CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 7:30 PM ET )
This week: 4,535 CVEs published, 325 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,535 Show in the list Critical, last 7 days 325 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64440 High 8.1 staging: rtl8723bs: fix OOB write in HT_caps_handler() Assigned by Linux
Jul 25, 2026 CVE-2026-64439 Critical 9.8 crypto: krb5 - filter out async aead implementations at alloc Assigned by Linux
Jul 25, 2026 CVE-2026-64438 High 8.8 crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Assigned by Linux
Jul 25, 2026 CVE-2026-64437 High 8.8 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Assigned by Linux
Jul 25, 2026 CVE-2026-64436 High 7.1 net: af_key: initialize alg_key_len for IPComp states Assigned by Linux
Jul 25, 2026 CVE-2026-64435 High 8.2 audit: Fix data races of skb_queue_len() readers on audit_queue Assigned by Linux
Jul 25, 2026 CVE-2026-64434 High 8.8 Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref Assigned by Linux
Jul 25, 2026 CVE-2026-64433 High 7.8 Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete Assigned by Linux
Jul 25, 2026 CVE-2026-64432 High 7.8 fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns Assigned by Linux
Jul 25, 2026 CVE-2026-64431 High 7.8 ntfs: avoid calling post_write_mst_fixup() for invalid index_block Assigned by Linux
Jul 25, 2026 CVE-2026-64430 High 7.5 NTB: epf: Avoid calling pci_irq_vector() from hardirq context Assigned by Linux
Jul 25, 2026 CVE-2026-64429 Medium 5.5 gpio: eic-sprd: use raw_spinlock_t in the irq startup path Assigned by Linux
Jul 25, 2026 CVE-2026-64428 Medium 5.5 gpio: sch: use raw_spinlock_t in the irq startup path Assigned by Linux
Jul 25, 2026 CVE-2026-64427 Medium 5.5 HID: logitech-dj: Fix maxfield check in DJ short report validation Assigned by Linux
Jul 25, 2026 CVE-2026-64426 Medium 5.5 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE Assigned by Linux
Jul 25, 2026 CVE-2026-64425 Medium 5.5 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item Assigned by Linux
Jul 25, 2026 CVE-2026-64424 High 7.8 netpoll: fix a use-after-free on shutdown path Assigned by Linux
Jul 25, 2026 CVE-2026-64423 High 7.8 ipv4: igmp: remove multicast group from hash table on device destruction Assigned by Linux
Jul 25, 2026 CVE-2026-64422 High 7.1 net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Assigned by Linux
Jul 25, 2026 CVE-2026-64421 High 7.8 media: nxp: imx8-isi: Fix use-after-free on remove Assigned by Linux
Jul 25, 2026 CVE-2026-64420 High 7.0 mfd: cros_ec: Delay dev_set_drvdata() until probe success Assigned by Linux
Jul 25, 2026 CVE-2026-64419 Medium 5.5 mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Assigned by Linux
Jul 25, 2026 CVE-2026-64418 High 7.8 mm: shrinker: fix shrinker_info teardown race with expansion Assigned by Linux
Jul 25, 2026 CVE-2026-64417 Medium 5.5 mm: shrinker: fix NULL pointer dereference in debugfs Assigned by Linux
Jul 25, 2026 CVE-2026-64416 Medium 5.5 mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host Assigned by Linux
Jul 25, 2026 CVE-2026-64415 Medium 5.5 mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup Assigned by Linux
Jul 25, 2026 CVE-2026-64414 High 7.5 netfilter: handle unreadable frags Assigned by Linux
Jul 25, 2026 CVE-2026-64413 High 7.0 netfilter: ebtables: zero chainstack array Assigned by Linux
Jul 25, 2026 CVE-2026-64412 High 7.1 netfilter: ebtables: module names must be null-terminated Assigned by Linux
Jul 25, 2026 CVE-2026-64411 High 7.1 netfilter: ebtables: terminate table name before find_table_lock() Assigned by Linux
Jul 25, 2026 CVE-2026-64410 Critical 9.8 netfilter: flowtable: IPIP tunnel hardware offload is not yet support Assigned by Linux
Jul 25, 2026 CVE-2026-64409 Medium 5.5 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Assigned by Linux
Jul 25, 2026 CVE-2026-64408 High 8.8 Bluetooth: bnep: pin L2CAP connection during netdev registration Assigned by Linux
Jul 25, 2026 CVE-2026-64407 High 7.1 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() Assigned by Linux
Jul 25, 2026 CVE-2026-64406 High 8.0 Bluetooth: fix UAF in bt_accept_dequeue() Assigned by Linux
Jul 25, 2026 CVE-2026-64405 Medium 5.5 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() Assigned by Linux
Jul 25, 2026 CVE-2026-64404 Medium 5.5 Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() Assigned by Linux
Jul 25, 2026 CVE-2026-64403 High 7.1 Bluetooth: L2CAP: validate option length before reading conf opt value Assigned by Linux
Jul 25, 2026 CVE-2026-64402 High 7.8 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() Assigned by Linux
Jul 25, 2026 CVE-2026-64401 High 7.8 smb: client: resolve SWN tcon from live registrations Assigned by Linux
Jul 25, 2026 CVE-2026-64400 High 8.6 ksmbd: prevent path traversal bypass by restricting caseless retry Assigned by Linux
Jul 25, 2026 CVE-2026-64399 Critical 9.8 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Assigned by Linux
Jul 25, 2026 CVE-2026-64398 High 8.1 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA Assigned by Linux
Jul 25, 2026 CVE-2026-64397 Critical 9.8 ksmbd: serialize QUERY_DIRECTORY requests per file Assigned by Linux
Jul 25, 2026 CVE-2026-64396 High 8.8 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Assigned by Linux
Jul 25, 2026 CVE-2026-64395 High 7.5 ksmbd: require source read access for duplicate extents Assigned by Linux
Jul 25, 2026 CVE-2026-64394 High 8.8 ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Assigned by Linux
Jul 25, 2026 CVE-2026-64393 Critical 9.1 ksmbd: run set info with opener credentials Assigned by Linux
Jul 25, 2026 CVE-2026-64392 Critical 9.1 ksmbd: use opener credentials for delete-on-close Assigned by Linux
Jul 25, 2026 CVE-2026-64391 Critical 9.8 ksmbd: use opener credentials for ADS I/O Assigned by Linux
Jul 25, 2026
Previous Page 97 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
