CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_cn_4100 . Show all products
63 CVEs, showing 1 to 50 Page 1 of 2 Next CVE Severity Title Published CVE-2024-57924 Medium 5.5 fs: relax assertions on failure to encode file handles Assigned by Linux
Jan 19, 2025 CVE-2025-23143 Medium 5.5 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. Assigned by Linux
May 1, 2025 CVE-2025-2884 Medium 6.6 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation Assigned by certcc
Jun 10, 2025 CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Assigned by redhat
Jun 12, 2025 CVE-2025-38322 Medium 5.5 perf/x86/intel: Fix crash in icl_update_topdown_event() Assigned by Linux
Jul 10, 2025 CVE-2025-7425 High 7.8 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Assigned by redhat
Jul 10, 2025 CVE-2025-38491 High 8.2 mptcp: make fallback action and fallback decision atomic Assigned by Linux
Jul 28, 2025 CVE-2025-38502 High 7.8 bpf: Fix oob access in cgroup local storage Assigned by Linux
Aug 16, 2025 CVE-2025-38552 Critical 9.4 mptcp: plug races between subflow fail and subflow creation Assigned by Linux
Aug 16, 2025 CVE-2025-38614 High 7.8 eventpoll: Fix semi-unbounded recursion Assigned by Linux
Aug 19, 2025 CVE-2024-58240 Critical 9.8 tls: separate no-async decryption request handling from async Assigned by Linux
Aug 28, 2025 CVE-2025-38681 Medium 4.7 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Assigned by Linux
Sep 4, 2025 CVE-2025-38685 High 7.8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit Assigned by Linux
Sep 4, 2025 CVE-2025-38691 Not yet scored pNFS: Fix uninited ptr deref in block/scsi layout Assigned by Linux
Sep 4, 2025 CVE-2025-38701 Not yet scored ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr Assigned by Linux
Sep 4, 2025 CVE-2025-38702 Not yet scored fbdev: fix potential buffer overflow in do_register_framebuffer() Assigned by Linux
Sep 4, 2025 CVE-2025-38708 Critical 9.8 drbd: add missing kref_get in handle_write_conflicts Assigned by Linux
Sep 4, 2025 CVE-2025-38721 Medium 5.5 netfilter: ctnetlink: fix refcount leak on table dump Assigned by Linux
Sep 4, 2025 CVE-2025-38724 Critical 9.8 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Assigned by Linux
Sep 4, 2025 CVE-2025-38725 Medium 5.5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus Assigned by Linux
Sep 4, 2025 CVE-2025-38727 Medium 5.5 netlink: avoid infinite retry looping in netlink_unicast() Assigned by Linux
Sep 4, 2025 CVE-2025-38728 Critical 9.1 smb3: fix for slab out of bounds on mount to ksmbd Assigned by Linux
Sep 4, 2025 CVE-2025-38732 Medium 5.5 netfilter: nf_reject: don't leak dst refcount for loopback packets Assigned by Linux
Sep 5, 2025 CVE-2025-38735 High 7.8 gve: prevent ethtool ops after shutdown Assigned by Linux
Sep 5, 2025 CVE-2025-38736 High 7.1 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Assigned by Linux
Sep 5, 2025 CVE-2025-39673 Critical 9.8 ppp: fix race conditions in ppp_fill_forward_path Assigned by Linux
Sep 5, 2025 CVE-2025-39681 Medium 5.5 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Assigned by Linux
Sep 5, 2025 CVE-2025-39682 Known exploited
Critical 9.8 tls: fix handling of zero-length records on the rx_list Assigned by Linux
Sep 5, 2025 CVE-2025-39683 High 7.8 tracing: Limit access to parser->buffer when trace_get_user failed Assigned by Linux
Sep 5, 2025 CVE-2025-39689 High 7.8 ftrace: Also allocate and copy hash for reading of filter files Assigned by Linux
Sep 5, 2025 CVE-2025-39691 High 7.8 fs/buffer: fix use-after-free when call bh_read() helper Assigned by Linux
Sep 5, 2025 CVE-2025-39697 High 7.8 NFS: Fix a race when updating an existing write Assigned by Linux
Sep 5, 2025 CVE-2025-39702 Critical 9.8 ipv6: sr: Fix MAC comparison to be constant-time Assigned by Linux
Sep 5, 2025 CVE-2025-39703 Critical 9.8 net, hsr: reject HSR frame if skb can't hold tag Assigned by Linux
Sep 5, 2025 CVE-2025-39718 High 8.4 vsock/virtio: Validate length in packet header before skb_put() Assigned by Linux
Sep 5, 2025 CVE-2025-39724 Not yet scored serial: 8250: fix panic due to PSLVERR Assigned by Linux
Sep 5, 2025 CVE-2025-40300 Medium 5.5 x86/vmscape: Add conditional IBPB mitigation Assigned by Linux
Sep 11, 2025 CVE-2025-39738 High 7.3 btrfs: do not allow relocation of partially dropped subvolumes Assigned by Linux
Sep 11, 2025 CVE-2025-39756 Medium 5.5 fs: Prevent file descriptor table allocations exceeding INT_MAX Assigned by Linux
Sep 11, 2025 CVE-2025-39770 High 7.5 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM Assigned by Linux
Sep 11, 2025 CVE-2025-39773 Medium 5.5 net: bridge: fix soft lockup in br_multicast_query_expired() Assigned by Linux
Sep 11, 2025 CVE-2025-39776 High 7.0 mm/debug_vm_pgtable: clear page table entries at destroy_args() Assigned by Linux
Sep 11, 2025 CVE-2025-39782 Medium 5.5 jbd2: prevent softlockup in jbd2_log_do_checkpoint() Assigned by Linux
Sep 11, 2025 CVE-2025-39783 Not yet scored PCI: endpoint: Fix configfs group list head handling Assigned by Linux
Sep 11, 2025 CVE-2025-39787 High 7.8 soc: qcom: mdt_loader: Ensure we don't read past the ELF header Assigned by Linux
Sep 11, 2025 CVE-2025-39790 High 8.4 bus: mhi: host: Detect events pointing to unexpected TREs Assigned by Linux
Sep 11, 2025 CVE-2025-39795 Medium 5.5 block: avoid possible overflow for chunk_sectors check in blk_stack_limits() Assigned by Linux
Sep 12, 2025 CVE-2025-39798 High 7.3 NFS: Fix the setting of capabilities when automounting a new filesystem Assigned by Linux
Sep 12, 2025 CVE-2025-39826 High 8.8 net: rose: convert 'use' field to refcount_t Assigned by Linux
Sep 16, 2025 CVE-2025-39827 High 8.8 net: rose: include node references in rose_neigh refcount Assigned by Linux
Sep 16, 2025
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
