CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 15:00 UTC )
This week: 5,499 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,499 Show in the list Critical, last 7 days 356 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:ruggedcom_rst2428p . Show all products
CVE Severity Title Published CVE-2024-38662 Medium 4.7 bpf: Allow delete from sockmap/sockhash only if update is allowed Assigned by Linux
Jun 21, 2024 CVE-2024-38659 High 7.3 enic: Validate length of nl attributes in enic_set_vf_port Assigned by Linux
Jun 21, 2024 CVE-2024-38381 High 8.8 nfc: nci: Fix uninit-value in nci_rx_work Assigned by Linux
Jun 21, 2024 CVE-2024-37356 Medium 5.5 tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). Assigned by Linux
Jun 21, 2024 CVE-2024-36489 Medium 5.5 tls: fix missing memory barrier in tls_init Assigned by Linux
Jun 21, 2024 CVE-2024-36484 Medium 5.5 net: relax socket state check at accept time. Assigned by Linux
Jun 21, 2024 CVE-2024-36286 High 7.8 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() Assigned by Linux
Jun 21, 2024 CVE-2024-36270 Medium 5.5 netfilter: tproxy: bail out if IP has been disabled on the device Assigned by Linux
Jun 21, 2024 CVE-2024-33621 Medium 5.5 ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Assigned by Linux
Jun 21, 2024 CVE-2024-38619 Medium 5.5 usb-storage: alauda: Check whether the media is initialized Assigned by Linux
Jun 20, 2024 CVE-2024-38615 Medium 5.5 cpufreq: exit() callback is optional Assigned by Linux
Jun 19, 2024 CVE-2024-38612 High 7.0 ipv6: sr: fix invalid unregister error path Assigned by Linux
Jun 19, 2024 CVE-2024-38598 Medium 5.5 md: fix resync softlockup when bitmap size is less than array size Assigned by Linux
Jun 19, 2024 CVE-2024-38596 Medium 4.7 af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg Assigned by Linux
Jun 19, 2024 CVE-2024-38589 Medium 5.5 netrom: fix possible dead-lock in nr_rt_ioctl() Assigned by Linux
Jun 19, 2024 CVE-2024-38587 High 7.8 speakup: Fix sizeof() vs ARRAY_SIZE() bug Assigned by Linux
Jun 19, 2024 CVE-2024-38579 Medium 5.5 crypto: bcm - Fix pointer arithmetic Assigned by Linux
Jun 19, 2024 CVE-2024-38578 High 7.8 ecryptfs: Fix buffer size for tag 66 packet Assigned by Linux
Jun 19, 2024 CVE-2024-38558 Critical 10.0 net: openvswitch: fix overwriting ct original tuple for ICMPv6 Assigned by Linux
Jun 19, 2024 CVE-2024-36978 High 7.8 net: sched: sch_multiq: fix possible OOB write in multiq_tune() Assigned by Linux
Jun 19, 2024 CVE-2024-36974 High 7.8 net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP Assigned by Linux
Jun 18, 2024 CVE-2024-36959 Medium 5.5 pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() Assigned by Linux
May 30, 2024 CVE-2024-36940 High 7.8 pinctrl: core: delete incorrect free in pinctrl_enable() Assigned by Linux
May 30, 2024 CVE-2024-36934 High 7.8 bna: ensure the copied buf is NUL terminated Assigned by Linux
May 30, 2024 CVE-2024-36929 High 7.5 net: core: reject skb_copy(_expand) for fraglist GSO skbs Assigned by Linux
May 30, 2024 CVE-2024-36916 Medium 6.5 blk-iocost: avoid out of bounds shift Assigned by Linux
May 30, 2024 CVE-2024-36905 Medium 5.5 tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets Assigned by Linux
May 30, 2024 CVE-2024-36904 High 7.8 tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Assigned by Linux
May 30, 2024 CVE-2024-36902 Medium 5.5 ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() Assigned by Linux
May 30, 2024 CVE-2024-36017 Medium 5.5 rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Assigned by Linux
May 30, 2024 CVE-2024-36008 Medium 5.5 ipv4: check for NULL idev in ip_route_use_hint() Assigned by Linux
May 20, 2024 CVE-2024-36007 High 7.8 mlxsw: spectrum_acl_tcam: Fix warning during rehash Assigned by Linux
May 20, 2024 CVE-2024-36006 Medium 5.5 mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Assigned by Linux
May 20, 2024 CVE-2024-36005 Medium 5.5 netfilter: nf_tables: honor table dormant flag from netdev release event path Assigned by Linux
May 20, 2024 CVE-2024-35996 Medium 5.5 cpu: Re-enable CPU mitigations by default for !X86 architectures Assigned by Linux
May 20, 2024 CVE-2024-35990 High 7.8 dma: xilinx_dpdma: Fix locking Assigned by Linux
May 20, 2024 CVE-2024-35984 Medium 5.5 i2c: smbus: fix NULL function pointer dereference Assigned by Linux
May 20, 2024 CVE-2024-35983 Medium 5.5 bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS Assigned by Linux
May 20, 2024 CVE-2024-35976 High 7.1 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING Assigned by Linux
May 20, 2024 CVE-2024-35973 Medium 5.5 geneve: fix header validation in geneve[6]_xmit_skb Assigned by Linux
May 20, 2024 CVE-2024-35969 High 8.8 ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Assigned by Linux
May 20, 2024 CVE-2024-35962 High 7.1 netfilter: complete validation of user input Assigned by Linux
May 20, 2024 CVE-2024-35960 Critical 9.1 net/mlx5: Properly link new fs rules into the tree Assigned by Linux
May 20, 2024 CVE-2024-35958 High 7.8 net: ena: Fix incorrect descriptor free behavior Assigned by Linux
May 20, 2024 CVE-2024-35955 High 8.8 kprobes: Fix possible use-after-free issue on kprobe registration Assigned by Linux
May 20, 2024 CVE-2024-27396 High 7.8 net: gtp: Fix Use-After-Free in gtp_dellink Assigned by Linux
May 9, 2024 CVE-2024-27395 High 7.8 net: openvswitch: Fix Use-After-Free in ovs_ct_exit Assigned by Linux
May 9, 2024 CVE-2024-34397 Medium 5.2 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Assigned by mitre
May 7, 2024 CVE-2024-27020 High 7.8 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Assigned by Linux
May 1, 2024 CVE-2024-27013 Medium 5.5 tun: limit printing rate when illegal packet received by tun dev Assigned by Linux
May 1, 2024
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
