[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100177 | 25 Sep 2026 | CVSS 6.3 | ail project ail frameworkThe AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a cookiejar… | |
| CVE-2026-100187 | 25 Sep 2026 | CVSS 6.9 | ail project ail frameworkThe Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based… | |
| CVE-2026-100190 | 25 Sep 2026 | CVSS 6.3 | ail project ail frameworkThe AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data… | |
| CVE-2026-100174 | 25 Sep 2026 | CVSS 5.1 | ail project ail frameworkThe AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to… | |
| CVE-2026-100079 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates… | Fix |
| CVE-2026-100172 | 25 Sep 2026 | CVSS 8.5 | ail project ail frameworkThe AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers… | |
| CVE-2026-100075 | 25 Sep 2026 | CVSS 9.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters When srpt_alloc_rw_ctxs()… | Fix |
| CVE-2026-100076 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths… | Fix |
| CVE-2026-100077 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit During recovery, it is not safe to… | Fix |
| CVE-2026-100078 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to… | Fix |
| CVE-2026-100070 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If… | Fix |
| CVE-2026-100071 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail… | Fix |
| CVE-2026-100072 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The… | Fix |
| CVE-2026-100073 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4… | Fix |
| CVE-2026-100074 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUNT is not marked as a unique… | Fix |
| CVE-2026-95832 | 25 Sep 2026 | CVSS 9.3 | Kovid Goyal kittyImproper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3… | |
| CVE-2026-78902 | 25 Sep 2026 | CVSS 6.1 | VulnerabilityCross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package | |
| CVE-2026-79153 | 25 Sep 2026 | CVSS 7.8 | VulnerabilitySeclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an… | |
| CVE-2026-88420 | 25 Sep 2026 | CVSS 5.4 | VulnerabilityA reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated… | |
| CVE-2026-88421 | 25 Sep 2026 | CVSS 7.5 | VulnerabilityIncorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view… | |
| CVE-2026-51772 | 25 Sep 2026 | CVSS 6.5 | VulnerabilityA Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations configuration… | |
| CVE-2026-51773 | 25 Sep 2026 | CVSS 8.1 | VulnerabilityAn issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI… | |
| CVE-2026-52622 | 25 Sep 2026 | CVSS 7.5 | VulnerabilityAn issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote… | |
| CVE-2025-51457 | 25 Sep 2026 | CVSS 8.8 | VulnerabilityD-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An… | |
| CVE-2026-98154 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -EIO, the RDMA queue_rq path… | Fix |
| CVE-2026-98155 | 25 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although… | Fix |
| CVE-2026-98156 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page… | Fix |
| CVE-2026-98157 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The… | Fix |
| CVE-2026-98158 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom… | Fix |
| CVE-2026-98159 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by… | Fix |
| CVE-2026-98145 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose… | |
| CVE-2026-98146 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct… | Fix |
| CVE-2026-98147 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node()… | |
| CVE-2026-98148 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation… | |
| CVE-2026-98149 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and… | Fix |
| CVE-2026-98150 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the target CPU… | Fix |
| CVE-2026-98151 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the… | Fix |
| CVE-2026-98152 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending… | Fix |
| CVE-2026-98153 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called… | Fix |
| CVE-2026-98136 | 25 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table size… | Fix |
| CVE-2026-98137 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range()… | Fix |
| CVE-2026-98138 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded… | Fix |
| CVE-2026-98139 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters… | Fix |
| CVE-2026-98140 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths… | |
| CVE-2026-98141 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the… | |
| CVE-2026-98142 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The `cirrus-qemu` driver relies… | |
| CVE-2026-98143 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of… | |
| CVE-2026-98144 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error()… | |
| CVE-2026-98127 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check… | Fix |
| CVE-2026-98128 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()… | Fix |
| CVE-2026-98129 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()… | Fix |
| CVE-2026-98130 | 25 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_START handler… | Fix |
| CVE-2026-98131 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if… | Fix |
| CVE-2026-98132 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO… | Fix |
| CVE-2026-98133 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit… | Fix |
| CVE-2026-98134 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini… | Fix |
| CVE-2026-98135 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boot sector is_boot_sector_ntfs()… | Fix |
| CVE-2026-98118 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfront There… | |
| CVE-2026-98119 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfs_alloc_subrequest() fails syzbot reported… | |
| CVE-2026-98120 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfs_unbuffered_write()… | |
| CVE-2026-98121 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks… | Fix |
| CVE-2026-98122 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()… | Fix |
| CVE-2026-98123 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration… | Fix |
| CVE-2026-98124 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3_zero_range()… | Fix |
| CVE-2026-98125 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3_insert_range() and… | Fix |
| CVE-2026-98126 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOC_FL_ZERO_RANGE is used… | Fix |
| CVE-2026-98110 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length The firmware ID is treated as… | |
| CVE-2026-98111 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value lengths… | |
| CVE-2026-98112 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when… | |
| CVE-2026-98113 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally… | |
| CVE-2026-98114 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts truncated ACEs… | |
| CVE-2026-98115 | 25 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for… | Fix |
| CVE-2026-98116 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF… | |
| CVE-2026-98117 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently… | |
| CVE-2026-98106 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio… | |
| CVE-2026-98107 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect… | |
| CVE-2026-98108 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan… | |
| CVE-2026-98109 | 25 Sep 2026 | CVSS 4.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix race condition during device registration In… | Fix |
| CVE-2026-98103 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ip_sf_list to RCU Commit 23d2b94043ca ("igmp: Add ip_mc_list… | |
| CVE-2026-98104 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted… | |
| CVE-2026-98105 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: Improve the error recovery When oversubscribed traffic… | |
| CVE-2026-98093 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_params() enables mclk… | |
| CVE-2026-98094 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe fbtft_mkdirty() can be reached from the… | |
| CVE-2026-98095 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). syzbot… | |
| CVE-2026-98096 | 25 Sep 2026 | CVSS 7.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6_srh_rcv()… | |
| CVE-2026-98097 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is… | |
| CVE-2026-98098 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list User-space… | |
| CVE-2026-98099 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Several places in… | |
| CVE-2026-98101 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() pmc->sflist is read… | |
| CVE-2026-98102 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() When removing a source… | |
| CVE-2026-98085 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge Nicholas Carlini… | |
| CVE-2026-98086 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: ump: do not touch legacy_rmidi before it exists snd_ump_parse_endpoint()… | |
| CVE-2026-98087 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A… | |
| CVE-2026-98088 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in… | |
| CVE-2026-98089 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd()… | |
| CVE-2026-98090 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device()… | |
| CVE-2026-98091 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list When creating the… | |
| CVE-2026-98092 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close()… | |
| CVE-2026-98077 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()… | |
| CVE-2026-98078 | 25 Sep 2026 | CVSS 4.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization hton_seq() expects the… | Fix |
Page 153 of 168