CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 07:30 UTC)

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,443; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem. Show all products

952 CVEs, showing 1 to 50Page 1 of 20Next

CVE	Severity	Title	Published
CVE-2020-12762	High 7.8	json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Assigned by mitre	May 9, 2020
CVE-2021-38202	High 7.5	fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is bei… Assigned by mitre	Aug 8, 2021
CVE-2021-44879	Medium 5.5	In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. Assigned by mitre	Feb 13, 2022
CVE-2021-4090	High 7.1	An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Assigned by redhat	Feb 18, 2022
CVE-2022-1015	Medium 6.6	A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. Assigned by redhat	Apr 29, 2022
CVE-2022-1292	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	May 3, 2022
CVE-2022-1343	Medium 5.3	OCSP_basic_verify may incorrectly verify the response signing certificate Assigned by openssl	May 3, 2022
CVE-2022-1434	Medium 5.9	Incorrect MAC key used in the RC4-MD5 ciphersuite Assigned by openssl	May 3, 2022
CVE-2022-1473	High 7.5	Resource leakage when decoding certificates and keys Assigned by openssl	May 3, 2022
CVE-2022-1679	High 7.8	A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. Assigned by redhat	May 16, 2022
CVE-2022-1882	High 7.8	A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. Assigned by redhat	May 26, 2022
CVE-2022-1462	Medium 6.3	An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. Assigned by redhat	May 31, 2022
CVE-2022-32250	High 7.8	net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check l… Assigned by mitre	Jun 2, 2022
CVE-2022-32296	Low 3.3	The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. Assigned by mitre	Jun 5, 2022
CVE-2022-21123	Medium 5.5	Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-21125	Medium 5.5	Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-21166	Medium 5.5	Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-2068	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	Jun 21, 2022
CVE-2022-2078	Medium 5.5	A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of s… Assigned by redhat	Jun 30, 2022
CVE-2022-1852	Medium 5.5	A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. Assigned by redhat	Jun 30, 2022
CVE-2022-2274	Critical 9.8	RSA implementation bug in AVX512IFMA instructions Assigned by openssl	Jul 1, 2022
CVE-2022-34918	High 7.8	An issue was discovered in the Linux kernel through 5.18.9. Assigned by mitre	Jul 4, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2021-33655	Medium 6.7	When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. Assigned by openEuler	Jul 18, 2022
CVE-2022-2327	High 7.5	Use-after-free in io_uring ad work_flags in Linux Kernel Assigned by Google	Jul 22, 2022
CVE-2022-36946	High 7.5	nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one… Assigned by mitre	Jul 27, 2022
CVE-2022-36879	Medium 5.5	An issue was discovered in the Linux kernel through 5.18.14. Assigned by mitre	Jul 27, 2022
CVE-2022-36123	High 7.8	The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). Assigned by mitre	Jul 29, 2022
CVE-2022-1012	High 8.2	A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. Assigned by redhat	Aug 5, 2022
CVE-2022-2503	Medium 6.9	Linux Kernel LoadPin bypass via dm-verity table reload Assigned by Google	Aug 12, 2022
CVE-2022-26373	Medium 5.5	Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Assigned by intel	Aug 18, 2022
CVE-2021-3759	Medium 5.5	A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. Assigned by redhat	Aug 23, 2022
CVE-2022-2978	High 7.8	A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. Assigned by redhat	Aug 24, 2022
CVE-2021-4037	Medium 4.4	Kernel: security regression for cve-2018-13405 Assigned by redhat	Aug 24, 2022
CVE-2022-2959	High 7.0	A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). Assigned by redhat	Aug 25, 2022
CVE-2022-0171	Medium 5.5	A flaw was found in the Linux kernel. Assigned by redhat	Aug 26, 2022
CVE-2022-1184	Medium 5.5	A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Assigned by redhat	Aug 29, 2022
CVE-2022-3028	High 7.0	A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. Assigned by redhat	Aug 31, 2022
CVE-2022-2153	Medium 5.5	A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. Assigned by redhat	Aug 31, 2022
CVE-2022-2663	Medium 5.3	An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. Assigned by redhat	Sep 1, 2022
CVE-2022-39188	Medium 4.7	An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Assigned by mitre	Sep 2, 2022
CVE-2022-39190	Medium 5.5	An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. Assigned by mitre	Sep 2, 2022
CVE-2022-40307	Medium 4.7	An issue was discovered in the Linux kernel through 5.19.8. Assigned by mitre	Sep 9, 2022
CVE-2022-3169	Medium 5.5	A flaw was found in the Linux kernel. Assigned by redhat	Sep 9, 2022
CVE-2022-2905	Medium 5.5	An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. Assigned by redhat	Sep 9, 2022
CVE-2022-36280	Medium 6.3	There is an out-of-bounds write vulnerability in vmwgfx driver Assigned by Anolis	Sep 9, 2022
CVE-2022-38096	Medium 6.3	There is a NULL pointer vulnerability in vmwgfx driver Assigned by Anolis	Sep 9, 2022
CVE-2022-40768	Medium 5.5	drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case. Assigned by mitre	Sep 18, 2022
CVE-2022-41222	High 7.0	mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. Assigned by mitre	Sep 21, 2022
CVE-2022-41218	Medium 5.5	In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. Assigned by mitre	Sep 21, 2022

Page 1 of 20Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.