CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 15:50 UTC )
This week: 5,492 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,492 Show in the list Critical, last 7 days 353 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2025-7545 Medium 5.3 GNU Binutils objcopy.c copy_section heap-based overflow Assigned by VulDB
Jul 13, 2025 CVE-2025-7425 High 7.8 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Assigned by redhat
Jul 10, 2025 CVE-2025-38250 High 7.8 Bluetooth: hci_core: Fix use-after-free in vhci_flush() Assigned by Linux
Jul 9, 2025 CVE-2025-38192 High 7.8 net: clear the dst when changing skb protocol Assigned by Linux
Jul 4, 2025 CVE-2025-38162 High 7.8 netfilter: nft_set_pipapo: prevent overflow in lookup table allocation Assigned by Linux
Jul 3, 2025 CVE-2025-38105 Medium 5.5 ALSA: usb-audio: Kill timer properly at removal Assigned by Linux
Jul 3, 2025 CVE-2025-5245 Medium 5.3 GNU Binutils objdump debug.c debug_type_samep memory corruption Assigned by VulDB
May 27, 2025 CVE-2025-5244 Medium 5.3 GNU Binutils ld elflink.c elf_gc_sweep memory corruption Assigned by VulDB
May 27, 2025 CVE-2025-23131 Medium 5.5 dlm: prevent NPD when writing a positive value to event_done Assigned by Linux
Apr 16, 2025 CVE-2025-22105 Medium 5.5 bonding: check xdp prog when set bond mode Assigned by Linux
Apr 16, 2025 CVE-2025-3198 Low 3.3 GNU Binutils objdump bucomm.c display_info memory leak Assigned by VulDB
Apr 4, 2025 CVE-2023-52927 High 7.8 netfilter: allow exp not to be removed in nf_ct_find_expectation Assigned by Linux
Mar 14, 2025 CVE-2025-21865 Medium 5.5 gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). Assigned by Linux
Mar 12, 2025 CVE-2025-21864 High 7.8 tcp: drop secpath at the same time as we currently drop dst Assigned by Linux
Mar 12, 2025 CVE-2025-21863 High 7.8 io_uring: prevent opcode speculation Assigned by Linux
Mar 12, 2025 CVE-2025-21862 Medium 5.5 drop_monitor: fix incorrect initialization order Assigned by Linux
Mar 12, 2025 CVE-2025-21859 Medium 5.5 USB: gadget: f_midi: f_midi_complete to call queue_work Assigned by Linux
Mar 12, 2025 CVE-2025-21858 High 7.8 geneve: Fix use-after-free in geneve_find_dev(). Assigned by Linux
Mar 12, 2025 CVE-2025-21846 Medium 5.5 acct: perform last write from workqueue Assigned by Linux
Mar 12, 2025 CVE-2025-21844 High 7.5 smb: client: Add check for next_buffer in receive_encrypted_standard() Assigned by Linux
Mar 12, 2025 CVE-2025-21838 Medium 5.5 usb: gadget: core: flush gadget workqueue after device removal Assigned by Linux
Mar 7, 2025 CVE-2025-21835 Medium 5.5 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths Assigned by Linux
Mar 7, 2025 CVE-2025-21832 High 7.8 block: don't revert iter for -EIOCBQUEUED Assigned by Linux
Mar 6, 2025 CVE-2024-58085 Medium 5.5 tomoyo: don't emit warning in tomoyo_write_control() Assigned by Linux
Mar 6, 2025 CVE-2024-58083 High 7.8 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Assigned by Linux
Mar 6, 2025 CVE-2024-58079 High 7.8 media: uvcvideo: Fix crash during unbind if gpio unit is in use Assigned by Linux
Mar 6, 2025 CVE-2024-58077 Medium 5.5 ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback Assigned by Linux
Mar 6, 2025 CVE-2025-21830 High 7.3 landlock: Handle weird files Assigned by Linux
Mar 6, 2025 CVE-2025-21826 High 7.8 netfilter: nf_tables: reject mismatching sum of field_len with set key length Assigned by Linux
Mar 6, 2025 CVE-2024-58072 High 7.8 wifi: rtlwifi: remove unused check_buddy_priv Assigned by Linux
Mar 6, 2025 CVE-2024-58071 Medium 5.5 team: prevent adding a device which is already a team device lower Assigned by Linux
Mar 6, 2025 CVE-2024-58068 Medium 5.5 OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized Assigned by Linux
Mar 6, 2025 CVE-2024-58063 Medium 5.5 wifi: rtlwifi: fix memory leaks and invalid access at probe error path Assigned by Linux
Mar 6, 2025 CVE-2024-58061 Medium 5.5 wifi: mac80211: prohibit deactivating all links Assigned by Linux
Mar 6, 2025 CVE-2024-58058 Medium 5.5 ubifs: skip dumping tnc tree when zroot is null Assigned by Linux
Mar 6, 2025 CVE-2024-58051 Medium 5.5 ipmi: ipmb: Add check devm_kasprintf() returned value Assigned by Linux
Mar 6, 2025 CVE-2025-21814 Medium 5.5 ptp: Ensure info->enable callback is always set Assigned by Linux
Feb 27, 2025 CVE-2025-21806 Medium 5.5 net: let net.core.dev_weight always be non-zero Assigned by Linux
Feb 27, 2025 CVE-2025-21796 Critical 9.8 nfsd: clear acl_access/acl_default after releasing them Assigned by Linux
Feb 27, 2025 CVE-2025-21795 High 7.5 NFSD: fix hang in nfsd4_shutdown_callback Assigned by Linux
Feb 27, 2025 CVE-2025-21791 High 7.8 vrf: use RCU protection in l3mdev_l3_out() Assigned by Linux
Feb 27, 2025 CVE-2025-21790 Medium 5.5 vxlan: check vxlan_vnigroup_init() return value Assigned by Linux
Feb 27, 2025 CVE-2025-21787 Medium 5.5 team: better TEAM_OPTION_TYPE_STRING validation Assigned by Linux
Feb 27, 2025 CVE-2025-21779 Medium 5.5 KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel Assigned by Linux
Feb 27, 2025 CVE-2025-21776 Medium 5.5 USB: hub: Ignore non-compliant devices with too many configs or interfaces Assigned by Linux
Feb 27, 2025 CVE-2025-21772 High 7.8 partitions: mac: fix handling of bogus partition table Assigned by Linux
Feb 27, 2025 CVE-2025-21767 Medium 5.5 clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context Assigned by Linux
Feb 27, 2025 CVE-2025-21766 High 8.1 ipv4: use RCU protection in __ip_rt_update_pmtu() Assigned by Linux
Feb 27, 2025 CVE-2025-21765 High 8.1 ipv6: use RCU protection in ip6_default_advmss() Assigned by Linux
Feb 27, 2025 CVE-2025-21764 High 7.8 ndisc: use RCU protection in ndisc_alloc_skb() Assigned by Linux
Feb 27, 2025
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
