CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:30 UTC )
This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2026-46125 High 8.8 wifi: mac80211: remove station if connection prep fails Assigned by Linux
May 28, 2026 CVE-2026-46124 High 7.5 isofs: validate block number from NFS file handle in isofs_export_iget Assigned by Linux
May 28, 2026 CVE-2026-46122 High 7.8 wifi: b43: enforce bounds check on firmware key index in b43_rx() Assigned by Linux
May 28, 2026 CVE-2026-46120 High 7.8 ip6_gre: Use cached t->net in ip6erspan_changelink(). Assigned by Linux
May 28, 2026 CVE-2026-46116 High 7.8 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete Assigned by Linux
May 28, 2026 CVE-2026-46113 High 8.8 KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Assigned by Linux
May 28, 2026 CVE-2026-46110 High 7.5 net: stmmac: Prevent NULL deref when RX memory exhausted Assigned by Linux
May 28, 2026 CVE-2026-46107 High 7.8 dm-thin: fix metadata refcount underflow Assigned by Linux
May 28, 2026 CVE-2026-46102 High 7.5 net: strparser: fix skb_head leak in strp_abort_strp() Assigned by Linux
May 27, 2026 CVE-2026-46101 Medium 5.5 netfilter: reject zero shift in nft_bitwise Assigned by Linux
May 27, 2026 CVE-2026-46099 High 8.1 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels Assigned by Linux
May 27, 2026 CVE-2026-46092 Medium 5.5 wifi: rtw88: check for PCI upstream bridge existence Assigned by Linux
May 27, 2026 CVE-2026-46088 Medium 5.5 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() Assigned by Linux
May 27, 2026 CVE-2026-46086 Medium 5.5 net: bridge: use a stable FDB dst snapshot in RCU readers Assigned by Linux
May 27, 2026 CVE-2026-46083 Medium 5.5 spi: fix resource leaks on device setup failure Assigned by Linux
May 27, 2026 CVE-2026-46070 High 7.1 md/raid5: validate payload size before accessing journal metadata Assigned by Linux
May 27, 2026 CVE-2026-46069 High 7.8 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() Assigned by Linux
May 27, 2026 CVE-2026-46065 High 7.8 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Assigned by Linux
May 27, 2026 CVE-2026-46064 High 7.1 ibmasm: fix heap over-read in ibmasm_send_i2o_message() Assigned by Linux
May 27, 2026 CVE-2026-46056 High 8.8 Bluetooth: hci_event: fix potential UAF in SSP passkey handlers Assigned by Linux
May 27, 2026 CVE-2026-46051 Medium 5.5 md/raid5: fix soft lockup in retry_aligned_read() Assigned by Linux
May 27, 2026 CVE-2026-46050 Medium 5.5 md/raid10: fix deadlock with check operation and nowait requests Assigned by Linux
May 27, 2026 CVE-2026-46047 High 7.8 net: qrtr: ns: Fix use-after-free in driver remove() Assigned by Linux
May 27, 2026 CVE-2026-46046 Medium 5.5 ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() Assigned by Linux
May 27, 2026 CVE-2026-46044 Medium 5.5 ipmi:ssif: Clean up kthread on errors Assigned by Linux
May 27, 2026 CVE-2026-46040 Medium 5.5 inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails Assigned by Linux
May 27, 2026 CVE-2026-46038 Medium 5.5 net: qrtr: ns: Free the node during ctrl_cmd_bye() Assigned by Linux
May 27, 2026 CVE-2026-46037 High 8.2 ipv4: icmp: validate reply type before using icmp_pointers Assigned by Linux
May 27, 2026 CVE-2026-46033 High 7.1 crypto: authencesn - reject short ahash digests during instance creation Assigned by Linux
May 27, 2026 CVE-2026-46026 Medium 5.5 net: qrtr: ns: Limit the maximum number of lookups Assigned by Linux
May 27, 2026 CVE-2026-46023 Medium 5.5 dm mirror: fix integer overflow in create_dirty_log() Assigned by Linux
May 27, 2026 CVE-2026-46022 High 7.1 misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() Assigned by Linux
May 27, 2026 CVE-2026-46021 Medium 5.5 thermal: core: Fix thermal zone governor cleanup issues Assigned by Linux
May 27, 2026 CVE-2026-46018 Medium 5.5 ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES Assigned by Linux
May 27, 2026 CVE-2026-46015 High 7.8 tcp: call sk_data_ready() after listener migration Assigned by Linux
May 27, 2026 CVE-2026-46003 Medium 5.5 net: qrtr: ns: Limit the total number of nodes Assigned by Linux
May 27, 2026 CVE-2026-45997 Medium 5.5 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails Assigned by Linux
May 27, 2026 CVE-2026-45991 High 7.8 udf: fix partition descriptor append bookkeeping Assigned by Linux
May 27, 2026 CVE-2026-45850 Medium 5.5 ipvs: skip ipv6 extension headers for csum checks Assigned by Linux
May 27, 2026 CVE-2026-45844 Medium 5.5 netfilter: arp_tables: fix IEEE1394 ARP payload parsing Assigned by Linux
May 27, 2026 CVE-2026-45843 High 8.2 slip: bound decode() reads against the compressed packet length Assigned by Linux
May 27, 2026 CVE-2026-45842 Medium 5.5 slip: reject VJ receive packets on instances with no rstate array Assigned by Linux
May 27, 2026 CVE-2026-45841 Medium 5.5 netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO Assigned by Linux
May 27, 2026 CVE-2026-45840 Medium 5.5 openvswitch: cap upcall PID array size and pre-size vport replies Assigned by Linux
May 27, 2026 CVE-2026-45839 High 7.8 bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() Assigned by Linux
May 27, 2026 CVE-2026-45838 Medium 5.5 bpf: fix end-of-list detection in cgroup_storage_get_next_key() Assigned by Linux
May 27, 2026 CVE-2026-45836 Medium 5.5 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Assigned by Linux
May 26, 2026 CVE-2026-45835 Medium 5.5 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Assigned by Linux
May 26, 2026 CVE-2026-45834 Medium 5.5 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Assigned by Linux
May 26, 2026 CVE-2026-43503 High 8.8 net: skbuff: propagate shared-frag marker through frag-transfer helpers Assigned by Linux
May 23, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
