CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:40 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2026-52943 High 7.8 net: skbuff: fix missing zerocopy reference in pskb_carve helpers Assigned by Linux
Jun 24, 2026 CVE-2026-52942 High 7.1 netfilter: nf_log: validate MAC header was set before dumping it Assigned by Linux
Jun 24, 2026 CVE-2026-52930 Medium 5.5 ipc/shm: serialize orphan cleanup with shm_nattch updates Assigned by Linux
Jun 24, 2026 CVE-2026-52929 High 7.5 sctp: stream: fully roll back denied add-stream state Assigned by Linux
Jun 24, 2026 CVE-2026-52928 Medium 5.5 af_unix: Reject SIOCATMARK on non-stream sockets Assigned by Linux
Jun 24, 2026 CVE-2026-52923 High 7.8 ipc: limit next_id allocation to the valid ID range Assigned by Linux
Jun 24, 2026 CVE-2026-52918 High 8.8 Bluetooth: serialize accept_q access Assigned by Linux
Jun 24, 2026 CVE-2026-52917 High 7.1 sctp: diag: reject stale associations in dump_one path Assigned by Linux
Jun 24, 2026 CVE-2026-52910 High 7.8 bpf: Free reuseport cBPF prog after RCU grace period. Assigned by Linux
Jun 19, 2026 CVE-2026-52909 High 7.8 ip6_vti: set netns_immutable on the fallback device. Assigned by Linux
Jun 19, 2026 CVE-2026-46331 High 7.8 net/sched: fix pedit partial COW leading to page cache corruption Assigned by Linux
Jun 16, 2026 CVE-2026-46323 High 7.8 net: gro: don't merge zcopy skbs Assigned by Linux
Jun 9, 2026 CVE-2026-46322 High 7.1 tun: free page on build_skb failure in tun_xdp_one() Assigned by Linux
Jun 9, 2026 CVE-2026-46321 High 7.1 tun: free page on short-frame rejection in tun_xdp_one() Assigned by Linux
Jun 9, 2026 CVE-2026-46320 High 7.4 tap: free page on error paths in tap_get_user_xdp() Assigned by Linux
Jun 9, 2026 CVE-2026-46307 High 8.3 wifi: ath5k: do not access array OOB Assigned by Linux
Jun 8, 2026 CVE-2026-46306 High 7.5 flow_dissector: do not dissect PPPoE PFC frames Assigned by Linux
Jun 8, 2026 CVE-2026-46304 High 7.5 nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free Assigned by Linux
Jun 8, 2026 CVE-2026-46303 High 8.2 isofs: validate Rock Ridge CE continuation extent against volume size Assigned by Linux
Jun 8, 2026 CVE-2026-46294 High 7.8 dm: fix a buffer overflow in ioctl processing Assigned by Linux
Jun 8, 2026 CVE-2026-46275 High 7.8 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Assigned by Linux
Jun 8, 2026 CVE-2026-46243 High 7.1 smb: client: reject userspace cifs.spnego descriptions Assigned by Linux
Jun 1, 2026 CVE-2026-46234 High 7.8 vsock: fix buffer size clamping order Assigned by Linux
May 28, 2026 CVE-2026-46227 High 7.8 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL Assigned by Linux
May 28, 2026 CVE-2026-46214 Medium 5.5 vsock/virtio: fix accept queue count leak on transport mismatch Assigned by Linux
May 28, 2026 CVE-2026-46209 High 7.8 drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() Assigned by Linux
May 28, 2026 CVE-2026-46196 Medium 5.5 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() Assigned by Linux
May 28, 2026 CVE-2026-46195 Critical 9.8 smb: client: validate dacloffset before building DACL pointers Assigned by Linux
May 28, 2026 CVE-2026-46193 Medium 5.5 xfrm: ah: account for ESN high bits in async callbacks Assigned by Linux
May 28, 2026 CVE-2026-46191 High 7.1 fbcon: Avoid OOB font access if console rotation fails Assigned by Linux
May 28, 2026 CVE-2026-46190 High 7.1 mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() Assigned by Linux
May 28, 2026 CVE-2026-46187 Medium 4.7 wifi: rsi: fix kthread lifetime race between self-exit and external-stop Assigned by Linux
May 28, 2026 CVE-2026-46185 Critical 9.1 smb/client: fix out-of-bounds read in symlink_data() Assigned by Linux
May 28, 2026 CVE-2026-46180 High 7.8 wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Assigned by Linux
May 28, 2026 CVE-2026-46177 High 7.5 ipmi: Add limits to event and receive message requests Assigned by Linux
May 28, 2026 CVE-2026-46173 High 7.8 exit: prevent preemption of oopsing TASK_DEAD task Assigned by Linux
May 28, 2026 CVE-2026-46172 Medium 5.5 ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() Assigned by Linux
May 28, 2026 CVE-2026-46168 Medium 5.5 mptcp: fix scheduling with atomic in timestamp sockopt Assigned by Linux
May 28, 2026 CVE-2026-46167 Medium 5.5 usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Assigned by Linux
May 28, 2026 CVE-2026-46165 Medium 5.5 openvswitch: vport: fix self-deadlock on release of tunnel ports Assigned by Linux
May 28, 2026 CVE-2026-46163 High 7.8 wifi: b43legacy: enforce bounds check on firmware key index in RX path Assigned by Linux
May 28, 2026 CVE-2026-46161 Medium 5.5 md/raid10: fix divide-by-zero in setup_geo() with zero far_copies Assigned by Linux
May 28, 2026 CVE-2026-46159 Medium 4.7 btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak Assigned by Linux
May 28, 2026 CVE-2026-46151 Medium 5.5 usb: usblp: fix heap leak in IEEE 1284 device ID via short response Assigned by Linux
May 28, 2026 CVE-2026-46150 High 7.1 fanotify: fix false positive on permission events Assigned by Linux
May 28, 2026 CVE-2026-46149 High 7.1 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() Assigned by Linux
May 28, 2026 CVE-2026-46146 Medium 5.5 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() Assigned by Linux
May 28, 2026 CVE-2026-46137 Critical 9.8 mptcp: pm: ADD_ADDR rtx: fix potential data-race Assigned by Linux
May 28, 2026 CVE-2026-46136 High 7.8 wifi: mt76: mt7921: fix a potential clc buffer length underflow Assigned by Linux
May 28, 2026 CVE-2026-46128 Medium 5.5 ipmi: Check event message buffer response for bad data Assigned by Linux
May 28, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
