CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 01:00 UTC )
This week: 4,940 CVEs published, 326 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,940 Show in the list Critical, last 7 days 326 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-53389 High 7.8 net/tcp-ao: fix use-after-free of key in del_async path Assigned by Linux
Jul 19, 2026 CVE-2026-53390 High 8.1 ksmbd: fix out-of-bounds read in smb_check_perm_dacl() Assigned by Linux
Jul 19, 2026 CVE-2026-53391 High 7.5 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr Assigned by Linux
Jul 19, 2026 CVE-2026-53392 High 7.5 NFSv4/flexfiles: reject zero filehandle version count Assigned by Linux
Jul 19, 2026 CVE-2026-53393 Medium 5.5 nfsd: reset write verifier on deferred writeback errors Assigned by Linux
Jul 19, 2026 CVE-2026-53394 High 7.5 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race Assigned by Linux
Jul 19, 2026 CVE-2026-53395 High 7.5 nfsd: fix dead ACL conflict guard in nfsd4_create Assigned by Linux
Jul 19, 2026 CVE-2026-53396 High 7.1 nfsd: fix posix_acl leak and ignored error in nfsd4_create_file Assigned by Linux
Jul 19, 2026 CVE-2026-53397 High 7.5 nfsd: fix posix_acl leak on SETACL decode failure Assigned by Linux
Jul 19, 2026 CVE-2026-53398 Critical 9.8 NFSD: Fix SECINFO_NO_NAME decode error cleanup Assigned by Linux
Jul 19, 2026 CVE-2026-53399 Critical 9.8 nfsd: release layout stid on setlease failure Assigned by Linux
Jul 19, 2026 CVE-2026-53400 High 7.8 i2c: core: fix adapter registration race Assigned by Linux
Jul 19, 2026 CVE-2026-53401 High 7.8 fbdev: omap2: fix use-after-free in omapfb_mmap Assigned by Linux
Jul 19, 2026 CVE-2026-53402 High 7.1 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Assigned by Linux
Jul 19, 2026 CVE-2026-53403 Medium 5.5 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var Assigned by Linux
Jul 19, 2026 CVE-2026-63793 High 7.8 ntfs: serialize volume label accesses Assigned by Linux
Jul 19, 2026 CVE-2026-63794 High 7.8 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path Assigned by Linux
Jul 19, 2026 CVE-2026-63795 Critical 10.0 9p: avoid putting oldfid in p9_client_walk() error path Assigned by Linux
Jul 19, 2026 CVE-2026-63796 High 8.8 ocfs2: reject oversized group bitmap descriptors Assigned by Linux
Jul 19, 2026 CVE-2026-63797 High 8.4 rpmsg: char: Fix use-after-free on probe error path Assigned by Linux
Jul 19, 2026 CVE-2026-63798 Medium 5.5 irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove Assigned by Linux
Jul 19, 2026 CVE-2026-63799 High 7.8 sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path Assigned by Linux
Jul 19, 2026 CVE-2026-63800 Critical 9.8 pNFS: Fix use-after-free in pnfs_update_layout() Assigned by Linux
Jul 19, 2026 CVE-2026-63801 High 8.8 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done Assigned by Linux
Jul 19, 2026 CVE-2026-63802 High 7.8 blk-cgroup: fix UAF in __blkcg_rstat_flush() Assigned by Linux
Jul 19, 2026 CVE-2026-63803 High 7.8 hdlc_ppp: sync per-proto timers before freeing hdlc state Assigned by Linux
Jul 19, 2026 CVE-2026-63804 High 7.8 gfs2: fix use-after-free in gfs2_qd_dealloc Assigned by Linux
Jul 19, 2026 CVE-2026-63805 High 7.8 crypto: nx - fix nx_crypto_ctx_exit argument Assigned by Linux
Jul 19, 2026 CVE-2026-63806 High 7.1 KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Assigned by Linux
Jul 19, 2026 CVE-2026-63807 High 8.8 KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Assigned by Linux
Jul 19, 2026 CVE-2026-63808 Critical 9.8 exfat: fix potential use-after-free in exfat_find_dir_entry() Assigned by Linux
Jul 19, 2026 CVE-2026-63809 High 7.8 bpf: use kvfree() for replaced sysctl write buffer Assigned by Linux
Jul 19, 2026 CVE-2026-63810 Not yet scored block: Avoid mounting the bdev pseudo-filesystem in userspace Assigned by Linux
Jul 19, 2026 CVE-2026-63811 Not yet scored f2fs: read COW data with the original inode during atomic write Assigned by Linux
Jul 19, 2026 CVE-2026-63812 High 7.8 f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() Assigned by Linux
Jul 19, 2026 CVE-2026-63813 High 7.8 Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" Assigned by Linux
Jul 19, 2026 CVE-2026-63814 High 7.8 f2fs: validate ACL entry sizes in f2fs_acl_from_disk() Assigned by Linux
Jul 19, 2026 CVE-2026-63815 High 8.4 f2fs: bound i_inline_xattr_size for non-inline-xattr inodes Assigned by Linux
Jul 19, 2026 CVE-2026-63816 High 7.8 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode Assigned by Linux
Jul 19, 2026 CVE-2026-63817 High 7.8 f2fs: validate compress cache inode only when enabled Assigned by Linux
Jul 19, 2026 CVE-2026-63818 High 8.4 f2fs: validate orphan inode entry count Assigned by Linux
Jul 19, 2026 CVE-2026-63819 High 7.8 f2fs: fix to do sanity check on f2fs_get_node_folio_ra() Assigned by Linux
Jul 19, 2026 CVE-2026-63820 Not yet scored f2fs: fix missing read bio submission on large folio error Assigned by Linux
Jul 19, 2026 CVE-2026-63821 Not yet scored wifi: rtw88: usb: fix memory leaks on USB write failures Assigned by Linux
Jul 19, 2026 CVE-2026-63822 Not yet scored wifi: ath11k: fix warning when unbinding Assigned by Linux
Jul 19, 2026 CVE-2026-63823 High 7.8 keys: Pin request_key_auth payload in instantiate paths Assigned by Linux
Jul 19, 2026 CVE-2026-63824 High 7.8 KEYS: fix overflow in keyctl_pkey_params_get_2() Assigned by Linux
Jul 19, 2026 CVE-2026-63825 Critical 9.8 gcov: use atomic counter updates to fix concurrent access crashes Assigned by Linux
Jul 19, 2026 CVE-2026-63826 Not yet scored fbdev: fix use-after-free in store_modes() Assigned by Linux
Jul 19, 2026 CVE-2026-63827 High 7.8 apparmor: fix use-after-free in rawdata dedup loop Assigned by Linux
Jul 19, 2026
Previous Page 51 of 155 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
