CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 09:00 UTC )
This week: 4,613 CVEs published, 312 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,613 Show in the list Critical, last 7 days 312 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80792 Not yet scored ipv6: fix use-after-free in ip6_finish_output2() Assigned by Linux
Sep 4, 2026 CVE-2026-80791 Not yet scored nvmet-auth: zero the AUTH_RECEIVE response buffer Assigned by Linux
Sep 4, 2026 CVE-2026-80790 Not yet scored nvmet-fc: fix invalid free in LS IOD error path Assigned by Linux
Sep 4, 2026 CVE-2026-80789 Not yet scored nvmet-tcp: bound SGL data length before allocating command buffers Assigned by Linux
Sep 4, 2026 CVE-2026-80788 Not yet scored nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations Assigned by Linux
Sep 4, 2026 CVE-2026-80787 Not yet scored nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work() Assigned by Linux
Sep 4, 2026 CVE-2026-80786 Not yet scored fbdev: Wrap user-invoked calls to fb_set_var() in helper Assigned by Linux
Sep 4, 2026 CVE-2026-80785 Not yet scored fbdev: serialize mode sysfs access with lock_fb_info() Assigned by Linux
Sep 4, 2026 CVE-2026-80784 Not yet scored mptcp: pm: fix memory leak from alloc-during-teardown race Assigned by Linux
Sep 4, 2026 CVE-2026-80783 Not yet scored HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() Assigned by Linux
Sep 4, 2026 CVE-2026-80782 Not yet scored HID: magicmouse: do not keep a stale msc->input if no input is claimed Assigned by Linux
Sep 4, 2026 CVE-2026-80781 Not yet scored HID: core: fix OOB read of field->usage in hid_set_field() Assigned by Linux
Sep 4, 2026 CVE-2026-80780 Not yet scored HID: pidff: fix OOB write when hid->inputs is empty Assigned by Linux
Sep 4, 2026 CVE-2026-80779 Not yet scored net/ionic: avoid OOB TX partner lookup for hwstamp RXQ Assigned by Linux
Sep 4, 2026 CVE-2026-80778 Not yet scored futex/pi: Reject cross-mm private futex owners Assigned by Linux
Sep 4, 2026 CVE-2026-80777 Not yet scored futex/pi: Plug private futex exec() race Assigned by Linux
Sep 4, 2026 CVE-2026-80776 Not yet scored futex: Fix race in futex_pivot_pending() during private hash resize Assigned by Linux
Sep 4, 2026 CVE-2026-80775 Not yet scored futex: Fix race on the initial mm->futex.phash.ref allocation Assigned by Linux
Sep 4, 2026 CVE-2026-80774 Not yet scored HID: asus: fix missing hid_is_usb() check Assigned by Linux
Sep 4, 2026 CVE-2026-80773 Not yet scored HID: huawei: fix missing hid_is_usb() check Assigned by Linux
Sep 4, 2026 CVE-2026-80772 Not yet scored HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() Assigned by Linux
Sep 4, 2026 CVE-2026-80771 Not yet scored HID: nintendo: register input device after capabilities are set Assigned by Linux
Sep 4, 2026 CVE-2026-80770 Not yet scored HID: nintendo: stop device IO before hid_hw_stop on probe failure Assigned by Linux
Sep 4, 2026 CVE-2026-80769 Not yet scored HID: rapoo: fix missing hid_is_usb() check Assigned by Linux
Sep 4, 2026 CVE-2026-80768 Not yet scored HID: ft260: fix stack-use-after-return write in I2C read race Assigned by Linux
Sep 4, 2026 CVE-2026-80767 Not yet scored HID: sensor: custom: Fix use-after-free in enable_sensor Assigned by Linux
Sep 4, 2026 CVE-2026-80766 Not yet scored HID: uclogic: fix use-after-free of inrange_timer on remove Assigned by Linux
Sep 4, 2026 CVE-2026-80765 Not yet scored HID: hyperv: validate initial device info bounds Assigned by Linux
Sep 4, 2026 CVE-2026-80764 Not yet scored Bluetooth: hci_event: fix LE list UAF on reset Assigned by Linux
Sep 4, 2026 CVE-2026-80763 Not yet scored Bluetooth: hci_event: validate LE Set CIG Parameters response Assigned by Linux
Sep 4, 2026 CVE-2026-80762 Not yet scored Bluetooth: hci_sync: Fix accept list UAF during suspend Assigned by Linux
Sep 4, 2026 CVE-2026-80761 Not yet scored Bluetooth: ISO: zero the sockaddr before returning it in getname Assigned by Linux
Sep 4, 2026 CVE-2026-80760 Not yet scored Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 Assigned by Linux
Sep 4, 2026 CVE-2026-80759 Not yet scored Bluetooth: hci_aml: validate firmware segment lengths Assigned by Linux
Sep 4, 2026 CVE-2026-80758 Not yet scored futex: Avoid private hash use-after-free on final put Assigned by Linux
Sep 4, 2026 CVE-2026-80757 Not yet scored selinux: reject a class permission count below its inherited common Assigned by Linux
Sep 3, 2026 CVE-2026-80756 Not yet scored selinux: do not cancel a policy conversion that never started Assigned by Linux
Sep 3, 2026 CVE-2026-80755 Not yet scored selinux: reject a permission value exceeding the class permission count Assigned by Linux
Sep 3, 2026 CVE-2026-80754 High 7.8 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo Assigned by Linux
Sep 3, 2026 CVE-2026-80753 High 8.4 ovpn: run deferred work on a module-owned workqueue Assigned by Linux
Sep 3, 2026 CVE-2026-80752 High 8.4 Input: psxpad-spi - set driver data before use Assigned by Linux
Sep 3, 2026 CVE-2026-80751 High 7.8 pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() Assigned by Linux
Sep 3, 2026 CVE-2026-80750 High 8.4 pmdomain: mediatek: fix remaining %pOF after of_node_put() Assigned by Linux
Sep 3, 2026 CVE-2026-80749 High 7.1 drm/connector/hdmi: Fix out of bounds memory read Assigned by Linux
Sep 3, 2026 CVE-2026-80748 High 7.8 mmc: loongson2: Fix sg iteration in data reorder functions Assigned by Linux
Sep 3, 2026 CVE-2026-80747 High 8.0 drm/amdkfd: Add bounds check for CRAT subtype length Assigned by Linux
Sep 3, 2026 CVE-2026-80746 Not yet scored clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK Assigned by Linux
Sep 3, 2026 CVE-2026-80745 High 8.4 regulator: fp9931: Fix VPOS/VNEG voltage selector table Assigned by Linux
Sep 3, 2026 CVE-2026-80744 Not yet scored netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path Assigned by Linux
Sep 3, 2026 CVE-2026-80743 Not yet scored ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers Assigned by Linux
Sep 3, 2026
Previous Page 56 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
