CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 5:20 PM ET )
What this means for you
This week: 4,540 CVEs published, 327 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,540 Show in the list Critical, last 7 days 327 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64538 Not yet scored ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Assigned by Linux
Jul 27, 2026 CVE-2026-64537 Not yet scored bridge: cfm: reject invalid CCM interval at configuration time Assigned by Linux
Jul 27, 2026 CVE-2026-17523 High 7.8 can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet Assigned by redhat
Jul 27, 2026 CVE-2026-64536 High 8.1 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop Assigned by Linux
Jul 27, 2026 CVE-2026-64535 Critical 9.8 nvmet-tcp: Fix potential UAF when ddgst mismatch Assigned by Linux
Jul 27, 2026 CVE-2026-64534 Critical 9.8 nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Assigned by Linux
Jul 27, 2026 CVE-2026-64533 High 7.8 fs/ntfs3: validate lcns_follow in log_replay conversion Assigned by Linux
Jul 27, 2026 CVE-2026-64532 High 7.8 fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Assigned by Linux
Jul 27, 2026 CVE-2026-64531 High 7.8 net: openvswitch: reject oversized nested action attrs Assigned by Linux
Jul 27, 2026 CVE-2024-14040 High 7.8 net: nexthop: Increase weight to u16 Assigned by Linux
Jul 26, 2026 CVE-2026-64530 Critical 9.8 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Assigned by Linux
Jul 26, 2026 CVE-2026-64529 High 7.8 crypto: qat - remove unused character device and IOCTLs Assigned by Linux
Jul 25, 2026 CVE-2026-64528 Not yet scored tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Assigned by Linux
Jul 25, 2026 CVE-2026-64527 Not yet scored drm/hyperv: validate VMBus packet size in receive callback Assigned by Linux
Jul 25, 2026 CVE-2026-64526 Not yet scored ethtool: tsconfig: fix missing ethnl_ops_complete() Assigned by Linux
Jul 25, 2026 CVE-2026-64525 Not yet scored xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit Assigned by Linux
Jul 25, 2026 CVE-2026-64524 High 7.7 drm/hyperv: validate resolution_count and fix WIN8 fallback Assigned by Linux
Jul 25, 2026 CVE-2026-64523 Critical 9.8 net/handshake: Take a long-lived file reference at submit Assigned by Linux
Jul 25, 2026 CVE-2026-64522 High 8.8 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA Assigned by Linux
Jul 25, 2026 CVE-2026-64521 Not yet scored pinctrl: meson: amlogic-a4: fix deadlock issue Assigned by Linux
Jul 25, 2026 CVE-2026-64520 High 8.4 firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies Assigned by Linux
Jul 25, 2026 CVE-2026-64519 Not yet scored NFSD: Fix infinite loop in layout state revocation Assigned by Linux
Jul 25, 2026 CVE-2026-64518 Not yet scored tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). Assigned by Linux
Jul 25, 2026 CVE-2026-64517 Not yet scored drm/xe/gsc: Fix double-free of managed BO in error path Assigned by Linux
Jul 25, 2026 CVE-2026-64516 High 8.8 drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets Assigned by Linux
Jul 25, 2026 CVE-2026-64515 High 8.3 wifi: mac80211: fix MLE defragmentation Assigned by Linux
Jul 25, 2026 CVE-2026-64514 Not yet scored userfaultfd: gate must_wait writability check on pte_present() Assigned by Linux
Jul 25, 2026 CVE-2026-64513 Not yet scored KVM: x86: Unconditionally recompute CR8 intercept on PPR update Assigned by Linux
Jul 25, 2026 CVE-2026-64512 Not yet scored ACPI: CPPC: Suppress UBSAN warning caused by field misuse Assigned by Linux
Jul 25, 2026 CVE-2026-64511 Not yet scored ACPI: NFIT: core: Fix possible NULL pointer dereference Assigned by Linux
Jul 25, 2026 CVE-2026-64510 High 7.0 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Assigned by Linux
Jul 25, 2026 CVE-2026-64509 Not yet scored rust: block: fix GenDisk cleanup paths Assigned by Linux
Jul 25, 2026 CVE-2026-64508 Not yet scored bpf: Support for hardening against JIT spraying Assigned by Linux
Jul 25, 2026 CVE-2026-64507 Not yet scored x86/bugs: Enable IBPB flush on BPF JIT allocation Assigned by Linux
Jul 25, 2026 CVE-2026-64506 Not yet scored wifi: rtw89: correct drop logic for malformed AMPDU frames Assigned by Linux
Jul 25, 2026 CVE-2026-64505 Not yet scored usb: gadget: function: rndis: add length check for header Assigned by Linux
Jul 25, 2026 CVE-2026-64504 Not yet scored iio: accel: bmc150: clamp the device-reported FIFO frame count Assigned by Linux
Jul 25, 2026 CVE-2026-64503 Not yet scored iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Assigned by Linux
Jul 25, 2026 CVE-2026-64502 High 7.8 iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices Assigned by Linux
Jul 25, 2026 CVE-2026-64501 High 7.1 iio: adc: ad_sigma_delta: fix CS held asserted and state leaks Assigned by Linux
Jul 25, 2026 CVE-2026-64500 Not yet scored iio: adc: lpc32xx: Initialize completion before requesting IRQ Assigned by Linux
Jul 25, 2026 CVE-2026-64499 Not yet scored iio: adc: ti-ads1119: fix PM reference leak in buffer preenable Assigned by Linux
Jul 25, 2026 CVE-2026-64498 Not yet scored iio: buffer: hw-consumer: free scan_mask on buffer release Assigned by Linux
Jul 25, 2026 CVE-2026-64497 Not yet scored iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Assigned by Linux
Jul 25, 2026 CVE-2026-64496 High 7.1 iio: event: Fix event FIFO reset race Assigned by Linux
Jul 25, 2026 CVE-2026-64495 Not yet scored iio: gyro: bmg160: bail out when bandwidth/filter is not in table Assigned by Linux
Jul 25, 2026 CVE-2026-64494 Not yet scored iio: light: gp2ap002: fix runtime PM leak on read error Assigned by Linux
Jul 25, 2026 CVE-2026-64493 Not yet scored iio: pressure: mpl115: fix runtime PM leak on read error Assigned by Linux
Jul 25, 2026 CVE-2026-64492 Not yet scored iio: temperature: tmp006: use devm_iio_trigger_register Assigned by Linux
Jul 25, 2026 CVE-2026-64491 Not yet scored ALSA: usx2y: us144mkii: fix work UAF on disconnect Assigned by Linux
Jul 25, 2026
Previous Page 95 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.