CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 15:50 UTC)

What this means for you

This week: 5,493 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,493; Show in the list
Critical, last 7 days: 353; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product debian:debian_linux. Show all products

947 CVEs, showing 501 to 550PreviousPage 11 of 19Next

CVE	Severity	Title	Published
CVE-2022-35252	Low 3.7	When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Assigned by hackerone	Sep 23, 2022
CVE-2022-3303	Medium 4.7	A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. Assigned by redhat	Sep 27, 2022
CVE-2022-41849	Medium 4.2	drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a… Assigned by mitre	Sep 30, 2022
CVE-2022-41850	Medium 4.7	roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a… Assigned by mitre	Sep 30, 2022
CVE-2022-42003	High 7.5	In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting,…	Oct 2, 2022
CVE-2022-42004	High 7.5	In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays.	Oct 2, 2022
CVE-2022-20422	High 7.0	In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. Assigned by google_android	Oct 11, 2022
CVE-2022-20421	High 7.8	In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. Assigned by google_android	Oct 11, 2022
CVE-2022-42721	Medium 5.5	A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked lis… Assigned by mitre	Oct 13, 2022
CVE-2022-42722	Medium 5.5	In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the b… Assigned by mitre	Oct 13, 2022
CVE-2022-42720	High 7.8	Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger… Assigned by mitre	Oct 13, 2022
CVE-2022-42719	High 8.8	A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the ke… Assigned by mitre	Oct 13, 2022
CVE-2022-41674	High 8.1	An issue was discovered in the Linux kernel before 5.19.16. Assigned by mitre	Oct 13, 2022
CVE-2022-3524	Medium 4.3	Linux Kernel IPv6 ipv6_renew_options memory leak Assigned by VulDB	Oct 16, 2022
CVE-2022-3521	Low 2.6	Linux Kernel kcm kcmsock.c kcm_tx_work race condition Assigned by VulDB	Oct 16, 2022
CVE-2022-3545	Medium 5.5	Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free Assigned by VulDB	Oct 17, 2022
CVE-2022-3564	Medium 5.5	Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free Assigned by VulDB	Oct 17, 2022
CVE-2022-3534	Medium 5.5	Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free Assigned by VulDB	Oct 17, 2022
CVE-2022-3594	Medium 5.3	Linux Kernel BPF r8152.c intr_callback logging of excessive data Assigned by VulDB	Oct 18, 2022
CVE-2022-3586	Medium 5.5	A flaw was found in the Linux kernel’s networking code. Assigned by redhat	Oct 19, 2022
CVE-2022-3621	Medium 4.3	Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference Assigned by VulDB	Oct 20, 2022
CVE-2022-37454	Critical 9.8	The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic… Assigned by mitre	Oct 21, 2022
CVE-2022-3646	Low 3.1	Linux Kernel BPF segment.c nilfs_attach_log_writer memory leak Assigned by VulDB	Oct 21, 2022
CVE-2022-3649	Low 3.1	Linux Kernel BPF inode.c nilfs_new_inode use after free Assigned by VulDB	Oct 21, 2022
CVE-2022-3635	Medium 5.5	Linux Kernel IPsec idt77252.c tst_timer use after free Assigned by VulDB	Oct 21, 2022
CVE-2022-3633	Low 3.5	Linux Kernel transport.c j1939_session_destroy memory leak Assigned by VulDB	Oct 21, 2022
CVE-2022-3629	Low 2.6	Linux Kernel af_vsock.c vsock_connect memory leak Assigned by VulDB	Oct 21, 2022
CVE-2022-3625	Medium 4.6	Linux Kernel IPsec devlink.c devlink_param_get use after free Assigned by VulDB	Oct 21, 2022
CVE-2022-43680	High 7.5	In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. Assigned by mitre	Oct 24, 2022
CVE-2021-46848	Critical 9.1	GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. Assigned by mitre	Oct 24, 2022
CVE-2022-43750	Medium 6.7	drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory. Assigned by mitre	Oct 26, 2022
CVE-2022-36227	Critical 9.8	In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer d… Assigned by mitre	Nov 22, 2022
CVE-2022-32221	Critical 9.8	When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same han… Assigned by hackerone	Dec 5, 2022
CVE-2022-42328	Medium 6.2	Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-… Assigned by XEN	Dec 7, 2022
CVE-2022-42329	Medium 5.5	Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-… Assigned by XEN	Dec 7, 2022
CVE-2022-47518	High 7.8	An issue was discovered in the Linux kernel before 6.0.11. Assigned by mitre	Dec 18, 2022
CVE-2022-47520	High 7.1	An issue was discovered in the Linux kernel before 6.0.11. Assigned by mitre	Dec 18, 2022
CVE-2023-23454	Medium 5.5	cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can somet… Assigned by mitre	Jan 12, 2023
CVE-2023-23455	Medium 5.5	atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_S… Assigned by mitre	Jan 12, 2023
CVE-2023-23559	High 7.8	In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Assigned by mitre	Jan 13, 2023
CVE-2022-47929	Medium 5.5	In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic contr… Assigned by mitre	Jan 17, 2023
CVE-2023-0266 Known exploited	High 7.9	Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel Assigned by Google	Jan 30, 2023
CVE-2023-0361	High 7.4	A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. Assigned by redhat	Feb 15, 2023
CVE-2023-24998	High 7.5	Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploa…	Feb 20, 2023
CVE-2023-23916	Medium 6.5	An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed mult… Assigned by hackerone	Feb 23, 2023
CVE-2023-26604	High 7.8	systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Assigned by mitre	Mar 3, 2023
CVE-2023-0386 Known exploited	High 7.8	A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capabl… Assigned by redhat	Mar 22, 2023
CVE-2023-1077	High 7.0	In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition woul… Assigned by redhat	Mar 27, 2023
CVE-2023-27535	Medium 5.9	An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Assigned by hackerone	Mar 30, 2023
CVE-2023-27538	High 7.7	An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr… Assigned by hackerone	Mar 30, 2023

PreviousPage 11 of 19Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.