CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 19:00 UTC )
This week: 4,441 CVEs published, 302 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,441 Show in the list Critical, last 7 days 302 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74526 Not yet scored scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit Assigned by Linux
Aug 15, 2026 CVE-2026-74525 Not yet scored net: sxgbe: free TX rings on RX allocation failure Assigned by Linux
Aug 15, 2026 CVE-2026-74524 Not yet scored riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove Assigned by Linux
Aug 15, 2026 CVE-2026-74523 High 7.5 qede: sync udp_tunnel ports outside qede_lock in the recovery path Assigned by Linux
Aug 15, 2026 CVE-2026-74522 High 8.8 ksmbd: fix use-after-free in __close_file_table_ids() Assigned by Linux
Aug 15, 2026 CVE-2026-74521 Critical 9.1 ksmbd: use memcmp() to compare ClientGUIDs Assigned by Linux
Aug 15, 2026 CVE-2026-74520 High 8.8 iommu/iommufd: Fix IOPF group ownership UAF Assigned by Linux
Aug 15, 2026 CVE-2026-74519 High 7.8 pinctrl: devicetree: don't free uninitialized dev_name on error path Assigned by Linux
Aug 15, 2026 CVE-2026-74518 High 7.8 mm/hugetlb: fix list corruption in allocate_file_region_entries() Assigned by Linux
Aug 15, 2026 CVE-2026-74517 Critical 9.3 KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Assigned by Linux
Aug 15, 2026 CVE-2026-74516 High 8.2 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Assigned by Linux
Aug 15, 2026 CVE-2026-74515 High 8.8 KVM: s390: pci: Reject adapter interrupt forwarding if already enabled Assigned by Linux
Aug 15, 2026 CVE-2026-74514 Not yet scored KVM: s390: pci: Fix memory accounting for pinned/unpinned pages Assigned by Linux
Aug 15, 2026 CVE-2026-74513 High 7.8 dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister Assigned by Linux
Aug 15, 2026 CVE-2026-74512 High 7.8 audit: fix potential use-after-free in audit_del_rule() Assigned by Linux
Aug 15, 2026 CVE-2026-74510 High 7.8 Bluetooth: mgmt: fix UAF in pair command cancellation Assigned by Linux
Aug 15, 2026 CVE-2026-74509 High 8.8 Bluetooth: hci_sync: Fix advertising data UAFs Assigned by Linux
Aug 15, 2026 CVE-2026-74508 High 8.8 Bluetooth: HIDP: reject frames without a transaction header Assigned by Linux
Aug 15, 2026 CVE-2026-74507 High 7.1 Bluetooth: HIDP: validate numbered report payloads Assigned by Linux
Aug 15, 2026 CVE-2026-74506 High 7.8 afs: Fix UAF when sending a message Assigned by Linux
Aug 15, 2026 CVE-2026-74505 Not yet scored ALSA: 6fire: Fix UAF at error handling during probe Assigned by Linux
Aug 15, 2026 CVE-2026-74504 Not yet scored ALSA: seq: Fix division by zero in initialize_timer() Assigned by Linux
Aug 15, 2026 CVE-2026-74503 High 7.8 ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes Assigned by Linux
Aug 15, 2026 CVE-2026-74502 Not yet scored ALSA: ump: fix double free of out_cvts on rawmidi error Assigned by Linux
Aug 15, 2026 CVE-2026-74501 Not yet scored ALSA: usb-audio: fix use-after-free in ump_to_endpoint() Assigned by Linux
Aug 15, 2026 CVE-2026-74500 Not yet scored ALSA: usb-audio: fix stack info leak in RME Digiface status Assigned by Linux
Aug 15, 2026 CVE-2026-74499 Not yet scored ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() Assigned by Linux
Aug 15, 2026 CVE-2026-74498 Not yet scored ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set Assigned by Linux
Aug 15, 2026 CVE-2026-74497 High 8.4 ALSA: usb-audio: Clamp frame size in implicit-feedback mode Assigned by Linux
Aug 15, 2026 CVE-2026-74496 High 7.8 fou: Fix use-after-free in fou_create() Assigned by Linux
Aug 15, 2026 CVE-2026-74495 Critical 9.8 igbvf: Fix leak in TX DMA error cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-74494 Not yet scored ksmbd: reject repeated SMB2 NEGOTIATE requests Assigned by Linux
Aug 15, 2026 CVE-2026-74493 Critical 9.8 net/smc: fix socket use-after-free during link group termination Assigned by Linux
Aug 15, 2026 CVE-2026-74492 High 8.4 netfilter: ipset: do not update comments from kernel-side hash adds Assigned by Linux
Aug 15, 2026 CVE-2026-74491 Not yet scored of/address: Fix NULL bus dereference in of_pci_range_parser_one() Assigned by Linux
Aug 15, 2026 CVE-2026-74490 High 8.8 tipc: avoid use-after-free in poll trace queue dumps Assigned by Linux
Aug 15, 2026 CVE-2026-74489 High 8.8 wifi: mac80211: fix tid_tx use-after-free on BA session stop Assigned by Linux
Aug 15, 2026 CVE-2026-74488 High 8.8 wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames Assigned by Linux
Aug 15, 2026 CVE-2026-74487 Not yet scored binfmt_misc: restore write access when removing an entry Assigned by Linux
Aug 15, 2026 CVE-2026-74486 Not yet scored binfmt_misc: use exe_file_deny_write_access() for the interpreter clone Assigned by Linux
Aug 15, 2026 CVE-2026-74485 High 7.1 binfmt_misc: reject a flag character as the field delimiter Assigned by Linux
Aug 15, 2026 CVE-2026-74484 Not yet scored binfmt_misc: don't let an 'F' entry pin its own instance Assigned by Linux
Aug 15, 2026 CVE-2026-74483 Not yet scored binfmt_misc: don't leak the user namespace when the mount fails Assigned by Linux
Aug 15, 2026 CVE-2026-74482 High 7.8 mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios Assigned by Linux
Aug 15, 2026 CVE-2026-74481 High 7.8 mm/page_reporting: use system_freezable_wq to fix UAF during suspend Assigned by Linux
Aug 15, 2026 CVE-2026-74480 Critical 9.8 net: bridge: stop fast-leave after deleting a port group Assigned by Linux
Aug 15, 2026 CVE-2026-74479 High 7.8 net: pktgen: fix proc entry use-after-free Assigned by Linux
Aug 15, 2026 CVE-2026-74478 Critical 9.8 um: vector: fix use-after-free in vector_mmsg_rx() Assigned by Linux
Aug 15, 2026 CVE-2026-74477 Not yet scored uprobes: Fix NULL pointer dereference in hprobe_expire() Assigned by Linux
Aug 15, 2026 CVE-2026-74476 Critical 9.1 veth: convert frag_list skbs before running XDP Assigned by Linux
Aug 15, 2026
Previous Page 66 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
