to Bypass Security Restrictions | 7.2 High | Updated |
| 2026-08-11 | CVE-2026-0281 | Palo Alto Networks PAN-OS Web Session Token Exposed to Unauthenticated Network Attacker via Management Interface | 7.1 High | Updated |
| 2026-08-11 | CVE-2026-0280 | Palo Alto Networks PAN-OS IPv6 Packet Processing Flaw Allows Unauthenticated Attackers to Bypass Firewall Security Policy | 7.2 High | Updated |
| 2026-08-11 | CVE-2025-40833 | Siemens IE/PB LINK Null Pointer Dereference on Specially Crafted IPv4 Requests Causes Denial of Service Requiring Manual Reset | 7.5 High | Updated |
| 2026-08-10 | CVE-2026-21662 | Critical Johnson Controls FMS Employee Unrestricted File Upload Scores 9.8 | 9.8 Critical | Updated |
| 2026-08-10 | CVE-2026-16443 | Red Hat Build of Keycloak Cryptographic Signature Verification Flaw Scores 7.4 | 7.4 High | Updated |
| 2026-07-31 | CVE-2026-44106 | Phoenix Contact CHARX SEC Init-Script for User Applications Allows Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-31 | CVE-2026-44101 | Phoenix Contact CHARX OCPP Agent Service Missing Authentication Allows Unauthenticated Remote Attacker to Reconfigure Backend Connection | 9.8 Critical | Updated |
| 2026-07-31 | CVE-2026-44096 | Phoenix Contact CHARX SEC udhcpc Privilege Escalation Lets the charx-web User Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-31 | CVE-2026-44091 | Phoenix Contact CHARX SEC MQTT Broker Accepts Unauthenticated Malicious ID Injection That Creates Unauthorized Configuration Entries | 9.1 Critical | Updated |
| 2026-07-31 | CVE-2026-22620 | Eaton Tripp Lite PADM Authentication Component Input Validation Flaw Allows Unauthenticated Attackers to Gain Privileged Access | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-7849 | Phoenix Contact CHARX SEC Unauthenticated Remote Attacker Can Inject System Configuration Commands Executed as Root | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44108 | Phoenix Contact CHARX SEC Firewall Terminated Prematurely During System Shutdown Creates Temporary Window Exposing Internal Services | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44107 | Phoenix Contact CHARX SEC Modbus TCP Reboot Command Requires No Authentication When Port Is Open | 7.5 High | Updated |
| 2026-07-30 | CVE-2026-44104 | Phoenix Contact CHARX SEC Firmware Update Process for Base Module Lacks Cryptographic Signature Verification, Allowing Unauthenticated Remote Firmware Replacement | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44100 | Phoenix Contact CHARX JupiCore Allows Unauthenticated Remote Attacker to Reconfigure Charging Points and Access Charging Point UIDs | 9.4 Critical | Updated |
| 2026-07-30 | CVE-2026-44099 | Phoenix Contact CHARX SEC EV Charging Controller System Configuration Flaw Lets Local Low-Privilege User Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44098 | Phoenix Contact CHARX SEC OCPP Backend Firewall Bypass Enables Unauthenticated Remote OS Command Execution | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-44097 | Phoenix Contact CHARX SEC Firmware Update REST Endpoint Accepts Arbitrary File Uploads from Low-Privileged Operator Accounts | 7.1 High | Updated |
| 2026-07-30 | CVE-2026-44095 | Phoenix Contact CHARX SEC Network Configuration Script Allows Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44094 | Phoenix Contact CHARX SEC Unauthenticated Remote Attacker Can Force Fallback to Firmware Partition with Default Credentials | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-44093 | Phoenix Contact CHARX SEC Charging Controller Init-Script Flaw Enables Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44092 | Phoenix Contact CHARX SEC ModbusServer Accepts Unvalidated MQTT Input, Letting Unauthenticated Backend-Control Attackers Inject Malicious Data | 9.1 Critical | Updated |
| 2026-07-30 | CVE-2026-44090 | Phoenix Contact CHARX SEC Unauthenticated MQTT Broker Accessible Behind Bypassed Firewall Risks Full Device Compromise | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-14837 | Multiple Lenze Products Improper SSH Enable File Signature Verification Allows Low-Privilege Local Attacker to Bypass SSH Controls | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-14354 | Schneider Electric EcoStruxure Cybersecurity Admin Expert Insufficient Credential Protection Allows Authentication Bypass and Unauthorized Credential Modification | 8.7 High | Updated |
| 2026-07-30 | CVE-2026-14169 | ads-tec Industrial IT DVG-IRF Incorrect Behavior Order Allows Low-Privilege Remote Attacker to Overwrite Existing User Passwords | 8.1 High | Updated |
| 2026-07-30 | CVE-2026-14168 | ads-tec Industrial IT DVG-IRF Missing Authorization at Configuration Table Insertion Path Grants Low-Privileged Users Full Administrator Access | 8.8 High | Updated |
| 2026-07-30 | CVE-2026-14167 | ads-tec Industrial IT DVG-IRF Router Incorrect Authorization Lets Low-Privileged Remote Users Make Administrator-Level Configuration Changes | 8.8 High | Updated |
| 2026-07-30 | CVE-2026-12927 | Schneider Electric IGSS Definition Out-of-Bounds Write in Malicious CGF File Import Risks Arbitrary Code Execution | 8.4 High | Updated |
| 2026-07-30 | CVE-2026-0667 | Schneider Electric SCADAPack Failure to Handle Unusual Communication Conditions Risks Arbitrary Code Execution and Full Data Loss | 9.3 Critical | Updated |
| 2026-07-24 | CVE-2026-5726 | Delta ASDA-Soft Stack-Based Buffer Overflow Allows Code Execution via Malicious File | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-44469 | CODESYS Development System Administrative Installer Extracts Files to World-Writable Temp Directory, Enabling TOCTOU Privilege Escalation | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-44468 | CODESYS Development System Administrative Installer Creates Directory with Insecure Default Permissions | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-33105 | Critical Authorization Bypass in Microsoft Azure Kubernetes Service Allows Network Privilege Escalation | 10.0 Critical | Updated |
| 2026-07-24 | CVE-2026-31790 | Siemens SIMATIC CN 4100 OpenSSL RSASVE Key Encapsulation Sends Uninitialized Memory Contents to Peers | 7.5 High | Updated |
| 2026-07-24 | CVE-2026-31789 | Siemens SIMATIC CN 4100 OpenSSL 32-Bit Heap Buffer Overflow When Converting Excessively Large OCTET STRING to Hexadecimal | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-31405 | Linux Kernel DVB-net ULE Extension Handler Uses a Network-Controlled Index into a 255-Entry Table Without Bounds Checking, Enabling Out-of-Bounds Reads and Writes | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-28387 | Siemens SIMATIC CN 4100 OpenSSL DANE TLSA Use-After-Free in Uncommon Server Authentication Configuration | 8.1 High | Updated |
| 2026-07-24 | CVE-2026-23429 | Linux Kernel IOMMU SVA Use-After-Free in Unbind Path Scores 7.8 | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-23424 | Linux Kernel amdxdna Missing Command Buffer Validation Scores 7.1 | 7.1 High | Updated |
| 2026-07-24 | CVE-2026-23419 | Linux kernel rds_tcp_tune circular locking dependency causes deadlock via sk_net_refcnt_upgrade | 7.5 High | Updated |
| 2026-07-24 | CVE-2025-15620 | Belden HiOS Switch Platform Web Interface Denial of Service via Unauthenticated Request Allows Remote Attacker to Trigger Device Reboot | 8.6 High | Updated |
| 2026-07-24 | CVE-2025-14859 | Semtech LR11xx LoRa Transceiver Secure Boot Uses Non-Standard Hashing Algorithm That Weakens Firmware Authentication | 7.0 High | Updated |
| 2026-07-24 | CVE-2024-14034 | Belden Hirschmann HiEOS LRS11 HTTP Management Module Authentication Bypass Grants Unauthenticated Attackers Administrator Access | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2024-14033 | Belden Hirschmann EagleSDV TLS Session Establishment Denial of Service via Protocol Downgrade Exploit | 7.5 High | Updated |
| 2026-07-24 | CVE-2023-7343 | Belden Hirschmann Industrial HiVision Arbitrary Code Execution Triggered When Administrator Opens Maliciously Crafted Project File | 7.8 High | Updated |
| 2026-07-24 | CVE-2023-7342 | Belden HiSecOS EAGLE Web Server Prior to 04.1.00 Privilege Escalation Allows Operator or Auditor to Gain Administrator Access | 8.8 High | Updated |
| 2026-07-24 | CVE-2022-4987 | Belden Hirschmann Industrial HiVision External Application Execution Flaw Allows Local Attacker to Escalate Privileges | 7.3 High | Updated |
| 2026-07-24 | CVE-2022-4986 | Belden Hirschmann EagleSDV Denial of Service During TLS 1.0/1.1 Session Establishment via Crafted Handshake | 7.5 High | Updated |
| 2026-07-24 | CVE-2021-4477 | Belden Hirschmann HiLCOS OpenBAT IPv6 IPsec Firewall Bypass Allows Traffic from VPN Connections to Evade Configured Rules | 9.1 Critical | Updated |
| 2026-07-24 | CVE-2020-37216 | Belden Hirschmann HiOS Devices Prior to 08.1.00 Crash on Improper EtherNet/IP Packet Length Handling | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-8047 | CODESYS Runtime HTTP Request Length Check Flaw Enables Unauthenticated Remote Out-of-Bounds Write and Denial of Service | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-8046 | CODESYS Runtime Insufficient Authorization on User Account Deletion Allows Low-Privilege Remote User to Delete Any User | 8.1 High | Updated |
| 2026-07-23 | CVE-2026-46749 | Siemens SINEC INS Hardcoded Static Salt in Password Hashing Shared Across All Users Weakens Stored Credential Security | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-46748 | Siemens SINEC INS Binary with cap_dac_override Capability Set Allows Low-Privilege User to Read or Write Arbitrary Files | 8.8 High | Updated |
| 2026-07-23 | CVE-2026-46746 | Siemens SINEC INS sftp Upload API Unsanitized Input Allows Authenticated Remote Users to Inject OS Commands | 8.8 High | Updated |
| 2026-07-23 | CVE-2026-42542 | TDengine taosd Integer Underflow in RPC Handler Lets Unauthenticated Attackers Crash the Server With One Packet | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-24349 | Siemens SIMATIC WinCC Unified PC Runtime Stores Sensitive Information in Cleartext in Configuration Files | 7.1 High | Updated |
| 2026-07-23 | CVE-2026-0273 | Authenticated PAN-OS Administrators Can Bypass CLI and Web UI Restrictions to Run Arbitrary Commands as Root via Command Injection | 7.2 High | New |
| 2026-07-23 | CVE-2026-0272 | PAN-OS CLI Access Lets an Authenticated Administrator Perform Actions with Root Privileges via a Privilege Management Bypass | 7.2 High | New |
| 2026-07-22 | CVE-2026-41032 | Phoenix Contact CHARX SEC Controller Log Files Downloadable by Adjacent Unauthenticated Attacker, Disclosing Restricted Information | 7.5 High | Updated |
| 2026-07-22 | CVE-2026-35085 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in gdv-serverconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35084 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in dali-devconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35083 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in bac-serverconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35082 | MBS Universal Gateway ugw-logread Method Allows Authenticated Remote Users to Read Arbitrary Local Files | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35081 | MBS Universal Gateway ugw-logstop Method Allows Authenticated Remote Users to Terminate Arbitrary System Processes | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35080 | MBS Universal Gateway ugw-restoreinfo Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35079 | MBS Universal Gateway ugw-restore Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35078 | MBS Universal Gateway ugw-logstop Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35077 | MBS Universal Gateway ugw-delete-file Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35076 | MBS Universal Gateway bac-scanresult Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35075 | MBS Universal Gateway Default Hard-Coded Password Recoverable from Firmware Image Allows Full Unauthenticated Access | 9.8 Critical | Updated |
| 2026-07-22 | CVE-2026-14448 | MB Connect Line Remote Portal OS Command Injection in Certificate Management View Exploitable by High-Privilege Remote Attacker | 7.2 High | Updated |
| 2026-07-22 | CVE-2025-14774 | ABB T-MAC Plus Incorrect Authorization Allows Adjacent Unauthenticated Attacker to Cause Denial of Service | 7.4 High | Updated |
| 2026-07-22 | CVE-2025-14773 | ABB T-MAC Plus Cross-Site Scripting Vulnerability Allows Authenticated Low-Privilege Attacker to Execute Malicious Scripts | 8.0 High | Updated |
| 2026-07-22 | CVE-2025-14772 | ABB T-MAC Plus Authorization Bypass via User-Controlled Key Allows Authenticated Users to Access Other Users' Resources | 8.8 High | Updated |
| 2026-07-22 | CVE-2025-14771 | ABB T-MAC Plus Exposes Sensitive Files and Directories to External Network Access | 9.9 Critical | Updated |
| 2026-07-22 | CVE-2024-14036 | Dräger Core 1.0.5 and M540 Converter Service Denial of Service via Specially Crafted Unencrypted Network Packets | 7.5 High | Updated |
| 2026-07-22 | CVE-2022-4992 | Dräger Infinity Acute Care System and M540 Patient Monitors Network Message Handling Flaw Risks Data Integrity Across Multiple Software Versions | 8.6 High | Updated |
| 2026-07-22 | CVE-2021-4481 | Dräger Protector Software Insecure File System Permissions Allow Local Attacker to Execute Arbitrary Code with System-Level Privileges | 8.2 High | Updated |
| 2026-07-22 | CVE-2021-4480 | Dräger Protector Software Insecure File System Permissions Allow Local Attacker to Execute Arbitrary Code with Elevated Privileges | 8.2 High | Updated |
| 2026-07-22 | CVE-2021-4478 | Dräger CC-Vision Basic and E-Cal Out-of-Bounds Write on Loading Crafted GDT File Can Cause Buffer Overflow | 8.2 High | Updated |
| 2026-07-22 | CVE-2019-25722 | Dräger SC Patient Monitoring Devices Contain Hard-Coded Plaintext Credentials and Local Denial-of-Service Vulnerability in Source Code | 7.6 High | Updated |
| 2026-07-22 | CVE-2019-25719 | Dräger Infinity Acute Care System and M540 Patient Monitors Contain Network Message Handling Vulnerabilities Affecting Confidentiality and Integrity | 8.6 High | Updated |
| 2026-07-22 | CVE-2019-25718 | Dräger Infinity Explorer C700 Kiosk Mode Escape Allows Privilege Escalation to Underlying Operating System | 8.4 High | Updated |
| 2026-07-21 | CVE-2026-23425 | Linux Kernel KVM arm64 ID Register Initialization Flaw Scores 8.8 | 8.8 High | Updated |
| 2026-07-21 | CVE-2018-25237 | Belden Hirschmann HiSecOS Classic Firewall HTTPS Login Buffer Overflow with RADIUS Authentication Allows Remote Crash | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2018-25236 | Belden Hirschmann HiOS and HiSecOS Products HTTP Management Module Authentication Bypass Allows Unauthenticated Remote Access | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20238 | Belden Hirschmann Industrial HiVision 06.0.00/07.0.00 Improper Authorization Allows Read-Only Users to Gain Write Access to Managed Devices | 7.1 High | Updated |
| 2026-07-21 | CVE-2017-20237 | Belden Hirschmann Industrial HiVision Prior to 06.0.07 Authentication Bypass in Master Service Allows Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20236 | ProSoft Technology ICX35-HWC Cellular Gateway Web Interface Input Validation Flaw Allows Unauthenticated Remote OS Command Injection | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20235 | ProSoft Technology ICX35-HWC Cellular Gateway Web Interface Authentication Bypass Grants Unauthenticated Attackers Administrator Access | 9.1 Critical | Updated |
| 2026-07-21 | CVE-2017-20234 | Belden GarrettCom Magnum 6K/10K Managed Switches Hard-Coded Authentication String Allows Unauthenticated Admin Access | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2016-15058 | Belden Hirschmann HiLCOS Classic Platform Stores User Passwords in Recoverable Format, Exposing Credentials to Adjacent Unauthenticated Attackers | 8.1 High | Updated |
| 2026-07-21 | CVE-2015-10148 | Belden Hirschmann HiLCOS Devices Shipped with Hardcoded SSH and SSL Keys That Cannot Be Changed | 8.2 High | Updated |
| 2026-07-15 | CVE-2026-8314 | Rockwell Automation Arena Simulation Memory Corruption in siman.exe Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8313 | Rockwell Automation Arena Simulation Memory Corruption in linker.exe Siman Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8312 | Rockwell Automation Arena Simulation Memory Corruption in expmt.exe Siman Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8085 | Rockwell Automation Arena Simulation Memory Corruption in model.exe Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-56451 | Siemens Opcenter X Skips JWT Algorithm Validation, Letting Unauthenticated Attackers Forge Arbitrary Tokens and Bypass Authentication; CVSS 10.0 | 10.0 Critical | Updated |
| 2026-07-15 | CVE-2026-54429 | Siemens SIMATIC S7-PLCSIM Advanced High-Volume Multicast Traffic Exhausts Device Memory, Causing Denial of Service | 7.4 High | Updated |
| 2026-07-15 | CVE-2026-39304 | Apache ActiveMQ NIO SSL Transports Vulnerable to Denial-of-Service via Memory Exhaustion | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-9653 | Rockwell Automation 1756-EN2 and EN3 CIP Implicit Connection Validation Flaw Allows Network Attacker to Cause Denial of Service | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-9650 | Schneider Electric EasyLogic T150/Saitel DR Credentials Stored in Filesystem Accessible to Unauthenticated Attackers | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-9636 | Rockwell Automation ControlLogix and CompactLogix CIP Security Certificate Revocation Check Flaw Allows Revoked Certificates to Authenticate | 8.2 High | Updated |
| 2026-07-14 | CVE-2026-9292 | Rockwell Automation FactoryTalk DataMosaix Private Cloud Stored Cross-Site Scripting in Workflows Configuration Requires Admin Interaction | 8.4 High | Updated |
| 2026-07-14 | CVE-2026-9140 | Rockwell Automation 1718/1719-AENTR I/O Module UDP Unicast Network Storm Causes Device to Lose Communication | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-5928 | GNU C Library ungetwc Multibyte Encoding Overlap Flaw Affects Siemens SIMATIC S7-1500 MFP and Multiple Vendor Products | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-5450 | GNU C Library scanf Heap Buffer Overflow on Wide Character Match with Large Format Width Affects Siemens SIMATIC S7-1500 MFP and Other Products | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-5435 | GNU C Library Deprecated DNS Print Functions Ignore Caller Buffer Length, Affecting Siemens SIMATIC S7-1500 MFP and Related Vendor Products | 7.3 High | Updated |
| 2026-07-14 | CVE-2026-25789 | Siemens SIMATIC S7-1500 MFP Web Interface Filename Validation Gap on Firmware Update Page Enables Social Engineering Attack | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-25787 | Siemens SIMATIC S7-1500 MFP Web Interface Stored Cross-Site Scripting in Technology Object Name Field Exploitable by Authenticated Attacker | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-25786 | Siemens SIMATIC S7-1500 MFP Web Interface Stored Cross-Site Scripting in PLC Name Field Exploitable by Authenticated Attacker | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-12659 | Rockwell Automation FLEX 5000 EtherNet/IP Adapter Improper CIP Packet Exception Handling Causes Denial of Service Requiring Manual Restart | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-10714 | Rockwell Automation FactoryTalk Services Platform JWT Signature Bypass in Okta Web Authentication Allows Attacker to Impersonate Users | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-0265 | Palo Alto Networks PAN-OS Authentication Bypass Affects Siemens RUGGEDCOM APE1808, Scores 8.1 | 8.1 High | Updated |
| 2026-07-14 | CVE-2026-0264 | Critical Palo Alto Networks PAN-OS DNS Heap Overflow Affects Siemens RUGGEDCOM APE1808, Scores 9.8 | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-0263 | Unauthenticated IKEv2 Buffer Overflow in Palo Alto Networks PAN-OS Allows Remote Code Execution with Elevated Privileges on PA-Series Firewalls | 9.8 Critical | New |
| 2026-07-14 | CVE-2026-0262 | Palo Alto Networks PAN-OS Multiple Denial-of-Service Flaws Affect Siemens RUGGEDCOM APE1808 | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-0261 | Palo Alto Networks PAN-OS Command Injection Affects Siemens RUGGEDCOM APE1808, Scores 7.2 | 7.2 High | Updated |
| 2026-07-14 | CVE-2026-0259 | Authenticated Users on Palo Alto Networks WildFire WF-500 Appliances Can Read Sensitive Files and Delete Arbitrary Files via an External Path Control Flaw | 8.8 High | New |
| 2026-07-14 | CVE-2026-0258 | Palo Alto Networks PAN-OS IKEv2 SSRF Affects Siemens RUGGEDCOM APE1808, Scores 9.1 | 9.1 Critical | Updated |
| 2026-07-09 | CVE-2026-54801 | Siemens CPCI85 and SICORE Password Change Accepts New Password Without Verifying Current One | 7.2 High | Updated |
| 2026-07-08 | CVE-2026-46279 | Linux Kernel Page Extension Initialization Leaves Codetag Uninitialized for Pages Allocated Before page_ext Is Ready | 7.8 High | Updated |
| 2026-07-08 | CVE-2026-20151 | Cisco Smart Software Manager On-Prem Leaks Sensitive Data in Transmitted Requests | 7.3 High | Updated |
| 2026-07-07 | CVE-2026-40141 | A critical query-injection flaw in BeyondTrust Remote Support lets low-privileged users reach unauthorized resources, CVSS 9.9 | 9.9 Critical | Updated |
| 2026-07-07 | CVE-2026-40140 | Unauthenticated attackers can crash BeyondTrust Remote Support appliances via a network-communication flaw | 7.5 High | Updated |
| 2026-07-07 | CVE-2026-40139 | Critical Pre-Authentication Bypass in BeyondTrust Remote Support Allows Unauthorized Access | 9.8 Critical | Updated |
| 2026-07-07 | CVE-2026-40138 | BeyondTrust Privileged Remote Access Shares Pre-Authentication Bypass Flaw with Remote Support | 8.1 High | Updated |
| 2026-07-02 | CVE-2026-20155 | Cisco Evolved Programmable Network Manager Missing Authorization Scores 8.0 | 8.0 High | Updated |
| 2026-07-01 | CVE-2026-9717 | Schneider Electric PowerLogic P7 OS Command Injection in Admin-Privileged Context Allows Unauthorized Command Execution | 7.2 High | Updated |
| 2026-07-01 | CVE-2026-9716 | Schneider Electric PowerLogic P7 NULL Pointer Dereference Renders HMI and Configuration Interface Unavailable via Malformed Requests | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-20160 | Critical Cisco Smart Software Manager On-Prem Resource Exposure Scores 9.8 | 9.8 Critical | Updated |
| 2026-07-01 | CVE-2026-14193 | Delta DVP80ES300T PLC Improper Array Index Validation Creates Remote Denial-of-Service Exposure | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-12579 | Delta AS228T Authentication Bypass Vulnerability Allows Unauthenticated Access Without Valid Credentials | 7.4 High | Updated |
| 2026-07-01 | CVE-2026-12577 | Delta DVP80ES3 PLC Improperly Implemented Security Check Allows Bypassing Standard Protocol Verification | 8.7 High | Updated |
| 2026-07-01 | CVE-2026-12576 | Delta DVP80ES3 PLC Communication Channel Message Integrity Not Enforced, Allowing Message Substitution | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-12575 | Delta DVP80ES3 PLC Improper Resource Release Creates Remote Denial-of-Service Exposure | 7.5 High | Updated |
| 2026-06-30 | CVE-2026-12578 | Delta DTMSoft Deserialization of Untrusted Data Allows Attacker to Execute Arbitrary Code | 8.4 High | Updated |
| 2026-06-30 | CVE-2026-10763 | Hitachi Energy PROMOD V Uses Unencrypted HTTP for Digipede Server Communication, Exposing Data to Interception | 7.0 High | Updated |
| 2026-06-29 | CVE-2026-22925 | Siemens SIMATIC CN 4100 TCP SYN Flood Exhausts Available Resources and Causes Denial of Service | 7.5 High | Updated |
| 2026-06-29 | CVE-2026-22924 | Siemens SIMATIC CN 4100 Accepts Unlimited Unauthenticated Connections, Enabling Remote Resource Exhaustion and Denial of Service | 9.1 Critical | Updated |
| 2026-06-29 | CVE-2025-40949 | Siemens RUGGEDCOM ROX OS Command Injection Lets Authenticated Administrators Execute Root-Level Commands Across Multiple Platform Generations | 9.1 Critical | Updated |
| 2026-06-29 | CVE-2025-40947 | Siemens RUGGEDCOM ROX Authenticated OS Command Injection Requires Low Privilege and Network Access Across Multiple Platform Generations | 7.5 High | Updated |
| 2026-06-27 | CVE-2024-54013 | Hanwha Vision Network Camera Web Server Request Handling Flaw Exposes Protected Functions to Adjacent Unauthenticated Attackers | 8.8 High | Updated |
| 2026-06-24 | CVE-2026-6866 | Schneider Electric EcoStruxure Panel Server Credentials Revert to Insecure Initial Settings After Rare Event, Disclosing Sensitive Information | 7.5 High | Updated |
| 2026-06-23 | CVE-2026-10521 | MB Connect Line mbconnect24 Hidden Configuration Method Accessible to High-Privilege Attackers Allows Critical Parameter Modification | 7.2 High | Updated |
| 2026-06-22 | CVE-2026-8024 | iba ibaPDA and ibaDatCoordinator Deserialization of Untrusted Data Allows Unauthenticated Remote Attacker to Gain Full System Access | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-6888 | Advantech SaaS Composer Authenticated Admin SQL Injection Allows Remote Command Execution via Specific API Interface | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-6865 | Schneider Electric EasyLogic T150 Path Traversal in User-Supplied Input Allows Unauthorized Access to Sensitive Files | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-6332 | Schneider Electric EcoStruxure Machine Expert HVAC Stores Sensitive Source Code in Cleartext, Risking Disclosure of Protected Intellectual Property | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-5416 | Turck Managed Ethernet Switch OS Command Injection via Name Parameter Exploitable by Low-Privilege Remote Attacker | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-5387 | AVEVA Pipeline Simulation 2025 Allows Unauthenticated Access to Instructor and Simulator Developer Administrative Operations | 9.3 Critical | Updated |
| 2026-06-17 | CVE-2026-4827 | Schneider Electric Easergy MiCOM C264 Insufficient Session Token Entropy Allows Network Attacker to Compromise Sessions | 8.7 High | Updated |
| 2026-06-17 | CVE-2026-43296 | Linux Kernel octeontx2-af NIC SQ Manager Sticky Mode Causes Stalls and Potential PSE Deadlock When Multiple Queues Share an SMQ | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-41551 | Siemens ROS# Path Traversal in User-Supplied Input Allows Unauthenticated Remote Attacker to Read or Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-06-17 | CVE-2026-4116 | SonicWall SMA1000 Mishandles Unicode Encoding in TOTP Validation, Allowing an Authenticated SSLVPN User to Bypass Two-Factor Authentication | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-4113 | SonicWall SMA1000 Distinguishable Authentication Error Responses Allow a Remote Attacker to Enumerate SSL VPN User Accounts | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-4112 | SonicWall SMA1000 SQL Injection in the SSLVPN Component Allows a Read-Only Administrator to Escalate to Primary Administrator | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-40852 | MB Connect Line mbNET/mbNET.rokey High-Privilege Config Generator OS Command Injection via Unsanitized Config Value | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-40851 | MB Connect Line mbNET/mbNET.rokey USB Config File Parser Confusion Attack Allows Local Attacker to Achieve Code Execution | 8.4 High | Updated |
| 2026-06-17 | CVE-2026-40850 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getAccountData Function Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40836 | MB Connect Line and Helmholz Remote Portal SQL Injection in inmessage Model DELETE Command Allows Low-Privilege Database Access | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40834 | MB Connect Line and Helmholz Remote Portal SQL Injection in dash_layout.php Dashboard Layout Function Exposes Database to Low-Privileged Attackers | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40833 | MB Connect Line and Helmholz Remote Portal SQL Injection in Dashboard Layout Function Exposes Database to Low-Privileged Remote Users | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40819 | MB Connect Line Remote Portal Unauthenticated SQL Injection in sync_data24 Task Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40818 | MB Connect Line Remote Portal Unauthenticated SQL Injection in _mb24confi_getDevice Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40817 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getAlarmProfiles Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40816 | MB Connect Line Remote Portal Unauthenticated SQL Injection in Alarm Configuration Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40815 | MB Connect Line Remote Portal Unauthenticated SQL Injection in _mb24api_getUserAccount Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40814 | MB Connect Line Remote Portal Unauthenticated SQL Injection in dataapi.php _mb24confi_getTagAlarm Function Exposes Database | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40813 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getLiveValues tagid Parameter Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40812 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getLiveValues sn Parameter Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40811 | MB Connect Line Remote Portal Unauthenticated SQL Injection in ssoabstractservice SELECT Command Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40810 | MB Connect Line Remote Portal Unauthenticated SQL Injection in userinfo Endpoint Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33893 | Siemens Teamcenter Hard-Coded Credentials in Multiple Versions Allow Unauthenticated Remote Access to Sensitive Data | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33892 | Siemens Industrial Edge Management Authentication Sequence Weakness Allows Unauthorized Actions via Phishing in Affected Versions | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-33862 | Siemens Teamcenter Cross-Site Scripting Requires Low-Privilege Attacker and User Interaction, Risks Full Session Compromise | 7.3 High | Updated |
| 2026-06-17 | CVE-2026-33616 | MB Connect Line mbconnect24 Blind SQL Injection in mb24api Endpoint Gives Unauthenticated Attackers Full Database Read Access | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33615 | MB Connect Line mbconnect24 Unauthenticated SQL Injection in setinfo Endpoint Allows Arbitrary Data Write via UPDATE Command | 9.1 Critical | Updated |
| 2026-06-17 | CVE-2026-33614 | MB Connect Line mbconnect24 Unauthenticated SQL Injection in getinfo Endpoint Exposes Full Database via SELECT Command | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33613 | MB Connect Line mbconnect24 Admin-Authenticated OS Command Injection in generateSrpArray Function Allows Full System Compromise | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-3323 | Vega vegapuls Level Sensor Unsecured Configuration Interface Exposes Hashed Credentials and Access Codes to Unauthenticated Remote Attackers | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-31693 | Linux kernel CIFS replay path missing variable reinitializations causes undefined behavior on request retry | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-31568 | Linux kernel s390/mm missing secure storage access fixups for donated pages causes kernel context exceptions | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-31426 | Linux kernel ACPI EC address space handler persists after probe failure leaves dangling pointer | 7.0 High | Updated |
| 2026-06-17 | CVE-2026-27668 | Siemens RUGGEDCOM CROSSBOW Secure Access Manager User Administrators Can Administer Groups They Belong To, Enabling Privilege Escalation | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-27662 | Siemens SIMATIC HMI Unified Comfort Panel Web Browser Accessible Without Authentication When No Security Mechanism Is Configured | 7.7 High | Updated |
| 2026-06-17 | CVE-2026-25654 | Siemens SINEC NMS Password Reset Request Authorization Not Validated, Allowing Authenticated User to Reset Any Account Password | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-24032 | Siemens SINEC NMS UMC Authentication Weakness Allows Forged User Identity Due to Insufficient Validation | 7.3 High | Updated |
| 2026-06-17 | CVE-2026-23428 | Critical Linux Kernel ksmbd Use-After-Free in Compound Request Handling Scores 9.8 | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-23427 | Critical Linux Kernel ksmbd Use-After-Free in Durable Handle Replay Scores 9.8 | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-23415 | Linux Kernel Futex Use-After-Free between Key Lookup and VMA Policy Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23413 | Linux Kernel clsact Use-After-Free in Init/Destroy Rollback Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23412 | Linux Kernel Netfilter BPF Use-After-Free in Hook Memory Release Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23411 | Linux Kernel AppArmor Race Condition Frees i_private Data Early Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23410 | Linux Kernel AppArmor Race on Rawdata Dereference Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23408 | Linux Kernel AppArmor Double Free of Namespace Name Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23407 | Linux Kernel AppArmor Out-of-Bounds Read in DFA Verification Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23406 | Linux kernel AppArmor match_char macro evaluates pointer multiple times and skips input characters during DFA traversal | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-22619 | Eaton Intelligent Power Protector Uncontrolled Search Path Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-1952 | Delta Electronics AS320T Denial of Service via Undocumented Subfunction Call, Exploitable Remotely Without Authentication | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1951 | Delta Electronics AS320T Stack-Based Buffer Overflow Due to Missing Directory Name Length Check, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1950 | Delta Electronics AS320T Stack-Based Buffer Overflow Due to Missing File Name Length Check, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1949 | Delta Electronics AS320T GET/PUT Request Handler Incorrectly Calculates Stack Buffer Size, Enabling Unauthenticated Remote Code Execution via the Web Service | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-11317 | Rockwell Automation CompactLogix and ControlLogix Crafted CIP Message Fault Causes Denial of Service Requiring Device Restart | 8.7 High | Updated |
| 2026-06-17 | CVE-2026-10829 | Moxa NPort W2150A-W4/W2250A-W4 Series Stack-Based Buffer Overflow from Insufficient Input Validation Allows Unauthenticated Remote Exploitation | 8.6 High | Updated |
| 2026-06-17 | CVE-2026-10825 | Moxa NPort 6000-G2 Series WebSocket API JSON Request Handling Flaw Allows Low-Privilege Authenticated Attacker to Cause Denial of Service | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-0647 | Rockwell Automation FLEX I/O 1794-AENTR Adapter Web Server Missing Authentication Allows Unauthenticated Attacker to Change Web Interface Password | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-0646 | Rockwell Automation FLEX I/O 1794-AENTR Adapter Improper CIP Protocol Memory Handling Causes Adapter Fault and Communication Loss | 8.7 High | Updated |
| 2026-06-17 | CVE-2025-41670 | Phoenix Contact AXC F PLC Runtime User-Writable Configuration Files Allow Low-Privilege Local User to Influence Privileged Service Behavior | 7.8 High | Updated |
| 2026-06-17 | CVE-2025-41669 | Phoenix Contact AXC F PLC PLCnext Store App Installation Lacks Data Verification, Allowing Low-Privilege Remote Engineer to Install Unsigned Applications | 8.8 High | Updated |
| 2026-06-17 | CVE-2025-40946 | Siemens blueplanet Solar Inverter Hard-Coded Credentials Allow Adjacent Unauthenticated Attacker to Compromise Device | 8.3 High | Updated |
| 2026-06-17 | CVE-2025-40899 | Nozomi Networks Guardian Stored Cross-Site Scripting in Assets/Nodes Custom Fields Allows Low-Privilege Authenticated Attacker to Execute Scripts | 8.9 High | Updated |
| 2026-06-17 | CVE-2025-40897 | Nozomi Networks Guardian Threat Intelligence Access Control Flaw Lets View-Only Authenticated Users Modify Records | 8.1 High | Updated |
| 2026-06-17 | CVE-2024-43384 | Phoenix Contact mGuard Firewall Improper Removal of Sensitive Information Before Storage Exposes Root Password to Low-Privilege Remote User | 8.0 High | Updated |
| 2026-06-17 | CVE-2024-1490 | WAGO PLC OpenVPN Configuration via Web Management Allows Authenticated High-Privilege Attacker to Execute Arbitrary Code | 7.2 High | Updated |
| 2026-06-17 | CVE-2023-3634 | Festo MSE6 Undocumented Test Mode Functions Exploitable by Authenticated Low-Privilege Remote Attacker for Full Data Loss | 8.8 High | Updated |