CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 9:50 PM ET )
This week: 4,536 CVEs published, 325 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,536 Show in the list Critical, last 7 days 325 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64340 High 7.8 USB: legousbtower: fix use-after-free on disconnect race Assigned by Linux
Jul 25, 2026 CVE-2026-64339 High 7.1 usb: misc: usbio: bound bulk IN response length to the received transfer Assigned by Linux
Jul 25, 2026 CVE-2026-64338 Medium 5.5 USB: misc: uss720: unregister parport on probe failure Assigned by Linux
Jul 25, 2026 CVE-2026-64337 Medium 5.5 usb: mtu3: unmap request DMA on queue failure Assigned by Linux
Jul 25, 2026 CVE-2026-64336 Medium 5.5 USB: serial: keyspan_pda: fix information leak Assigned by Linux
Jul 25, 2026 CVE-2026-64335 Medium 5.5 USB: serial: digi_acceleport: fix broken rx after throttle Assigned by Linux
Jul 25, 2026 CVE-2026-64334 Medium 5.5 USB: serial: digi_acceleport: fix hard lockup on disconnect Assigned by Linux
Jul 25, 2026 CVE-2026-64333 High 7.8 USB: serial: digi_acceleport: fix write buffer corruption Assigned by Linux
Jul 25, 2026 CVE-2026-64332 Medium 5.5 USB: ulpi: fix memory leak on registration failure Assigned by Linux
Jul 25, 2026 CVE-2026-64331 Medium 5.5 usbip: vudc: fix NULL deref in vep_dequeue() Assigned by Linux
Jul 25, 2026 CVE-2026-64330 High 7.8 usb: typec: tcpm: Validate SVID index in svdm_consume_modes() Assigned by Linux
Jul 25, 2026 CVE-2026-64329 High 7.8 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove Assigned by Linux
Jul 25, 2026 CVE-2026-64328 Medium 5.5 usb: gadget: f_fs: Fix DMA fence leak Assigned by Linux
Jul 25, 2026 CVE-2026-64327 Medium 5.5 usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks Assigned by Linux
Jul 25, 2026 CVE-2026-64326 Medium 5.5 block: skip sync_blockdev() on surprise removal in bdev_mark_dead() Assigned by Linux
Jul 25, 2026 CVE-2026-64325 Medium 5.5 wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon Assigned by Linux
Jul 25, 2026 CVE-2026-64324 High 7.8 udf: validate free block extents against the partition length Assigned by Linux
Jul 25, 2026 CVE-2026-64323 High 7.1 udf: validate VAT header length against the VAT inode size Assigned by Linux
Jul 25, 2026 CVE-2026-64322 High 7.8 udf: validate sparing table length as an entry count, not a byte count Assigned by Linux
Jul 25, 2026 CVE-2026-64321 Medium 5.5 nvme: target: rdma: fix ndev refcount leak on queue connect Assigned by Linux
Jul 25, 2026 CVE-2026-64320 Critical 9.1 nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page Assigned by Linux
Jul 25, 2026 CVE-2026-64319 Critical 9.1 nvmet-auth: validate reply message payload bounds against transfer length Assigned by Linux
Jul 25, 2026 CVE-2026-64318 High 7.1 partitions: aix: bound the pp_count scan to the ppe array Assigned by Linux
Jul 25, 2026 CVE-2026-64317 High 7.1 isofs: bound Rock Ridge symlink components to the SL record Assigned by Linux
Jul 25, 2026 CVE-2026-64316 Medium 5.5 crypto: caam - use print_hex_dump_devel to guard key hex dumps Assigned by Linux
Jul 25, 2026 CVE-2026-64315 High 7.0 crypto: caam - use print_hex_dump_devel to guard key hex dumps Assigned by Linux
Jul 25, 2026 CVE-2026-64314 Medium 5.5 crypto: chacha20poly1305 - validate poly1305 template argument Assigned by Linux
Jul 25, 2026 CVE-2026-64313 High 8.8 crypto: ecc - Fix carry overflow in vli multiplication Assigned by Linux
Jul 25, 2026 CVE-2026-64312 High 7.5 crypto: pcrypt - restore callback for non-parallel fallback Assigned by Linux
Jul 25, 2026 CVE-2026-64311 High 7.8 crypto: loongson - Remove broken and unused loongson-rng Assigned by Linux
Jul 25, 2026 CVE-2026-64310 Medium 5.5 crypto: ccp - Do not initialize SNP for SEV ioctls Assigned by Linux
Jul 25, 2026 CVE-2026-64309 Medium 5.5 crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) Assigned by Linux
Jul 25, 2026 CVE-2026-64308 Medium 5.5 crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) Assigned by Linux
Jul 25, 2026 CVE-2026-64307 Medium 5.5 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) Assigned by Linux
Jul 25, 2026 CVE-2026-64306 Medium 5.5 crypto: drbg - Fix returning success on failure in CTR_DRBG Assigned by Linux
Jul 25, 2026 CVE-2026-64305 High 7.8 crypto: qat - protect service table iterations with service_lock Assigned by Linux
Jul 25, 2026 CVE-2026-64304 High 7.8 crypto: qat - validate RSA CRT component lengths Assigned by Linux
Jul 25, 2026 CVE-2026-64303 Critical 9.8 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Assigned by Linux
Jul 25, 2026 CVE-2026-64302 Medium 5.5 x86/mm: Fix freeing of PMD-sized vmemmap pages Assigned by Linux
Jul 25, 2026 CVE-2026-64301 Medium 5.5 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() Assigned by Linux
Jul 25, 2026 CVE-2026-64300 High 7.8 perf/aux: Fix page UAF in map_range() Assigned by Linux
Jul 25, 2026 CVE-2026-64299 High 7.1 tracing: Prevent out-of-bounds read in glob matching Assigned by Linux
Jul 25, 2026 CVE-2026-64298 High 7.1 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC Assigned by Linux
Jul 25, 2026 CVE-2026-64297 Medium 5.5 module: decompress: check return value of module_extend_max_pages() Assigned by Linux
Jul 25, 2026 CVE-2026-64296 High 7.8 exfat: bound uniname advance in exfat_find_dir_entry() Assigned by Linux
Jul 25, 2026 CVE-2026-64295 Medium 5.5 mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access Assigned by Linux
Jul 25, 2026 CVE-2026-64294 Medium 5.5 mm: do file ownership checks with the proper mount idmap Assigned by Linux
Jul 25, 2026 CVE-2026-64293 High 7.8 iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read Assigned by Linux
Jul 25, 2026 CVE-2026-64292 Medium 5.5 iommufd: Move vevent memory allocation outside spinlock Assigned by Linux
Jul 25, 2026 CVE-2026-64291 Medium 5.5 iommufd: Set veventq_depth upper bound Assigned by Linux
Jul 25, 2026
Previous Page 99 of 194 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
