CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 6:50 PM ET )
This week: 4,539 CVEs published, 326 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,539 Show in the list Critical, last 7 days 326 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74520 High 8.8 iommu/iommufd: Fix IOPF group ownership UAF Assigned by Linux
Aug 15, 2026 CVE-2026-74521 Critical 9.1 ksmbd: use memcmp() to compare ClientGUIDs Assigned by Linux
Aug 15, 2026 CVE-2026-74522 High 8.8 ksmbd: fix use-after-free in __close_file_table_ids() Assigned by Linux
Aug 15, 2026 CVE-2026-74523 High 7.5 qede: sync udp_tunnel ports outside qede_lock in the recovery path Assigned by Linux
Aug 15, 2026 CVE-2026-74524 Not yet scored riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove Assigned by Linux
Aug 15, 2026 CVE-2026-74525 Not yet scored net: sxgbe: free TX rings on RX allocation failure Assigned by Linux
Aug 15, 2026 CVE-2026-74526 Not yet scored scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit Assigned by Linux
Aug 15, 2026 CVE-2026-74527 High 8.8 octeontx2-af: Block VFs from clobbering special CGX PKIND state Assigned by Linux
Aug 15, 2026 CVE-2026-74528 High 8.0 Bluetooth: hci_sync: hold conn in hci_past_sync() callback Assigned by Linux
Aug 15, 2026 CVE-2026-74529 High 7.8 Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback Assigned by Linux
Aug 15, 2026 CVE-2026-74530 High 8.8 Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback Assigned by Linux
Aug 15, 2026 CVE-2026-74531 High 8.8 Bluetooth: hci_conn: hold conn reference in abort_conn_sync() Assigned by Linux
Aug 15, 2026 CVE-2026-74532 Not yet scored Bluetooth: btintel: Validate length before parsing diagnostics TLV Assigned by Linux
Aug 15, 2026 CVE-2026-74533 High 8.8 Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero Assigned by Linux
Aug 15, 2026 CVE-2026-74534 High 8.8 Bluetooth: ISO: fix refcounting of iso_conn Assigned by Linux
Aug 15, 2026 CVE-2026-74535 High 8.8 Bluetooth: ISO: avoid deadlocks in iso_sock_timeout Assigned by Linux
Aug 15, 2026 CVE-2026-74536 Not yet scored Bluetooth: ISO: fix leaking sk after socket release Assigned by Linux
Aug 15, 2026 CVE-2026-74537 High 8.8 Bluetooth: ISO: hold sk properly in iso_conn_ready Assigned by Linux
Aug 15, 2026 CVE-2026-74538 High 8.8 Bluetooth: ISO: lock sk in iso_connect_ind Assigned by Linux
Aug 15, 2026 CVE-2026-74539 High 8.0 Bluetooth: ISO: lock sk in iso_sock_getname Assigned by Linux
Aug 15, 2026 CVE-2026-74540 High 8.8 Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp Assigned by Linux
Aug 15, 2026 CVE-2026-74541 High 8.8 Bluetooth: ISO: clear iso_data always when detaching conn from hcon Assigned by Linux
Aug 15, 2026 CVE-2026-74542 Not yet scored netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Assigned by Linux
Aug 15, 2026 CVE-2026-74543 Not yet scored net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() Assigned by Linux
Aug 15, 2026 CVE-2026-74544 High 7.8 net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds Assigned by Linux
Aug 15, 2026 CVE-2026-74545 Critical 9.8 rtase: fix double free of multi-frag skb on DMA map failure Assigned by Linux
Aug 15, 2026 CVE-2026-74546 Not yet scored hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read Assigned by Linux
Aug 15, 2026 CVE-2026-74547 Not yet scored hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread Assigned by Linux
Aug 15, 2026 CVE-2026-74548 High 7.8 forcedeth: fix UAF of txrx_stats in nv_remove Assigned by Linux
Aug 15, 2026 CVE-2026-74549 High 7.8 hwmon: (nct6775-core) Prevent access to unsupported weight registers Assigned by Linux
Aug 15, 2026 CVE-2026-74550 High 7.5 net: do not send ICMP/NDISC Redirects when peer allocation fails Assigned by Linux
Aug 15, 2026 CVE-2026-74551 High 7.8 hwmon: (nzxt-smart2) DMA-align output buffer Assigned by Linux
Aug 15, 2026 CVE-2026-74552 Not yet scored hwmon: (lm90) Only report alarms if driver is ready Assigned by Linux
Aug 15, 2026 CVE-2026-74553 Not yet scored hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Assigned by Linux
Aug 15, 2026 CVE-2026-74554 High 8.8 wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup() Assigned by Linux
Aug 15, 2026 CVE-2026-74555 Not yet scored scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race Assigned by Linux
Aug 15, 2026 CVE-2026-74556 Critical 9.8 scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer Assigned by Linux
Aug 15, 2026 CVE-2026-74557 High 7.5 scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer Assigned by Linux
Aug 15, 2026 CVE-2026-74558 Not yet scored xsk: reclaim invalid Tx descriptors in ZC batch path Assigned by Linux
Aug 15, 2026 CVE-2026-74559 Not yet scored xsk: drain continuation descs after overflow in xsk_build_skb() Assigned by Linux
Aug 15, 2026 CVE-2026-74560 Not yet scored xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx Assigned by Linux
Aug 15, 2026 CVE-2026-74561 High 8.8 nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush Assigned by Linux
Aug 15, 2026 CVE-2026-74562 High 8.8 nexthop: take nh->lock for f6i_list walks in replace check and notify Assigned by Linux
Aug 15, 2026 CVE-2026-74563 High 7.8 rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() Assigned by Linux
Aug 15, 2026 CVE-2026-74564 High 7.1 netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH Assigned by Linux
Aug 15, 2026 CVE-2026-74565 High 7.8 netfilter: nf_tables: make nft_object rhltable per table Assigned by Linux
Aug 15, 2026 CVE-2026-74566 Not yet scored keys: make keyring key-chunk byte order agree with keyring_diff_objects() Assigned by Linux
Aug 15, 2026 CVE-2026-74567 High 7.1 keys: fix out-of-bounds read in keyring_get_key_chunk() Assigned by Linux
Aug 15, 2026 CVE-2026-74568 Critical 9.3 KVM: arm64: vgic: Fix race between LPI release and re-registration Assigned by Linux
Aug 15, 2026 CVE-2026-74569 Critical 9.8 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Assigned by Linux
Aug 15, 2026
Previous Page 121 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
