CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 04:23 UTC )
This week: 4,468 CVEs published, 337 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,468 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72221 Critical 9.8 sunrpc: wait for in-flight TLS handshake callback when cancel loses race Assigned by Linux
Aug 15, 2026 CVE-2026-72220 Critical 9.8 sunrpc: harden rq_procinfo lifecycle to prevent double-free Assigned by Linux
Aug 15, 2026 CVE-2026-72219 Not yet scored lockd: Plug nlm_file leak when nlm_do_fopen() fails Assigned by Linux
Aug 15, 2026 CVE-2026-72218 Not yet scored lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Assigned by Linux
Aug 15, 2026 CVE-2026-72217 Critical 9.8 SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Assigned by Linux
Aug 15, 2026 CVE-2026-72216 Not yet scored remoteproc: qcom: Fix leak when custom dump_segments addition fails Assigned by Linux
Aug 15, 2026 CVE-2026-72215 Not yet scored MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Assigned by Linux
Aug 15, 2026 CVE-2026-72214 Not yet scored power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Assigned by Linux
Aug 15, 2026 CVE-2026-72213 High 7.1 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Assigned by Linux
Aug 15, 2026 CVE-2026-72212 Not yet scored mm/memory_hotplug: fix incorrect altmap passing in error path Assigned by Linux
Aug 15, 2026 CVE-2026-72211 Critical 9.8 ntfs: grow index root value before reparent header update Assigned by Linux
Aug 15, 2026 CVE-2026-72210 Critical 9.8 ntfs: fix off-by-one in mapping pairs decoding bounds checks Assigned by Linux
Aug 15, 2026 CVE-2026-72209 Critical 9.8 ntfs: validate attribute values on lookup Assigned by Linux
Aug 15, 2026 CVE-2026-72208 Critical 9.8 ntfs: add bounds check before accessing EA entries Assigned by Linux
Aug 15, 2026 CVE-2026-72207 Critical 9.8 ntfs: not change 0-byte $DATA attribute to non-resident Assigned by Linux
Aug 15, 2026 CVE-2026-72206 Critical 9.8 ntfs: validate index block header more strictly Assigned by Linux
Aug 15, 2026 CVE-2026-72205 Not yet scored ntfs: free volume-wide resources on fill_super failure Assigned by Linux
Aug 15, 2026 CVE-2026-72204 High 8.4 ntfs: centalize $INDEX_ROOT header validation Assigned by Linux
Aug 15, 2026 CVE-2026-72203 High 7.5 ntfs: skip extent mft records in writeback to prevent deadlock Assigned by Linux
Aug 15, 2026 CVE-2026-72202 High 7.5 ntfs: avoid heap allocation for free-cluster readahead state Assigned by Linux
Aug 15, 2026 CVE-2026-72201 Critical 9.8 ntfs: validate index entries on reading Assigned by Linux
Aug 15, 2026 CVE-2026-72200 Critical 9.8 ntfs: detect mapping-pairs LCN accumulator overflow Assigned by Linux
Aug 15, 2026 CVE-2026-72199 Critical 9.8 ntfs: validate resident index root values on lookup Assigned by Linux
Aug 15, 2026 CVE-2026-72198 High 7.8 ntfs: reject non-resident records for resident-only attributes Assigned by Linux
Aug 15, 2026 CVE-2026-72197 High 8.4 fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Assigned by Linux
Aug 15, 2026 CVE-2026-72196 High 8.4 fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Assigned by Linux
Aug 15, 2026 CVE-2026-72195 High 7.8 fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Assigned by Linux
Aug 15, 2026 CVE-2026-72194 Critical 9.8 fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Assigned by Linux
Aug 15, 2026 CVE-2026-72193 Not yet scored ntfs3: cap RESTART_TABLE free-chain walker at rt->used Assigned by Linux
Aug 15, 2026 CVE-2026-72192 Critical 9.8 ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Assigned by Linux
Aug 15, 2026 CVE-2026-72191 Critical 9.8 ntfs3: validate split-point offset in indx_insert_into_buffer Assigned by Linux
Aug 15, 2026 CVE-2026-72190 Not yet scored ntfs: fix mrec_lock ABBA deadlock in rename Assigned by Linux
Aug 15, 2026 CVE-2026-72189 Not yet scored ntfs: fail attrlist updates when the superblock is inactive Assigned by Linux
Aug 15, 2026 CVE-2026-72188 Critical 9.1 ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() Assigned by Linux
Aug 15, 2026 CVE-2026-72187 Not yet scored ntfs: avoid self-deadlock during inode eviction Assigned by Linux
Aug 15, 2026 CVE-2026-72186 Critical 9.1 ntfs: make system files immutable to prevent corruption Assigned by Linux
Aug 15, 2026 CVE-2026-72185 Critical 9.8 ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() Assigned by Linux
Aug 15, 2026 CVE-2026-72184 Not yet scored ntfs: fix hole runlist memory leak in insert range error path Assigned by Linux
Aug 15, 2026 CVE-2026-72183 High 8.4 landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Assigned by Linux
Aug 15, 2026 CVE-2026-72182 Not yet scored power: supply: charger-manager: fix refcount leak in is_full_charged() Assigned by Linux
Aug 15, 2026 CVE-2026-72181 High 7.8 mips: sched: Fix CPUMASK_OFFSTACK memory corruption Assigned by Linux
Aug 15, 2026 CVE-2026-72180 Not yet scored mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade Assigned by Linux
Aug 15, 2026 CVE-2026-72179 Not yet scored riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Assigned by Linux
Aug 15, 2026 CVE-2026-72178 Not yet scored mm/damon/core: always put unsuccessfully committed target pids Assigned by Linux
Aug 15, 2026 CVE-2026-72177 Not yet scored mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Assigned by Linux
Aug 15, 2026 CVE-2026-72176 Not yet scored mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error Assigned by Linux
Aug 15, 2026 CVE-2026-72175 High 7.1 fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race Assigned by Linux
Aug 15, 2026 CVE-2026-72174 Not yet scored fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() Assigned by Linux
Aug 15, 2026 CVE-2026-72173 Not yet scored fs/proc/task_mmu: do not warn on seeing non-migration pmd entry Assigned by Linux
Aug 15, 2026 CVE-2026-72172 High 7.8 mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Assigned by Linux
Aug 15, 2026
Previous Page 77 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
