CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:30 UTC )
This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:scalance_xcm_xrm_xch_xrh_300_family . Show all products
187 CVEs, showing 151 to 187 Previous Page 4 of 4 CVE Severity Title Published CVE-2024-35976 High 7.1 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING Assigned by Linux
May 20, 2024 CVE-2024-35973 Medium 5.5 geneve: fix header validation in geneve[6]_xmit_skb Assigned by Linux
May 20, 2024 CVE-2024-35969 High 8.8 ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Assigned by Linux
May 20, 2024 CVE-2024-35962 High 7.1 netfilter: complete validation of user input Assigned by Linux
May 20, 2024 CVE-2024-35960 Critical 9.1 net/mlx5: Properly link new fs rules into the tree Assigned by Linux
May 20, 2024 CVE-2024-35958 High 7.8 net: ena: Fix incorrect descriptor free behavior Assigned by Linux
May 20, 2024 CVE-2024-35955 High 8.8 kprobes: Fix possible use-after-free issue on kprobe registration Assigned by Linux
May 20, 2024 CVE-2024-27396 High 7.8 net: gtp: Fix Use-After-Free in gtp_dellink Assigned by Linux
May 9, 2024 CVE-2024-27395 High 7.8 net: openvswitch: Fix Use-After-Free in ovs_ct_exit Assigned by Linux
May 9, 2024 CVE-2024-34397 Medium 5.2 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Assigned by mitre
May 7, 2024 CVE-2024-27020 High 7.8 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Assigned by Linux
May 1, 2024 CVE-2024-27013 Medium 5.5 tun: limit printing rate when illegal packet received by tun dev Assigned by Linux
May 1, 2024 CVE-2024-27004 Medium 5.5 clk: Get runtime PM before walking tree during disable_unused Assigned by Linux
May 1, 2024 CVE-2024-26993 Medium 5.5 fs: sysfs: Fix reference leak in sysfs_break_active_protection() Assigned by Linux
May 1, 2024 CVE-2024-26988 High 7.8 init/main.c: Fix potential static_command_line memory overflow Assigned by Linux
May 1, 2024 CVE-2024-26923 High 7.8 af_unix: Fix garbage collector racing against connect() Assigned by Linux
Apr 24, 2024 CVE-2024-26835 Medium 5.5 netfilter: nf_tables: set dormant flag on hook register failure Assigned by Linux
Apr 17, 2024 CVE-2024-2511 Medium 5.9 Unbounded memory growth with session handling in TLSv1.3 Assigned by openssl
Apr 8, 2024 CVE-2024-26805 Medium 5.5 netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter Assigned by Linux
Apr 4, 2024 CVE-2024-26777 Medium 5.5 fbdev: sis: Error out if pixclock equals zero Assigned by Linux
Apr 3, 2024 CVE-2024-26773 High 7.8 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() Assigned by Linux
Apr 3, 2024 CVE-2024-26772 High 7.8 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() Assigned by Linux
Apr 3, 2024 CVE-2024-26679 Medium 5.5 inet: read sk->sk_family once in inet_recv_error() Assigned by Linux
Apr 2, 2024 CVE-2024-26671 Medium 4.7 blk-mq: fix IO hang from sbitmap wakeup race Assigned by Linux
Apr 2, 2024 CVE-2023-52622 Medium 5.5 ext4: avoid online resizing failures due to oversized flex bg Assigned by Linux
Mar 26, 2024 CVE-2024-26645 Medium 5.5 tracing: Ensure visibility when inserting an element into tracing_map Assigned by Linux
Mar 26, 2024 CVE-2023-6932 High 7.8 Use-after-free in Linux kernel's ipv4: igmp component Assigned by Google
Dec 19, 2023 CVE-2023-6931 High 7.8 Out-of-bounds write in Linux kernel's Performance Events system component Assigned by Google
Dec 19, 2023 CVE-2023-6606 High 7.1 Kernel: out-of-bounds read vulnerability in smbcalcsize Assigned by redhat
Dec 8, 2023 CVE-2023-6121 Medium 4.3 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get Assigned by redhat
Nov 16, 2023 CVE-2023-5678 Medium 5.3 Excessive time spent in DH check / generation with large Q parameter value Assigned by openssl
Nov 6, 2023 CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme Assigned by redhat
Nov 1, 2023 CVE-2023-5717 High 7.8 Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component Assigned by Google
Oct 25, 2023 CVE-2023-45863 Medium 6.4 An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. Assigned by mitre
Oct 14, 2023 CVE-2023-4039 Medium 4.8 GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 Assigned by Arm
Sep 13, 2023 CVE-2023-35827 High 7.0 An issue was discovered in the Linux kernel through 6.3.8. Assigned by mitre
Jun 18, 2023 CVE-2021-44879 Medium 5.5 In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. Assigned by mitre
Feb 13, 2022
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
