CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:10 UTC )
This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,511 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2026-31586 High 7.8 mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Assigned by Linux
Apr 24, 2026 CVE-2026-31583 High 7.8 media: em28xx: fix use-after-free in em28xx_v4l2_open() Assigned by Linux
Apr 24, 2026 CVE-2026-31580 High 7.8 bcache: fix cached_dev.sb_bio use-after-free and crash Assigned by Linux
Apr 24, 2026 CVE-2026-31532 High 7.8 can: raw: fix ro->uniq use-after-free in raw_rcv() Assigned by Linux
Apr 23, 2026 CVE-2026-31500 High 7.8 Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Assigned by Linux
Apr 22, 2026 CVE-2026-31488 High 7.8 drm/amd/display: Do not skip unrelated mode changes in DSC validation Assigned by Linux
Apr 22, 2026 CVE-2026-31451 Medium 5.5 ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Assigned by Linux
Apr 22, 2026 CVE-2026-31449 High 7.8 ext4: validate p_idx bounds in ext4_ext_correct_indexes Assigned by Linux
Apr 22, 2026 CVE-2026-31431 Known exploited
High 7.8 crypto: algif_aead - Revert to operating out-of-place Assigned by Linux
Apr 22, 2026 CVE-2026-28390 High 7.5 Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo Assigned by openssl
Apr 7, 2026 CVE-2026-28389 High 7.5 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo Assigned by openssl
Apr 7, 2026 CVE-2026-28388 High 7.5 NULL Pointer Dereference When Processing a Delta CRL Assigned by openssl
Apr 7, 2026 CVE-2026-28387 High 8.1 Potential Use-after-free in DANE Client Code Assigned by openssl
Apr 7, 2026 CVE-2026-31407 High 7.1 netfilter: conntrack: add missing netlink policy validations Assigned by Linux
Apr 6, 2026 CVE-2026-23444 High 7.8 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Assigned by Linux
Apr 3, 2026 CVE-2026-23442 Medium 5.5 ipv6: add NULL checks for idev in SRv6 paths Assigned by Linux
Apr 3, 2026 CVE-2026-23399 Medium 5.5 nf_tables: nft_dynset: fix possible stateful expression memleak in error path Assigned by Linux
Mar 28, 2026 CVE-2026-23398 Medium 5.5 icmp: fix NULL pointer dereference in icmp_tag_validation() Assigned by Linux
Mar 26, 2026 CVE-2026-23397 High 7.1 nfnetlink_osf: validate individual option lengths in fingerprints Assigned by Linux
Mar 26, 2026 CVE-2026-23396 Medium 5.5 wifi: mac80211: fix NULL deref in mesh_matches_local() Assigned by Linux
Mar 26, 2026 CVE-2026-23395 High 8.8 Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Assigned by Linux
Mar 25, 2026 CVE-2026-23392 High 7.8 netfilter: nf_tables: release flowtable after rcu grace period on error Assigned by Linux
Mar 25, 2026 CVE-2026-23391 High 7.8 netfilter: xt_CT: drop pending enqueued packets on template removal Assigned by Linux
Mar 25, 2026 CVE-2026-23389 Medium 5.5 ice: Fix memory leak in ice_set_ringparam() Assigned by Linux
Mar 25, 2026 CVE-2026-23388 High 7.1 Squashfs: check metadata block offset is within range Assigned by Linux
Mar 25, 2026 CVE-2026-23382 Medium 5.5 HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Assigned by Linux
Mar 25, 2026 CVE-2026-23381 Medium 5.5 net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Assigned by Linux
Mar 25, 2026 CVE-2026-23379 Medium 5.5 net/sched: ets: fix divide by zero in the offload path Assigned by Linux
Mar 25, 2026 CVE-2026-23378 High 7.8 net/sched: act_ife: Fix metalist update behavior Assigned by Linux
Mar 25, 2026 CVE-2026-23372 High 7.8 nfc: rawsock: cancel tx_work before socket teardown Assigned by Linux
Mar 25, 2026 CVE-2026-23370 Medium 5.5 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Assigned by Linux
Mar 25, 2026 CVE-2026-23368 Medium 5.5 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Assigned by Linux
Mar 25, 2026 CVE-2026-23367 Medium 5.5 wifi: radiotap: reject radiotap with unknown bits Assigned by Linux
Mar 25, 2026 CVE-2026-23365 Medium 5.5 net: usb: kalmia: validate USB endpoints Assigned by Linux
Mar 25, 2026 CVE-2026-23364 High 7.4 ksmbd: Compare MACs in constant time Assigned by Linux
Mar 25, 2026 CVE-2026-23359 High 7.8 bpf: Fix stack-out-of-bounds write in devmap Assigned by Linux
Mar 25, 2026 CVE-2026-23357 Medium 5.5 can: mcp251x: fix deadlock in error path of mcp251x_open Assigned by Linux
Mar 25, 2026 CVE-2026-23356 Medium 5.5 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Assigned by Linux
Mar 25, 2026 CVE-2026-23352 Medium 5.5 x86/efi: defer freeing of boot services memory Assigned by Linux
Mar 25, 2026 CVE-2026-23351 High 7.8 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Assigned by Linux
Mar 25, 2026 CVE-2026-23343 High 7.8 xdp: produce a warning when calculated tailroom is negative Assigned by Linux
Mar 25, 2026 CVE-2026-23340 High 7.8 net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Assigned by Linux
Mar 25, 2026 CVE-2026-23339 Medium 5.5 nfc: nci: free skb on nci_transceive early error paths Assigned by Linux
Mar 25, 2026 CVE-2026-23336 High 7.8 wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Assigned by Linux
Mar 25, 2026 CVE-2026-23321 Medium 5.5 mptcp: pm: in-kernel: always mark signal+subflow endp as used Assigned by Linux
Mar 25, 2026 CVE-2026-23319 High 7.8 bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Assigned by Linux
Mar 25, 2026 CVE-2026-23318 High 7.1 ALSA: usb-audio: Use correct version for UAC3 header validation Assigned by Linux
Mar 25, 2026 CVE-2026-23317 High 7.8 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Assigned by Linux
Mar 25, 2026 CVE-2026-23315 High 7.1 wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Assigned by Linux
Mar 25, 2026 CVE-2026-23312 Medium 5.5 net: usb: kaweth: validate USB endpoints Assigned by Linux
Mar 25, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
