CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 11:40 UTC )
This week: 4,624 CVEs published, 309 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,624 Show in the list Critical, last 7 days 309 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64470 Not yet scored Bluetooth: btusb: fix use-after-free on marvell probe failure Assigned by Linux
Jul 25, 2026 CVE-2026-64471 Not yet scored Bluetooth: btusb: fix use-after-free on registration failure Assigned by Linux
Jul 25, 2026 CVE-2026-64472 Not yet scored vfio/mlx5: Fix racy bitfields and tighten struct layout Assigned by Linux
Jul 25, 2026 CVE-2026-64473 Not yet scored vfio: Remove device debugfs before releasing devres Assigned by Linux
Jul 25, 2026 CVE-2026-64474 Not yet scored vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc Assigned by Linux
Jul 25, 2026 CVE-2026-64475 High 8.8 vfio/pci: Release the VGA arbiter client on register_device() failure Assigned by Linux
Jul 25, 2026 CVE-2026-64476 Not yet scored vfio/pci: Latch disable_idle_d3 per device Assigned by Linux
Jul 25, 2026 CVE-2026-64477 Not yet scored x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled Assigned by Linux
Jul 25, 2026 CVE-2026-64478 Not yet scored ALSA: usb-audio: avoid kobject path lookup in DualSense match Assigned by Linux
Jul 25, 2026 CVE-2026-64479 Not yet scored ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() Assigned by Linux
Jul 25, 2026 CVE-2026-64480 Not yet scored ALSA: ice1712: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64481 High 7.8 ALSA: hda/cs35l41: Fix firmware load work teardown Assigned by Linux
Jul 25, 2026 CVE-2026-64482 Not yet scored ALSA: gus: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64483 Not yet scored ALSA: firewire: isight: bound the sample count to the packet payload Assigned by Linux
Jul 25, 2026 CVE-2026-64484 Not yet scored ALSA: es1938: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64485 High 7.8 ALSA: compress: Fix task creation error unwind Assigned by Linux
Jul 25, 2026 CVE-2026-64486 Not yet scored ALSA: cmipci: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64487 Not yet scored ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Assigned by Linux
Jul 25, 2026 CVE-2026-64488 Not yet scored ALSA: aoa: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64489 Not yet scored ALSA: ymfpci: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64490 High 8.4 ALSA: virtio: Validate control metadata from the device Assigned by Linux
Jul 25, 2026 CVE-2026-64491 Not yet scored ALSA: usx2y: us144mkii: fix work UAF on disconnect Assigned by Linux
Jul 25, 2026 CVE-2026-64492 Not yet scored iio: temperature: tmp006: use devm_iio_trigger_register Assigned by Linux
Jul 25, 2026 CVE-2026-64493 Not yet scored iio: pressure: mpl115: fix runtime PM leak on read error Assigned by Linux
Jul 25, 2026 CVE-2026-64494 Not yet scored iio: light: gp2ap002: fix runtime PM leak on read error Assigned by Linux
Jul 25, 2026 CVE-2026-64495 Not yet scored iio: gyro: bmg160: bail out when bandwidth/filter is not in table Assigned by Linux
Jul 25, 2026 CVE-2026-64496 High 7.1 iio: event: Fix event FIFO reset race Assigned by Linux
Jul 25, 2026 CVE-2026-64497 Not yet scored iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Assigned by Linux
Jul 25, 2026 CVE-2026-64498 Not yet scored iio: buffer: hw-consumer: free scan_mask on buffer release Assigned by Linux
Jul 25, 2026 CVE-2026-64499 Not yet scored iio: adc: ti-ads1119: fix PM reference leak in buffer preenable Assigned by Linux
Jul 25, 2026 CVE-2026-64500 Not yet scored iio: adc: lpc32xx: Initialize completion before requesting IRQ Assigned by Linux
Jul 25, 2026 CVE-2026-64501 High 7.1 iio: adc: ad_sigma_delta: fix CS held asserted and state leaks Assigned by Linux
Jul 25, 2026 CVE-2026-64502 High 7.8 iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices Assigned by Linux
Jul 25, 2026 CVE-2026-64503 Not yet scored iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Assigned by Linux
Jul 25, 2026 CVE-2026-64504 Not yet scored iio: accel: bmc150: clamp the device-reported FIFO frame count Assigned by Linux
Jul 25, 2026 CVE-2026-64505 Not yet scored usb: gadget: function: rndis: add length check for header Assigned by Linux
Jul 25, 2026 CVE-2026-64506 Not yet scored wifi: rtw89: correct drop logic for malformed AMPDU frames Assigned by Linux
Jul 25, 2026 CVE-2026-64507 Not yet scored x86/bugs: Enable IBPB flush on BPF JIT allocation Assigned by Linux
Jul 25, 2026 CVE-2026-64508 Not yet scored bpf: Support for hardening against JIT spraying Assigned by Linux
Jul 25, 2026 CVE-2026-64509 Not yet scored rust: block: fix GenDisk cleanup paths Assigned by Linux
Jul 25, 2026 CVE-2026-64510 High 7.0 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Assigned by Linux
Jul 25, 2026 CVE-2026-64511 Not yet scored ACPI: NFIT: core: Fix possible NULL pointer dereference Assigned by Linux
Jul 25, 2026 CVE-2026-64512 Not yet scored ACPI: CPPC: Suppress UBSAN warning caused by field misuse Assigned by Linux
Jul 25, 2026 CVE-2026-64513 Not yet scored KVM: x86: Unconditionally recompute CR8 intercept on PPR update Assigned by Linux
Jul 25, 2026 CVE-2026-64514 Not yet scored userfaultfd: gate must_wait writability check on pte_present() Assigned by Linux
Jul 25, 2026 CVE-2026-64515 High 8.3 wifi: mac80211: fix MLE defragmentation Assigned by Linux
Jul 25, 2026 CVE-2026-64516 High 8.8 drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets Assigned by Linux
Jul 25, 2026 CVE-2026-64517 Not yet scored drm/xe/gsc: Fix double-free of managed BO in error path Assigned by Linux
Jul 25, 2026 CVE-2026-64518 Not yet scored tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). Assigned by Linux
Jul 25, 2026 CVE-2026-64519 Not yet scored NFSD: Fix infinite loop in layout state revocation Assigned by Linux
Jul 25, 2026
Previous Page 88 of 179 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
