CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 02:23 UTC )
This week: 4,476 CVEs published, 336 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,476 Show in the list Critical, last 7 days 336 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68453 High 7.1 s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Assigned by Linux
Aug 13, 2026 CVE-2026-68454 High 8.8 KVM: s390: pci: Fix handling of AIF enable without AISB Assigned by Linux
Aug 13, 2026 CVE-2026-68455 Not yet scored liveupdate: validate session type before performing operation Assigned by Linux
Aug 15, 2026 CVE-2026-68456 Not yet scored usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Assigned by Linux
Aug 15, 2026 CVE-2026-68457 Critical 9.1 ksmbd: use opener credentials for FSCTL mutations Assigned by Linux
Aug 15, 2026 CVE-2026-68458 High 7.8 binder: cache secctx size before release zeroes it Assigned by Linux
Aug 15, 2026 CVE-2026-68459 Not yet scored f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Assigned by Linux
Aug 15, 2026 CVE-2026-68460 Not yet scored f2fs: fix potential deadlock in f2fs_balance_fs() Assigned by Linux
Aug 15, 2026 CVE-2026-68461 High 7.8 device property: initialize the remaining fields of fwnode_handle in fwnode_init() Assigned by Linux
Aug 15, 2026 CVE-2026-68462 High 7.8 bpf: Reject negative const offsets for buffer pointers Assigned by Linux
Aug 15, 2026 CVE-2026-68463 Not yet scored mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Assigned by Linux
Aug 15, 2026 CVE-2026-68464 Not yet scored mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Assigned by Linux
Aug 15, 2026 CVE-2026-68465 Not yet scored mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Assigned by Linux
Aug 15, 2026 CVE-2026-68466 High 8.8 mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Assigned by Linux
Aug 15, 2026 CVE-2026-68467 High 7.8 mtd: mchp23k256: use SPI match data for chip caps Assigned by Linux
Aug 15, 2026 CVE-2026-68468 Not yet scored mtd: virt-concat: free duplicate generated name Assigned by Linux
Aug 15, 2026 CVE-2026-68469 Not yet scored wifi: mwifiex: fix permanently busy scans after multiple roam iterations Assigned by Linux
Aug 15, 2026 CVE-2026-68470 High 8.8 wifi: mac80211: validate extension-frame layout before RX Assigned by Linux
Aug 15, 2026 CVE-2026-68471 High 8.8 wifi: ieee80211: validate MLE common info length Assigned by Linux
Aug 15, 2026 CVE-2026-68472 High 8.1 wifi: cfg80211: validate EHT MLE before MLD ID read Assigned by Linux
Aug 15, 2026 CVE-2026-68473 High 7.8 powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() Assigned by Linux
Aug 15, 2026 CVE-2026-68474 High 7.8 powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Assigned by Linux
Aug 15, 2026 CVE-2026-68475 Not yet scored reset: sunxi: fix memory region leak on ioremap failure Assigned by Linux
Aug 15, 2026 CVE-2026-68476 Critical 9.8 ipvs: reload ip header after head reallocation Assigned by Linux
Aug 15, 2026 CVE-2026-68477 Critical 9.8 ipvs: fix more places with wrong ipv6 transport offsets Assigned by Linux
Aug 15, 2026 CVE-2026-68478 Not yet scored memstick: ms_block: reject a card that reports too many blocks Assigned by Linux
Aug 15, 2026 CVE-2026-68479 High 7.8 Bluetooth: btrtl: validate firmware patch bounds Assigned by Linux
Aug 15, 2026 CVE-2026-72003 High 8.8 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Assigned by Linux
Aug 15, 2026 CVE-2026-72004 Not yet scored wifi: mac80211: fix memory leak in ieee80211_register_hw() Assigned by Linux
Aug 15, 2026 CVE-2026-72005 High 7.8 wifi: rt2x00: avoid full teardown before work setup in probe Assigned by Linux
Aug 15, 2026 CVE-2026-72006 Not yet scored net/mlx5: free mlx5_st_idx_data on final dealloc Assigned by Linux
Aug 15, 2026 CVE-2026-72007 Not yet scored pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Assigned by Linux
Aug 15, 2026 CVE-2026-72008 Not yet scored pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Assigned by Linux
Aug 15, 2026 CVE-2026-72009 High 7.8 pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Assigned by Linux
Aug 15, 2026 CVE-2026-72010 Not yet scored cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Assigned by Linux
Aug 15, 2026 CVE-2026-72011 Not yet scored s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Assigned by Linux
Aug 15, 2026 CVE-2026-72012 High 7.8 tracing/osnoise: Call synchronize_rcu() when unregistering Assigned by Linux
Aug 15, 2026 CVE-2026-72013 Not yet scored riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Assigned by Linux
Aug 15, 2026 CVE-2026-72014 Critical 9.8 drbd: reject data replies with an out-of-range payload size Assigned by Linux
Aug 15, 2026 CVE-2026-72015 Not yet scored fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Assigned by Linux
Aug 15, 2026 CVE-2026-72016 Not yet scored cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Assigned by Linux
Aug 15, 2026 CVE-2026-72017 Not yet scored net: macb: drop in-flight Tx SKBs on close Assigned by Linux
Aug 15, 2026 CVE-2026-72018 High 7.8 dibs: loopback: validate offset and size in move_data() Assigned by Linux
Aug 15, 2026 CVE-2026-72019 High 7.3 macsec: don't read an unset MAC header in macsec_encrypt() Assigned by Linux
Aug 15, 2026 CVE-2026-72020 Critical 9.8 ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Assigned by Linux
Aug 15, 2026 CVE-2026-72021 High 8.2 ipvs: use parsed transport offset in SCTP state lookup Assigned by Linux
Aug 15, 2026 CVE-2026-72022 Not yet scored llc: fix SAP refcount leak in llc_ui_autobind() Assigned by Linux
Aug 15, 2026 CVE-2026-72023 Not yet scored octeontx2-pf: fix SQB pointer leak on init failure Assigned by Linux
Aug 15, 2026 CVE-2026-72024 High 7.8 mac802154: remove interfaces with RCU list deletion Assigned by Linux
Aug 15, 2026 CVE-2026-72025 Not yet scored s390/monwriter: Reject buffer reuse with different data length Assigned by Linux
Aug 15, 2026
Previous Page 100 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
