CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:50 UTC )
This week: 5,367 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,367 Show in the list Critical, last 7 days 353 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2025-21763 High 7.8 neighbour: use RCU protection in __neigh_notify() Assigned by Linux
Feb 27, 2025 CVE-2025-21762 High 8.1 arp: use RCU protection in arp_xmit() Assigned by Linux
Feb 27, 2025 CVE-2025-21761 High 7.8 openvswitch: use RCU protection in ovs_vport_cmd_fill_info() Assigned by Linux
Feb 27, 2025 CVE-2025-21760 High 8.1 ndisc: extend RCU protection in ndisc_send_skb() Assigned by Linux
Feb 27, 2025 CVE-2025-21758 High 7.8 ipv6: mcast: add RCU protection to mld_newpack() Assigned by Linux
Feb 27, 2025 CVE-2025-21756 High 7.8 vsock: Keep the binding until socket destruction Assigned by Linux
Feb 27, 2025 CVE-2024-58020 Medium 5.5 HID: multitouch: Add NULL check in mt_input_configured Assigned by Linux
Feb 27, 2025 CVE-2025-21753 High 7.8 btrfs: fix use-after-free when attempting to join an aborted transaction Assigned by Linux
Feb 27, 2025 CVE-2025-21745 Medium 5.5 blk-cgroup: Fix class @block_class's subsystem refcount leakage Assigned by Linux
Feb 27, 2025 CVE-2025-21744 Medium 5.5 wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() Assigned by Linux
Feb 27, 2025 CVE-2025-21738 High 7.8 ata: libata-sff: Ensure that we cannot write outside the allocated buffer Assigned by Linux
Feb 27, 2025 CVE-2025-21735 High 8.8 NFC: nci: Add bounds checking in nci_hci_create_pipe() Assigned by Linux
Feb 27, 2025 CVE-2024-58017 Medium 5.5 printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Assigned by Linux
Feb 27, 2025 CVE-2024-58016 Medium 5.5 safesetid: check size of policy writes Assigned by Linux
Feb 27, 2025 CVE-2024-58014 High 7.1 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() Assigned by Linux
Feb 27, 2025 CVE-2024-58013 High 7.8 Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync Assigned by Linux
Feb 27, 2025 CVE-2024-58009 Medium 5.5 Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc Assigned by Linux
Feb 27, 2025 CVE-2024-58005 Medium 5.5 tpm: Change to kvalloc() in eventlog/acpi.c Assigned by Linux
Feb 27, 2025 CVE-2024-58002 High 7.8 media: uvcvideo: Remove dangling pointers Assigned by Linux
Feb 27, 2025 CVE-2025-21731 High 7.8 nbd: don't allow reconnect after disconnect Assigned by Linux
Feb 27, 2025 CVE-2025-21728 Medium 5.5 bpf: Send signals asynchronously if !preemptible Assigned by Linux
Feb 27, 2025 CVE-2025-21727 High 7.8 padata: fix UAF in padata_reorder Assigned by Linux
Feb 27, 2025 CVE-2025-21726 High 7.8 padata: avoid UAF for reorder_work Assigned by Linux
Feb 27, 2025 CVE-2025-21725 High 7.5 smb: client: fix oops due to unset link speed Assigned by Linux
Feb 27, 2025 CVE-2025-21724 High 7.8 iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() Assigned by Linux
Feb 27, 2025 CVE-2025-21719 High 7.1 ipmr: do not call mr_mfc_uses_dev() for unres entries Assigned by Linux
Feb 27, 2025 CVE-2025-21716 Medium 5.5 vxlan: Fix uninit-value in vxlan_vnifilter_dump() Assigned by Linux
Feb 27, 2025 CVE-2025-21711 Not yet scored net/rose: prevent integer overflows in rose_setsockopt() Assigned by Linux
Feb 27, 2025 CVE-2025-21708 Medium 5.5 net: usb: rtl8150: enable basic endpoint checking Assigned by Linux
Feb 27, 2025 CVE-2025-21707 Critical 9.8 mptcp: consolidate suboption status Assigned by Linux
Feb 27, 2025 CVE-2025-21706 Medium 5.5 mptcp: pm: only set fullmesh for subflow endp Assigned by Linux
Feb 27, 2025 CVE-2025-21705 Medium 5.5 mptcp: handle fastopen disconnect correctly Assigned by Linux
Feb 27, 2025 CVE-2024-57996 High 7.8 net_sched: sch_sfq: don't allow 1 packet limit Assigned by Linux
Feb 27, 2025 CVE-2024-57993 Medium 5.5 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check Assigned by Linux
Feb 27, 2025 CVE-2024-57986 High 7.1 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections Assigned by Linux
Feb 27, 2025 CVE-2024-57981 Medium 5.5 usb: xhci: Fix NULL pointer dereference on certain command aborts Assigned by Linux
Feb 27, 2025 CVE-2024-57980 High 7.8 media: uvcvideo: Fix double free in error path Assigned by Linux
Feb 27, 2025 CVE-2024-57979 High 7.8 pps: Fix a use-after-free Assigned by Linux
Feb 27, 2025 CVE-2024-57977 Medium 5.5 memcg: fix soft lockup in the OOM process Assigned by Linux
Feb 27, 2025 CVE-2025-21704 High 7.8 usb: cdc-acm: Check control transfer buffer size before access Assigned by Linux
Feb 22, 2025 CVE-2025-21703 High 7.8 netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() Assigned by Linux
Feb 18, 2025 CVE-2025-21702 High 7.8 pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Assigned by Linux
Feb 18, 2025 CVE-2025-21700 High 7.8 net: sched: Disallow replacing of child qdisc from one parent to another Assigned by Linux
Feb 13, 2025 CVE-2025-21694 Medium 5.5 fs/proc: fix softlockup in __read_vmcore (part 2) Assigned by Linux
Feb 12, 2025 CVE-2024-57951 High 7.8 hrtimers: Handle CPU state correctly on hotplug Assigned by Linux
Feb 12, 2025 CVE-2025-21692 High 7.8 net: sched: fix ets qdisc OOB Indexing Assigned by Linux
Feb 10, 2025 CVE-2025-21683 Medium 5.5 bpf: Fix bpf_sk_select_reuseport() memory leak Assigned by Linux
Jan 31, 2025 CVE-2025-21682 High 7.3 eth: bnxt: always recalculate features after XDP clearing, fix null-deref Assigned by Linux
Jan 31, 2025 CVE-2025-21678 High 7.8 gtp: Destroy device along with udp socket's netns dismantle. Assigned by Linux
Jan 31, 2025 CVE-2025-21669 High 7.8 vsock/virtio: discard packets if the transport changes Assigned by Linux
Jan 31, 2025
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
