CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 14:50 UTC)

What this means for you

This week: 5,499 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,499; Show in the list
Critical, last 7 days: 356; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product debian:debian_linux. Show all products

947 CVEs, showing 451 to 500PreviousPage 10 of 19Next

CVE	Severity	Title	Published
CVE-2022-27775	High 7.5	An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a conn… Assigned by hackerone	Jun 1, 2022
CVE-2022-27774	Medium 5.7	An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is… Assigned by hackerone	Jun 1, 2022
CVE-2022-32250	High 7.8	net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check l… Assigned by mitre	Jun 2, 2022
CVE-2022-21123	Medium 5.5	Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-21125	Medium 5.5	Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-21166	Medium 5.5	Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-2126	High 7.8	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2124	High 7.8	Buffer Over-read in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2129	High 7.8	Out-of-bounds Write in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2068	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	Jun 21, 2022
CVE-2022-2078	Medium 5.5	A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of s… Assigned by redhat	Jun 30, 2022
CVE-2022-2285	High 7.8	Integer Overflow or Wraparound in vim/vim Assigned by @huntrdev	Jul 2, 2022
CVE-2022-34918	High 7.8	An issue was discovered in the Linux kernel through 5.18.9. Assigned by mitre	Jul 4, 2022
CVE-2022-2304	High 7.8	Stack-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jul 5, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2022-32208	Medium 5.9	When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. Assigned by hackerone	Jul 7, 2022
CVE-2022-32206	Medium 6.5	curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. Assigned by hackerone	Jul 7, 2022
CVE-2022-32207	Critical 9.8	When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In… Assigned by hackerone	Jul 7, 2022
CVE-2022-32205	Medium 4.3	A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. Assigned by hackerone	Jul 7, 2022
CVE-2021-33656	Medium 6.8	When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. Assigned by openEuler	Jul 18, 2022
CVE-2021-33655	Medium 6.7	When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. Assigned by openEuler	Jul 18, 2022
CVE-2021-46828	High 7.5	In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. Assigned by mitre	Jul 20, 2022
CVE-2022-36946	High 7.5	nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one… Assigned by mitre	Jul 27, 2022
CVE-2022-36879	Medium 5.5	An issue was discovered in the Linux kernel through 5.18.14. Assigned by mitre	Jul 27, 2022
CVE-2022-2509	High 7.5	A vulnerability found in gnutls. Assigned by redhat	Aug 1, 2022
CVE-2022-37434	Critical 9.8	zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre	Aug 5, 2022
CVE-2022-26373	Medium 5.5	Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Assigned by intel	Aug 18, 2022
CVE-2021-3759	Medium 5.5	A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. Assigned by redhat	Aug 23, 2022
CVE-2022-2946	High 7.8	Use After Free in vim/vim Assigned by @huntrdev	Aug 23, 2022
CVE-2022-2978	High 7.8	A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. Assigned by redhat	Aug 24, 2022
CVE-2021-4189	Medium 5.3	A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. Assigned by redhat	Aug 24, 2022
CVE-2021-4037	Medium 4.4	Kernel: security regression for cve-2018-13405 Assigned by redhat	Aug 24, 2022
CVE-2021-3999	High 7.8	A flaw was found in glibc. Assigned by redhat	Aug 24, 2022
CVE-2022-32893 Known exploited	High 8.8	An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple	Aug 24, 2022
CVE-2022-0171	Medium 5.5	A flaw was found in the Linux kernel. Assigned by redhat	Aug 26, 2022
CVE-2022-1184	Medium 5.5	A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Assigned by redhat	Aug 29, 2022
CVE-2022-3028	High 7.0	A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. Assigned by redhat	Aug 31, 2022
CVE-2022-2153	Medium 5.5	A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. Assigned by redhat	Aug 31, 2022
CVE-2022-1271	High 8.8	An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. Assigned by redhat	Aug 31, 2022
CVE-2022-2663	Medium 5.3	An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. Assigned by redhat	Sep 1, 2022
CVE-2022-39188	Medium 4.7	An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Assigned by mitre	Sep 2, 2022
CVE-2022-39190	Medium 5.5	An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. Assigned by mitre	Sep 2, 2022
CVE-2022-40307	Medium 4.7	An issue was discovered in the Linux kernel through 5.19.8. Assigned by mitre	Sep 9, 2022
CVE-2022-3169	Medium 5.5	A flaw was found in the Linux kernel. Assigned by redhat	Sep 9, 2022
CVE-2022-2905	Medium 5.5	An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. Assigned by redhat	Sep 9, 2022
CVE-2022-36280	Medium 6.3	There is an out-of-bounds write vulnerability in vmwgfx driver Assigned by Anolis	Sep 9, 2022
CVE-2022-40674	High 8.1	libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. Assigned by mitre	Sep 14, 2022
CVE-2022-40768	Medium 5.5	drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case. Assigned by mitre	Sep 18, 2022
CVE-2022-41222	High 7.0	mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. Assigned by mitre	Sep 21, 2022
CVE-2022-41218	Medium 5.5	In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. Assigned by mitre	Sep 21, 2022

PreviousPage 10 of 19Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.