CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 6:23 PM ET )
This week: 4,539 CVEs published, 326 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,539 Show in the list Critical, last 7 days 326 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64490 High 8.4 ALSA: virtio: Validate control metadata from the device Assigned by Linux
Jul 25, 2026 CVE-2026-64489 Not yet scored ALSA: ymfpci: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64488 Not yet scored ALSA: aoa: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64487 Not yet scored ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Assigned by Linux
Jul 25, 2026 CVE-2026-64486 Not yet scored ALSA: cmipci: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64485 High 7.8 ALSA: compress: Fix task creation error unwind Assigned by Linux
Jul 25, 2026 CVE-2026-64484 Not yet scored ALSA: es1938: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64483 Not yet scored ALSA: firewire: isight: bound the sample count to the packet payload Assigned by Linux
Jul 25, 2026 CVE-2026-64482 Not yet scored ALSA: gus: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64481 High 7.8 ALSA: hda/cs35l41: Fix firmware load work teardown Assigned by Linux
Jul 25, 2026 CVE-2026-64480 Not yet scored ALSA: ice1712: check snd_ctl_new1() return value Assigned by Linux
Jul 25, 2026 CVE-2026-64479 Not yet scored ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() Assigned by Linux
Jul 25, 2026 CVE-2026-64478 Not yet scored ALSA: usb-audio: avoid kobject path lookup in DualSense match Assigned by Linux
Jul 25, 2026 CVE-2026-64477 Not yet scored x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled Assigned by Linux
Jul 25, 2026 CVE-2026-64476 Not yet scored vfio/pci: Latch disable_idle_d3 per device Assigned by Linux
Jul 25, 2026 CVE-2026-64475 High 8.8 vfio/pci: Release the VGA arbiter client on register_device() failure Assigned by Linux
Jul 25, 2026 CVE-2026-64474 Not yet scored vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc Assigned by Linux
Jul 25, 2026 CVE-2026-64473 Not yet scored vfio: Remove device debugfs before releasing devres Assigned by Linux
Jul 25, 2026 CVE-2026-64472 Not yet scored vfio/mlx5: Fix racy bitfields and tighten struct layout Assigned by Linux
Jul 25, 2026 CVE-2026-64471 Not yet scored Bluetooth: btusb: fix use-after-free on registration failure Assigned by Linux
Jul 25, 2026 CVE-2026-64470 Not yet scored Bluetooth: btusb: fix use-after-free on marvell probe failure Assigned by Linux
Jul 25, 2026 CVE-2026-64469 High 7.8 binder: fix UAF in binder_thread_release() Assigned by Linux
Jul 25, 2026 CVE-2026-64468 High 7.8 binder: fix UAF in binder_free_transaction() Assigned by Linux
Jul 25, 2026 CVE-2026-64467 High 8.8 rust_binder: use a u64 stride when cleaning up the offsets array Assigned by Linux
Jul 25, 2026 CVE-2026-64466 Not yet scored rust_binder: clear freeze listener on node removal Assigned by Linux
Jul 25, 2026 CVE-2026-64465 Not yet scored usb: xhci: Fix sleep in atomic context in xhci_free_streams() Assigned by Linux
Jul 25, 2026 CVE-2026-64464 Not yet scored xhci: sideband: fix ring sg table pages leak Assigned by Linux
Jul 25, 2026 CVE-2026-64463 High 7.8 usb: typec: tcpci_rt1711h: unregister TCPCI port with devres Assigned by Linux
Jul 25, 2026 CVE-2026-64462 Not yet scored PCI: altera: Fix resource leaks on probe failure Assigned by Linux
Jul 25, 2026 CVE-2026-64461 Not yet scored PCI: mediatek: Fix IRQ domain leak when port fails to enable Assigned by Linux
Jul 25, 2026 CVE-2026-64460 High 7.0 PCI/IOV: Skip VF Resizable BAR restore on read error Assigned by Linux
Jul 25, 2026 CVE-2026-64459 Critical 9.8 tcp: restore RCU grace period in tcp_ao_destroy_sock Assigned by Linux
Jul 25, 2026 CVE-2026-64458 Not yet scored mm/damon/ops-common: handle extreme intervals in damon_hot_score() Assigned by Linux
Jul 25, 2026 CVE-2026-64457 Not yet scored virtio_pci: fix vq info pointer lookup via wrong index Assigned by Linux
Jul 25, 2026 CVE-2026-64456 High 7.7 hwrng: virtio: clamp device-reported used.len at copy_data() Assigned by Linux
Jul 25, 2026 CVE-2026-64455 Not yet scored USB: chaoskey: Fix slab-use-after-free in chaoskey_release() Assigned by Linux
Jul 25, 2026 CVE-2026-64454 Not yet scored usb: dwc3: run gadget disconnect from sleepable suspend context Assigned by Linux
Jul 25, 2026 CVE-2026-64453 High 7.8 usb: misc: usbio: fix disconnect UAF in client teardown Assigned by Linux
Jul 25, 2026 CVE-2026-64452 High 7.1 6lowpan: fix NHC entry use-after-free on error path Assigned by Linux
Jul 25, 2026 CVE-2026-64451 Medium 5.5 tracing: Fix NULL pointer dereference in func_set_flag() Assigned by Linux
Jul 25, 2026 CVE-2026-64450 Critical 9.1 tipc: fix out-of-bounds read in broadcast Gap ACK blocks Assigned by Linux
Jul 25, 2026 CVE-2026-64449 High 7.8 staging: vme_user: bound slave read/write to the kern_buf size Assigned by Linux
Jul 25, 2026 CVE-2026-64448 High 8.2 smb: client: restrict implied bcc[0] exemption to responses without data area Assigned by Linux
Jul 25, 2026 CVE-2026-64447 High 7.8 staging: media: ipu7: fix double-free and use-after-free in error paths Assigned by Linux
Jul 25, 2026 CVE-2026-64446 High 7.8 staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() Assigned by Linux
Jul 25, 2026 CVE-2026-64445 High 8.8 staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Assigned by Linux
Jul 25, 2026 CVE-2026-64444 High 8.1 staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop Assigned by Linux
Jul 25, 2026 CVE-2026-64443 High 8.1 staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop Assigned by Linux
Jul 25, 2026 CVE-2026-64442 High 8.1 staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Assigned by Linux
Jul 25, 2026 CVE-2026-64441 High 8.8 staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Assigned by Linux
Jul 25, 2026
Previous Page 96 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
