CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 04:30 UTC )
This week: 5,206 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,206 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-93807 Not yet scored wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers Assigned by Linux
Sep 24, 2026 CVE-2026-93806 High 8.8 wifi: cfg80211: validate assoc response length before status and IE access Assigned by Linux
Sep 24, 2026 CVE-2026-93805 Not yet scored wifi: cfg80211: validate rx/tx MLME callback frame lengths before access Assigned by Linux
Sep 24, 2026 CVE-2026-93804 Not yet scored wifi: mac80211: ibss: wait for in-flight TX on disconnect Assigned by Linux
Sep 24, 2026 CVE-2026-93803 Not yet scored wifi: libipw: fix key index receive bound checks Assigned by Linux
Sep 24, 2026 CVE-2026-93802 Not yet scored wifi: rsi: validate beacon length before fixed buffer copy Assigned by Linux
Sep 24, 2026 CVE-2026-93801 High 7.0 smb/client: zero-initialize stack-allocated cifs_open_info_data Assigned by Linux
Sep 24, 2026 CVE-2026-93800 Not yet scored btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() Assigned by Linux
Sep 24, 2026 CVE-2026-93799 High 8.8 wifi: iwlwifi: mvm: validate sta_id in BA window status notif Assigned by Linux
Sep 24, 2026 CVE-2026-93798 High 7.8 btrfs: fix reloc root cleanup in merge_reloc_roots() Assigned by Linux
Sep 24, 2026 CVE-2026-93797 Not yet scored wifi: iwlwifi: mvm: fix an off-by-1 boundary check Assigned by Linux
Sep 24, 2026 CVE-2026-93796 High 7.0 wifi: iwlwifi: pcie: null RX pointers after free Assigned by Linux
Sep 24, 2026 CVE-2026-93795 Not yet scored blk-cgroup: fix leaks and online flag on radix_tree_insert failure Assigned by Linux
Sep 24, 2026 CVE-2026-93794 Not yet scored smb/client: flush dirty data before punching a hole Assigned by Linux
Sep 24, 2026 CVE-2026-93793 High 8.8 wifi: iwlwifi: mvm: validate TX_CMD response layout Assigned by Linux
Sep 24, 2026 CVE-2026-93792 Not yet scored wifi: iwlwifi: mvm: fix a possible underflow Assigned by Linux
Sep 24, 2026 CVE-2026-93791 Not yet scored wifi: iwlwifi: mvm: add a check on the tid coming from the firmware Assigned by Linux
Sep 24, 2026 CVE-2026-93790 High 8.8 wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif Assigned by Linux
Sep 24, 2026 CVE-2026-93789 Not yet scored wifi: iwlwifi: bound aligned TLV advance in FW parser Assigned by Linux
Sep 24, 2026 CVE-2026-93788 Not yet scored wifi: iwlwifi: acpi: validate WGDS table revision index Assigned by Linux
Sep 24, 2026 CVE-2026-93787 High 8.1 smb: client: bound dirent name against end of SMB response in cifs_filldir Assigned by Linux
Sep 24, 2026 CVE-2026-93786 High 8.1 ksmbd: preserve VFS inherited POSIX ACL mask Assigned by Linux
Sep 24, 2026 CVE-2026-93785 Not yet scored cifs: validate idmap key payload length Assigned by Linux
Sep 24, 2026 CVE-2026-93784 Not yet scored wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() Assigned by Linux
Sep 24, 2026 CVE-2026-93783 Not yet scored Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame Assigned by Linux
Sep 24, 2026 CVE-2026-93782 High 7.8 vhost-scsi: flush backend after device ioctls Assigned by Linux
Sep 24, 2026 CVE-2026-93781 Not yet scored scsi: core: Do not block on tag allocation in scsi_eh_lock_door() Assigned by Linux
Sep 24, 2026 CVE-2026-93288 High 7.8 netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state Assigned by Linux
Sep 24, 2026 CVE-2026-93287 High 7.8 i2c: smbus: reject oversized block transfers in the common path Assigned by Linux
Sep 24, 2026 CVE-2026-93286 Not yet scored net: appletalk: fix NULL pointer dereference in aarp_send_ddp() Assigned by Linux
Sep 24, 2026 CVE-2026-93285 Not yet scored f2fs: embed f2fs_gc_kthread in f2fs_sb_info Assigned by Linux
Sep 24, 2026 CVE-2026-93284 High 8.8 drm/pagemap: dma-unmap pages before handling migration errors Assigned by Linux
Sep 24, 2026 CVE-2026-93283 Not yet scored i3c: master: Fix device_register() error path Assigned by Linux
Sep 24, 2026 CVE-2026-93282 High 8.1 ksmbd: fix maximum allowed access checks Assigned by Linux
Sep 24, 2026 CVE-2026-93281 Not yet scored wifi: rtw89: fix HE extended capability length check Assigned by Linux
Sep 24, 2026 CVE-2026-93280 High 8.8 greybus: audio: bound the topology section sizes against the fetched size Assigned by Linux
Sep 24, 2026 CVE-2026-93279 Not yet scored staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown Assigned by Linux
Sep 24, 2026 CVE-2026-93278 Not yet scored staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown Assigned by Linux
Sep 24, 2026 CVE-2026-93277 High 7.8 RDMA/bnxt_re: Validate udata before executing commands Assigned by Linux
Sep 24, 2026 CVE-2026-93276 Not yet scored phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator Assigned by Linux
Sep 24, 2026 CVE-2026-93275 Not yet scored perf/x86/intel/pt: Fix stop/start with no update Assigned by Linux
Sep 24, 2026 CVE-2026-93274 Not yet scored pinctrl: bcm2835: Don't remove an unregistered GPIO chip Assigned by Linux
Sep 24, 2026 CVE-2026-93273 Not yet scored regulator: tps6594: Fix device node reference leaks in multiphase loop Assigned by Linux
Sep 24, 2026 CVE-2026-93272 Not yet scored remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 Assigned by Linux
Sep 24, 2026 CVE-2026-93271 Not yet scored wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate Assigned by Linux
Sep 24, 2026 CVE-2026-93270 Not yet scored bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn Assigned by Linux
Sep 24, 2026 CVE-2026-93269 Not yet scored ext4: fix circular lock dependency in ext4_ext_migrate Assigned by Linux
Sep 24, 2026 CVE-2026-93268 Not yet scored ext4: skip extra isize expansion during mount to prevent deadlock Assigned by Linux
Sep 24, 2026 CVE-2026-93267 Not yet scored RDMA/core: Fix potential use after free in uverbs_free_dmah() Assigned by Linux
Sep 24, 2026 CVE-2026-93266 Not yet scored arm64: RSI: fix field-spanning write warning in attestation token init Assigned by Linux
Sep 24, 2026
Previous Page 25 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
