CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 18:50 UTC )
This week: 4,588 CVEs published, 310 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,588 Show in the list Critical, last 7 days 310 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2026-46064 High 7.1 ibmasm: fix heap over-read in ibmasm_send_i2o_message() Assigned by Linux
May 27, 2026 CVE-2026-46065 High 7.8 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Assigned by Linux
May 27, 2026 CVE-2026-46066 Medium 5.5 ceph: fix num_ops off-by-one when crypto allocation fails Assigned by Linux
May 27, 2026 CVE-2026-46067 High 7.1 mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp Assigned by Linux
May 27, 2026 CVE-2026-46068 High 7.8 crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx Assigned by Linux
May 27, 2026 CVE-2026-46069 High 7.8 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() Assigned by Linux
May 27, 2026 CVE-2026-46070 High 7.1 md/raid5: validate payload size before accessing journal metadata Assigned by Linux
May 27, 2026 CVE-2026-46071 Medium 5.5 KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 Assigned by Linux
May 27, 2026 CVE-2026-46072 Medium 5.5 ntfs3: add buffer boundary checks to run_unpack() Assigned by Linux
May 27, 2026 CVE-2026-46073 Medium 5.5 hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt Assigned by Linux
May 27, 2026 CVE-2026-46074 Medium 5.5 spi: ch341: fix memory leaks on probe failures Assigned by Linux
May 27, 2026 CVE-2026-46075 High 7.8 crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Assigned by Linux
May 27, 2026 CVE-2026-46076 High 7.9 KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 Assigned by Linux
May 27, 2026 CVE-2026-46077 Medium 5.5 crypto: atmel-tdes - fix DMA sync direction Assigned by Linux
May 27, 2026 CVE-2026-46078 High 7.1 erofs: fix the out-of-bounds nameoff handling for trailing dirents Assigned by Linux
May 27, 2026 CVE-2026-46079 Medium 5.5 rbd: fix null-ptr-deref when device_add_disk() fails Assigned by Linux
May 27, 2026 CVE-2026-46080 Medium 5.5 ocfs2: split transactions in dio completion to avoid credit exhaustion Assigned by Linux
May 27, 2026 CVE-2026-46081 High 7.8 crypto: acomp - fix wrong pointer stored by acomp_save_req() Assigned by Linux
May 27, 2026 CVE-2026-46082 Medium 5.5 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 Assigned by Linux
May 27, 2026 CVE-2026-46083 Medium 5.5 spi: fix resource leaks on device setup failure Assigned by Linux
May 27, 2026 CVE-2026-46084 High 7.8 RDMA/mana_ib: Disable RX steering on RSS QP destroy Assigned by Linux
May 27, 2026 CVE-2026-46085 High 7.5 rxrpc: Fix rxkad crypto unalignment handling Assigned by Linux
May 27, 2026 CVE-2026-46086 Medium 5.5 net: bridge: use a stable FDB dst snapshot in RCU readers Assigned by Linux
May 27, 2026 CVE-2026-46087 Medium 5.5 mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() Assigned by Linux
May 27, 2026 CVE-2026-46088 Medium 5.5 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() Assigned by Linux
May 27, 2026 CVE-2026-46089 Medium 5.5 zram: do not forget to endio for partial discard requests Assigned by Linux
May 27, 2026 CVE-2026-46090 High 7.8 ALSA: aloop: Fix peer runtime UAF during format-change stop Assigned by Linux
May 27, 2026 CVE-2026-46091 Medium 5.5 media: rc: igorplugusb: heed coherency rules Assigned by Linux
May 27, 2026 CVE-2026-46092 Medium 5.5 wifi: rtw88: check for PCI upstream bridge existence Assigned by Linux
May 27, 2026 CVE-2026-46093 High 7.8 mm/vmalloc: take vmap_purge_lock in shrinker Assigned by Linux
May 27, 2026 CVE-2026-46094 High 7.1 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access Assigned by Linux
May 27, 2026 CVE-2026-46095 Medium 5.5 md/md-llbitmap: raise barrier before state machine transition Assigned by Linux
May 27, 2026 CVE-2026-46096 Medium 5.5 tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() Assigned by Linux
May 27, 2026 CVE-2026-46097 High 7.8 Input: edt-ft5x06 - fix use-after-free in debugfs teardown Assigned by Linux
May 27, 2026 CVE-2026-46098 Medium 5.5 net: caif: clear client service pointer on teardown Assigned by Linux
May 27, 2026 CVE-2026-46099 High 8.1 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels Assigned by Linux
May 27, 2026 CVE-2026-46100 High 7.8 fs: afs: revert mmap_prepare() change Assigned by Linux
May 27, 2026 CVE-2026-46101 Medium 5.5 netfilter: reject zero shift in nft_bitwise Assigned by Linux
May 27, 2026 CVE-2026-46102 High 7.5 net: strparser: fix skb_head leak in strp_abort_strp() Assigned by Linux
May 27, 2026 CVE-2026-46103 Medium 5.5 can: ucan: fix devres lifetime Assigned by Linux
May 27, 2026 CVE-2026-46104 Medium 5.5 selinux: use sk blob accessor in socket permission helpers Assigned by Linux
May 28, 2026 CVE-2026-46105 High 7.8 scsi: mpt3sas: Limit NVMe request size to 2 MiB Assigned by Linux
May 28, 2026 CVE-2026-46106 Medium 5.5 eventfs: Hold eventfs_mutex and SRCU when remount walks events Assigned by Linux
May 28, 2026 CVE-2026-46107 High 7.8 dm-thin: fix metadata refcount underflow Assigned by Linux
May 28, 2026 CVE-2026-46108 Medium 5.5 ipmi:si: Return state to normal if message allocation fails Assigned by Linux
May 28, 2026 CVE-2026-46109 Medium 5.5 usb: ulpi: fix memory leak on ulpi_register() error paths Assigned by Linux
May 28, 2026 CVE-2026-46110 High 7.5 net: stmmac: Prevent NULL deref when RX memory exhausted Assigned by Linux
May 28, 2026 CVE-2026-46111 High 7.8 Bluetooth: hci_conn: fix potential UAF in create_big_sync Assigned by Linux
May 28, 2026 CVE-2026-46112 High 7.8 RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Assigned by Linux
May 28, 2026 CVE-2026-46113 High 8.8 KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Assigned by Linux
May 28, 2026
Previous Page 68 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
