CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 8:40 PM ET )
This week: 4,535 CVEs published, 325 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,535 Show in the list Critical, last 7 days 325 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64390 High 8.8 ksmbd: track the connection owning a byte-range lock Assigned by Linux
Jul 25, 2026 CVE-2026-64389 High 8.2 ksmbd: validate NTLMv2 response before updating session key Assigned by Linux
Jul 25, 2026 CVE-2026-64388 High 7.8 smb/client: fix chown/chgrp with SMB3 POSIX Extensions Assigned by Linux
Jul 25, 2026 CVE-2026-64387 Critical 9.8 smb: client: fix query directory replay double-free Assigned by Linux
Jul 25, 2026 CVE-2026-64386 Critical 9.8 smb: client: fix query_info() replay double-free Assigned by Linux
Jul 25, 2026 CVE-2026-64385 Critical 9.8 smb: client: fix double-free in SMB2_ioctl() replay Assigned by Linux
Jul 25, 2026 CVE-2026-64384 Critical 9.8 smb: client: fix change notify replay double-free Assigned by Linux
Jul 25, 2026 CVE-2026-64383 Critical 9.8 smb: client: fix double-free in SMB2_flush() replay Assigned by Linux
Jul 25, 2026 CVE-2026-64382 High 8.8 smb: client: fix double-free in SMB2_open() replay Assigned by Linux
Jul 25, 2026 CVE-2026-64381 High 7.8 smb: client: Fix next buffer leak in receive_encrypted_standard() Assigned by Linux
Jul 25, 2026 CVE-2026-64380 High 8.2 smb: client: harden POSIX SID length parsing Assigned by Linux
Jul 25, 2026 CVE-2026-64379 High 7.1 smb: client: mask server-provided mode to 07777 in modefromsid Assigned by Linux
Jul 25, 2026 CVE-2026-64378 High 7.8 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() Assigned by Linux
Jul 25, 2026 CVE-2026-64377 High 7.8 cpufreq: qcom-cpufreq-hw: Fix possible double free Assigned by Linux
Jul 25, 2026 CVE-2026-64376 Medium 5.5 firmware_loader: fix device reference leak in firmware_upload_register() Assigned by Linux
Jul 25, 2026 CVE-2026-64375 High 7.8 proc: protect ptrace_may_access() with exec_update_lock (FD links) Assigned by Linux
Jul 25, 2026 CVE-2026-64374 High 7.5 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Assigned by Linux
Jul 25, 2026 CVE-2026-64373 Medium 4.7 cpufreq: Fix hotplug-suspend race during reboot Assigned by Linux
Jul 25, 2026 CVE-2026-64372 High 7.8 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Assigned by Linux
Jul 25, 2026 CVE-2026-64371 Medium 5.5 proc: protect ptrace_may_access() with exec_update_lock (part 1) Assigned by Linux
Jul 25, 2026 CVE-2026-64370 Medium 5.5 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Assigned by Linux
Jul 25, 2026 CVE-2026-64369 Medium 5.5 s390: Revert support for DCACHE_WORD_ACCESS Assigned by Linux
Jul 25, 2026 CVE-2026-64368 High 8.1 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled Assigned by Linux
Jul 25, 2026 CVE-2026-64367 High 7.8 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow Assigned by Linux
Jul 25, 2026 CVE-2026-64366 High 8.8 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert Assigned by Linux
Jul 25, 2026 CVE-2026-64365 High 7.8 HID: letsketch: fix UAF on inrange_timer at driver unbind Assigned by Linux
Jul 25, 2026 CVE-2026-64364 High 8.8 HID: multitouch: fix out-of-bounds bit access on mt_io_flags Assigned by Linux
Jul 25, 2026 CVE-2026-64363 High 7.8 HID: appleir: fix UAF on pending key_up_timer in remove() Assigned by Linux
Jul 25, 2026 CVE-2026-64362 High 7.8 HID: lg-g15: cancel pending work on remove to fix a use-after-free Assigned by Linux
Jul 25, 2026 CVE-2026-64361 High 7.8 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Assigned by Linux
Jul 25, 2026 CVE-2026-64360 Medium 5.5 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Assigned by Linux
Jul 25, 2026 CVE-2026-64359 Medium 5.5 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Assigned by Linux
Jul 25, 2026 CVE-2026-64358 Medium 5.5 media: mtk-jpeg: cancel workqueue on release for supported platforms only Assigned by Linux
Jul 25, 2026 CVE-2026-64357 Medium 5.5 xfs: fix exchmaps reservation limit check Assigned by Linux
Jul 25, 2026 CVE-2026-64356 Medium 5.5 xfs: fix memory leak in xfs_dqinode_metadir_create() Assigned by Linux
Jul 25, 2026 CVE-2026-64355 Critical 9.8 bpf: Reject fragmented frames in devmap Assigned by Linux
Jul 25, 2026 CVE-2026-64354 High 7.8 bpf: Validate BTF repeated field counts before expansion Assigned by Linux
Jul 25, 2026 CVE-2026-64353 Medium 5.5 bpf: Keep dynamic inner array lookups nullable Assigned by Linux
Jul 25, 2026 CVE-2026-64352 High 7.8 bpf: Allow LPM map access from sleepable BPF programs Assigned by Linux
Jul 25, 2026 CVE-2026-64351 Medium 5.5 net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() Assigned by Linux
Jul 25, 2026 CVE-2026-64350 Medium 5.5 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() Assigned by Linux
Jul 25, 2026 CVE-2026-64349 Medium 5.5 usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() Assigned by Linux
Jul 25, 2026 CVE-2026-64348 High 7.8 usb: free iso schedules on failed submit Assigned by Linux
Jul 25, 2026 CVE-2026-64347 Medium 5.5 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler Assigned by Linux
Jul 25, 2026 CVE-2026-64346 High 7.8 usb: gadget: udc: Fix use-after-free in gadget_match_driver Assigned by Linux
Jul 25, 2026 CVE-2026-64345 Medium 5.5 usb: gadget: f_printer: take kref only for successful open Assigned by Linux
Jul 25, 2026 CVE-2026-64344 High 7.8 USB: idmouse: fix use-after-free on disconnect race Assigned by Linux
Jul 25, 2026 CVE-2026-64343 High 7.8 USB: ldusb: fix use-after-free on disconnect race Assigned by Linux
Jul 25, 2026 CVE-2026-64342 High 7.8 USB: iowarrior: fix use-after-free on disconnect Assigned by Linux
Jul 25, 2026 CVE-2026-64341 High 7.8 USB: iowarrior: fix use-after-free on disconnect race Assigned by Linux
Jul 25, 2026
Previous Page 98 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
