CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:40 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product freebsd:freebsd . Show all products
87 CVEs, showing 51 to 87 Previous Page 2 of 2 CVE Severity Title Published CVE-2026-49422 High 8.4 Use-after-free in TCP RACK stack option handler Assigned by freebsd
Aug 19, 2026 CVE-2026-49427 High 8.8 posixshm: largepage shared memory objects not explicitly wired Assigned by freebsd
Aug 19, 2026 CVE-2026-49428 High 8.4 posixshm: system calls can incorrectly free memory of largepage objects Assigned by freebsd
Aug 19, 2026 CVE-2026-49426 Low 3.3 Incorrect audit records for ptrace(2) syscall requests Assigned by freebsd
Aug 19, 2026 CVE-2026-49423 Low 3.3 Remote DOS via uninitialized memory access in KTLS receive Assigned by freebsd
Aug 19, 2026 CVE-2026-49424 Medium 5.5 Kernel stack disclosure in Linux compatibility layer Assigned by freebsd
Aug 19, 2026 CVE-2026-49425 Medium 5.5 Kernel stack disclosure in 32-bit compatibility support Assigned by freebsd
Aug 19, 2026 CVE-2026-58081 Critical 9.8 Heap based buffer overflow in iconv(3) Assigned by freebsd
Aug 19, 2026 CVE-2026-58082 Critical 9.8 Stack based buffer overflow in iconv(3) Assigned by freebsd
Aug 19, 2026 CVE-2026-58083 High 8.4 Use-after-free in kqueue copy-on-fork Assigned by freebsd
Aug 19, 2026 CVE-2026-58084 Medium 5.5 Kernel stack disclosure via timer_settime(2) Assigned by freebsd
Aug 19, 2026 CVE-2026-58085 High 7.5 Missing MAC validation in wg(4) packet decryption Assigned by freebsd
Aug 19, 2026 CVE-2026-58086 High 8.1 ktrace(2) privilege incorrectly validated in jails Assigned by freebsd
Aug 19, 2026 CVE-2026-58087 High 7.8 Heap out-of-bounds access in semctl(2) Assigned by freebsd
Aug 19, 2026 CVE-2026-58088 High 7.4 Race condition in ELF core dump segment counting Assigned by freebsd
Aug 19, 2026 CVE-2026-58089 High 7.8 hwpmc fails to detach PMCs during exec credential transitions Assigned by freebsd
Aug 26, 2026 CVE-2026-58090 High 7.8 Use-after-free in unix SOCK_STREAM message handling Assigned by freebsd
Aug 26, 2026 CVE-2026-58091 High 7.8 Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl Assigned by freebsd
Aug 26, 2026 CVE-2026-58092 High 8.1 Unauthorized credential switching Assigned by freebsd
Aug 26, 2026 CVE-2026-58095 High 8.8 ppp(8): incorrect length calculation in mp_Enddisc() Assigned by freebsd
Aug 26, 2026 CVE-2026-58096 High 8.8 ppp(8): missing length validation in LcpDecodeConfig() Assigned by freebsd
Aug 26, 2026 CVE-2026-58097 High 7.8 ppp(8): missing length validation in mp_SetEnddisc() Assigned by freebsd
Aug 26, 2026 CVE-2026-58093 High 7.0 Kernel use-after-free via tty ioctls Assigned by freebsd
Aug 26, 2026 CVE-2026-58094 High 7.8 TOCTOU race in POSIX shared memory large page configuration Assigned by freebsd
Aug 26, 2026 CVE-2026-58098 High 8.4 Heap out-of-bounds access in semop(2) Assigned by freebsd
Oct 15, 2026 CVE-2026-58099 Not yet scored Memory safety bugs in kqueue copy-on-fork implementation Assigned by freebsd
Oct 15, 2026 CVE-2026-58100 Not yet scored Memory safety bugs in kqueue copy-on-fork implementation Assigned by freebsd
Oct 15, 2026 CVE-2026-101304 Not yet scored Multiple jail filesystem root escapes Assigned by freebsd
Oct 15, 2026 CVE-2026-101305 High 8.8 Multiple jail filesystem root escapes Assigned by freebsd
Oct 15, 2026 CVE-2026-101306 Critical 9.8 Multiple jail filesystem root escapes Assigned by freebsd
Oct 15, 2026 CVE-2026-101302 Medium 6.5 Remote DoS via receive-side kernel TLS Assigned by freebsd
Oct 15, 2026 CVE-2026-101303 High 7.5 IPv6 UDP sendto(2) bypasses jail loopback restriction Assigned by freebsd
Oct 15, 2026 CVE-2026-101307 High 8.2 Remotely triggerable buffer overflow in tcp_rack Assigned by freebsd
Oct 15, 2026 CVE-2026-101308 Medium 5.5 TOCTOU race between sound(4) buffer resizing and mmap Assigned by freebsd
Oct 15, 2026 CVE-2026-101309 High 7.0 Multiple vulnerabilities in bhyve device models Assigned by freebsd
Oct 15, 2026 CVE-2026-101310 High 7.0 Multiple vulnerabilities in bhyve device models Assigned by freebsd
Oct 15, 2026 CVE-2026-101311 High 7.0 Multiple vulnerabilities in bhyve device models Assigned by freebsd
Oct 15, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
