CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98718 Not yet scored KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state Assigned by Linux
Oct 18, 2026 CVE-2026-98717 Not yet scored KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy Assigned by Linux
Oct 18, 2026 CVE-2026-98716 Not yet scored KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Assigned by Linux
Oct 18, 2026 CVE-2026-98715 Not yet scored KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Assigned by Linux
Oct 18, 2026 CVE-2026-98714 Not yet scored KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Assigned by Linux
Oct 18, 2026 CVE-2026-98713 Not yet scored KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT Assigned by Linux
Oct 18, 2026 CVE-2026-98712 Not yet scored KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq Assigned by Linux
Oct 18, 2026 CVE-2026-98711 Not yet scored wifi: cw1200: fix TX padding OOB read leaking heap data to device Assigned by Linux
Oct 18, 2026 CVE-2026-98710 Not yet scored wifi: iwlegacy: 3945: free EEPROM data on remove Assigned by Linux
Oct 18, 2026 CVE-2026-98709 Not yet scored wifi: mac80211: count only matching reservations in reserved switch Assigned by Linux
Oct 18, 2026 CVE-2026-98708 Not yet scored wifi: mac80211: keep paired old chanctx alive Assigned by Linux
Oct 18, 2026 CVE-2026-98707 Not yet scored wifi: mac80211: shut down RX BA session timer on teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98706 Not yet scored wifi: mac80211: drain PS delivery work during station teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98705 Not yet scored wifi: mac80211: account proxy paths against the mesh path limit Assigned by Linux
Oct 18, 2026 CVE-2026-98704 Not yet scored wifi: mac80211: keep fallback association elements alive Assigned by Linux
Oct 18, 2026 CVE-2026-98703 Not yet scored wifi: mac80211: minstrel_ht: validate fixed rate index Assigned by Linux
Oct 18, 2026 CVE-2026-98702 Not yet scored wifi: mac80211: reject invalid 320 MHz CSA bandwidth Assigned by Linux
Oct 18, 2026 CVE-2026-98701 Not yet scored wifi: mac80211: release mesh path quota on failed additions Assigned by Linux
Oct 18, 2026 CVE-2026-98700 Not yet scored wifi: mac80211: set info->band for 802.3 encap offload frames Assigned by Linux
Oct 18, 2026 CVE-2026-98699 Not yet scored wifi: mac80211: fix mesh fast xmit path deletion UAF Assigned by Linux
Oct 18, 2026 CVE-2026-98698 Not yet scored wifi: mac80211: handle empty FILS association request payload Assigned by Linux
Oct 18, 2026 CVE-2026-98697 Not yet scored USB: serial: fix dynamic id driver deregistration race Assigned by Linux
Oct 18, 2026 CVE-2026-98696 Not yet scored USB: serial: fix driver deregistration order Assigned by Linux
Oct 18, 2026 CVE-2026-98695 Not yet scored USB: serial: fix ioctl hangup race Assigned by Linux
Oct 18, 2026 CVE-2026-98694 Not yet scored thunderbolt: Fix KASAN reported use-after-free when request is canceled Assigned by Linux
Oct 18, 2026 CVE-2026-98693 Not yet scored thunderbolt: Hold a router reference for each allocated HopID Assigned by Linux
Oct 18, 2026 CVE-2026-98692 Not yet scored thunderbolt: Make the DP tunnel activation callback mandatory Assigned by Linux
Oct 18, 2026 CVE-2026-98691 Not yet scored thunderbolt: Tear down inactive DP tunnels when the domain is stopped Assigned by Linux
Oct 18, 2026 CVE-2026-98690 Not yet scored thunderbolt: Fix domain reference leak when DPRX read is canceled Assigned by Linux
Oct 18, 2026 CVE-2026-98689 Not yet scored thunderbolt: Don't access a DP tunnel after its DPRX read was canceled Assigned by Linux
Oct 18, 2026 CVE-2026-98688 Not yet scored thunderbolt: Fix NULL dereference in tb_remove_work() Assigned by Linux
Oct 18, 2026 CVE-2026-98687 Not yet scored thunderbolt: Reject oversized XDomain properties responses Assigned by Linux
Oct 18, 2026 CVE-2026-98686 Not yet scored smb: client: discard post-EOF pagecache when extending a file via zero range Assigned by Linux
Oct 18, 2026 CVE-2026-98685 Not yet scored smb: client: discard post-EOF pagecache when extending a file via clone range Assigned by Linux
Oct 18, 2026 CVE-2026-98684 Not yet scored smb: client: flush and commit data before querying allocated ranges Assigned by Linux
Oct 18, 2026 CVE-2026-98683 Not yet scored smb: client: flush dirty data before zeroing a range Assigned by Linux
Oct 18, 2026 CVE-2026-98682 Not yet scored smb: client: drain and invalidate before server-side copy/clone Assigned by Linux
Oct 18, 2026 CVE-2026-98681 Not yet scored smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races Assigned by Linux
Oct 18, 2026 CVE-2026-98680 Not yet scored iio: accel: kionix-kx022a: Prevent memory leak and fix state Assigned by Linux
Oct 18, 2026 CVE-2026-98679 Not yet scored iio: accel: kxcjk-1013: reject duplicate event disable Assigned by Linux
Oct 18, 2026 CVE-2026-98678 Not yet scored iio: adc: ad4030: fix invalid oversampling_ratio validation Assigned by Linux
Oct 18, 2026 CVE-2026-98677 Not yet scored iio: adc: ad_sigma_delta: fix use-after-free on unbind Assigned by Linux
Oct 18, 2026 CVE-2026-98676 Not yet scored iio: adc: ade9000: fix NULL pointer dereference in clkout registration Assigned by Linux
Oct 18, 2026 CVE-2026-98675 Not yet scored iio: adc: ade9000: handle Phase C dip events in IRQ1 handler Assigned by Linux
Oct 18, 2026 CVE-2026-98674 Not yet scored iio: adc: adi-axi-adc: Initialize state mutex Assigned by Linux
Oct 18, 2026 CVE-2026-98673 Not yet scored iio: adc: pac1934: check ACPI label duplication Assigned by Linux
Oct 18, 2026 CVE-2026-98672 Not yet scored iio: adc: stm32-adc: fix possible division by zero in processed channel Assigned by Linux
Oct 18, 2026 CVE-2026-98671 Not yet scored iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure Assigned by Linux
Oct 18, 2026 CVE-2026-98670 Not yet scored iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind Assigned by Linux
Oct 18, 2026 CVE-2026-98669 Not yet scored iio: buffer: serialize buffer teardown with mode claims Assigned by Linux
Oct 18, 2026
Previous Page 4 of 137 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
