CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 3:30 PM ET )
This week: 4,529 CVEs published, 330 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,529 Show in the list Critical, last 7 days 330 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74434 Critical 9.8 rxrpc: Don't move a peeked OOB message onto the pending queue Assigned by Linux
Aug 15, 2026 CVE-2026-74435 High 7.5 rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Assigned by Linux
Aug 15, 2026 CVE-2026-74436 Critical 9.8 rxrpc: serialize kernel accept preallocation with socket teardown Assigned by Linux
Aug 15, 2026 CVE-2026-74437 Not yet scored media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work Assigned by Linux
Aug 15, 2026 CVE-2026-74438 High 7.8 crypto: sun4i-ss - Remove insecure and unused rng_alg Assigned by Linux
Aug 15, 2026 CVE-2026-74439 Critical 9.3 iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Assigned by Linux
Aug 15, 2026 CVE-2026-74440 High 7.8 drm/xe: Wait on external BO kernel fences in exec IOCTL Assigned by Linux
Aug 15, 2026 CVE-2026-74441 Not yet scored usb: typec: ucsi: Fix race condition and ordering in port unregistration Assigned by Linux
Aug 15, 2026 CVE-2026-74442 Not yet scored drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure Assigned by Linux
Aug 15, 2026 CVE-2026-74443 High 8.8 drm/vmwgfx: bound DMA command body size against suffix pointer Assigned by Linux
Aug 15, 2026 CVE-2026-74444 High 7.8 drm/vmwgfx: validate DRAW_PRIMITIVES header size before division Assigned by Linux
Aug 15, 2026 CVE-2026-74445 Not yet scored drm/vmwgfx: reject DX_BIND_QUERY without a DX context Assigned by Linux
Aug 15, 2026 CVE-2026-74446 High 7.8 drm/amdkfd: hold event_mutex while checkpointing CRIU events Assigned by Linux
Aug 15, 2026 CVE-2026-74447 High 7.8 drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment Assigned by Linux
Aug 15, 2026 CVE-2026-74448 Not yet scored drm/amdkfd: fix QID bit leak in pqm_create_queue() Assigned by Linux
Aug 15, 2026 CVE-2026-74449 High 7.8 drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport Assigned by Linux
Aug 15, 2026 CVE-2026-74450 High 7.8 drm/amd/pm: fix pptable use-after-free Assigned by Linux
Aug 15, 2026 CVE-2026-74451 High 7.8 drm/panthor: validate firmware interface structure sizes Assigned by Linux
Aug 15, 2026 CVE-2026-74452 High 7.8 drm/panthor: reject firmware sections with oversized data Assigned by Linux
Aug 15, 2026 CVE-2026-74453 High 7.8 drm/vc4: Zero the tile state data array before each BIN job Assigned by Linux
Aug 15, 2026 CVE-2026-74454 High 7.8 drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size Assigned by Linux
Aug 15, 2026 CVE-2026-74455 Not yet scored can: peak_usb: validate uCAN receive record lengths Assigned by Linux
Aug 15, 2026 CVE-2026-74456 High 7.8 can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error Assigned by Linux
Aug 15, 2026 CVE-2026-74457 Not yet scored can: peak_usb: add bounds check for USB channel index Assigned by Linux
Aug 15, 2026 CVE-2026-74458 Not yet scored can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents Assigned by Linux
Aug 15, 2026 CVE-2026-74459 Not yet scored can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure Assigned by Linux
Aug 15, 2026 CVE-2026-74460 Not yet scored can: ems_usb: validate CPC message lengths Assigned by Linux
Aug 15, 2026 CVE-2026-74461 High 8.4 i2c: imx: Cancel hrtimer before clearing slave pointer Assigned by Linux
Aug 15, 2026 CVE-2026-74462 Not yet scored i2c: imx: mark I2C adapter when hardware is powered down Assigned by Linux
Aug 15, 2026 CVE-2026-74463 Not yet scored i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock Assigned by Linux
Aug 15, 2026 CVE-2026-74464 Not yet scored net: openvswitch: fix skb leak on flow key update failure during ct Assigned by Linux
Aug 15, 2026 CVE-2026-74465 High 7.8 net: openvswitch: fix potential UAF on meter attach failure Assigned by Linux
Aug 15, 2026 CVE-2026-74466 Not yet scored s390/zcrypt: Close speculative mem read possibility Assigned by Linux
Aug 15, 2026 CVE-2026-74467 High 7.8 s390/qeth: Check CAP_NET_ADMIN for private ioctls Assigned by Linux
Aug 15, 2026 CVE-2026-74468 Not yet scored gpio: pch: use raw_spinlock_t for the register lock Assigned by Linux
Aug 15, 2026 CVE-2026-74469 High 8.8 sctp: prevent peer transport count overflow Assigned by Linux
Aug 15, 2026 CVE-2026-74470 High 7.8 scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write Assigned by Linux
Aug 15, 2026 CVE-2026-74471 High 7.8 tracing: Check return value of __register_event() in trace_module_add_events() Assigned by Linux
Aug 15, 2026 CVE-2026-74472 Not yet scored ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() Assigned by Linux
Aug 15, 2026 CVE-2026-74473 Critical 9.8 vxlan: use pskb_network_may_pull() in route_shortcircuit() Assigned by Linux
Aug 15, 2026 CVE-2026-74474 Critical 9.8 vxlan: use pskb_network_may_pull() for transmit path header pulls Assigned by Linux
Aug 15, 2026 CVE-2026-74475 Critical 10.0 vxlan: use neigh_ha_snapshot() in route_shortcircuit() Assigned by Linux
Aug 15, 2026 CVE-2026-74476 Critical 9.1 veth: convert frag_list skbs before running XDP Assigned by Linux
Aug 15, 2026 CVE-2026-74477 Not yet scored uprobes: Fix NULL pointer dereference in hprobe_expire() Assigned by Linux
Aug 15, 2026 CVE-2026-74478 Critical 9.8 um: vector: fix use-after-free in vector_mmsg_rx() Assigned by Linux
Aug 15, 2026 CVE-2026-74479 High 7.8 net: pktgen: fix proc entry use-after-free Assigned by Linux
Aug 15, 2026 CVE-2026-74480 Critical 9.8 net: bridge: stop fast-leave after deleting a port group Assigned by Linux
Aug 15, 2026 CVE-2026-74481 High 7.8 mm/page_reporting: use system_freezable_wq to fix UAF during suspend Assigned by Linux
Aug 15, 2026 CVE-2026-74482 High 7.8 mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios Assigned by Linux
Aug 15, 2026 CVE-2026-74483 Not yet scored binfmt_misc: don't leak the user namespace when the mount fails Assigned by Linux
Aug 15, 2026
Previous Page 118 of 189 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
