InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product freebsd:freebsd. Show all products

87 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2026-101311High 7.0Multiple vulnerabilities in bhyve device models
Assigned by freebsd
Oct 15, 2026
CVE-2026-101310High 7.0Multiple vulnerabilities in bhyve device models
Assigned by freebsd
Oct 15, 2026
CVE-2026-101309High 7.0Multiple vulnerabilities in bhyve device models
Assigned by freebsd
Oct 15, 2026
CVE-2026-101308Medium 5.5TOCTOU race between sound(4) buffer resizing and mmap
Assigned by freebsd
Oct 15, 2026
CVE-2026-101307High 8.2Remotely triggerable buffer overflow in tcp_rack
Assigned by freebsd
Oct 15, 2026
CVE-2026-101303High 7.5IPv6 UDP sendto(2) bypasses jail loopback restriction
Assigned by freebsd
Oct 15, 2026
CVE-2026-101302Medium 6.5Remote DoS via receive-side kernel TLS
Assigned by freebsd
Oct 15, 2026
CVE-2026-101306Critical 9.8Multiple jail filesystem root escapes
Assigned by freebsd
Oct 15, 2026
CVE-2026-101305High 8.8Multiple jail filesystem root escapes
Assigned by freebsd
Oct 15, 2026
CVE-2026-101304Not yet scoredMultiple jail filesystem root escapes
Assigned by freebsd
Oct 15, 2026
CVE-2026-58100Not yet scoredMemory safety bugs in kqueue copy-on-fork implementation
Assigned by freebsd
Oct 15, 2026
CVE-2026-58099Not yet scoredMemory safety bugs in kqueue copy-on-fork implementation
Assigned by freebsd
Oct 15, 2026
CVE-2026-58098High 8.4Heap out-of-bounds access in semop(2)
Assigned by freebsd
Oct 15, 2026
CVE-2026-58094High 7.8TOCTOU race in POSIX shared memory large page configuration
Assigned by freebsd
Aug 26, 2026
CVE-2026-58093High 7.0Kernel use-after-free via tty ioctls
Assigned by freebsd
Aug 26, 2026
CVE-2026-58097High 7.8ppp(8): missing length validation in mp_SetEnddisc()
Assigned by freebsd
Aug 26, 2026
CVE-2026-58096High 8.8ppp(8): missing length validation in LcpDecodeConfig()
Assigned by freebsd
Aug 26, 2026
CVE-2026-58095High 8.8ppp(8): incorrect length calculation in mp_Enddisc()
Assigned by freebsd
Aug 26, 2026
CVE-2026-58092High 8.1Unauthorized credential switching
Assigned by freebsd
Aug 26, 2026
CVE-2026-58091High 7.8Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl
Assigned by freebsd
Aug 26, 2026
CVE-2026-58090High 7.8Use-after-free in unix SOCK_STREAM message handling
Assigned by freebsd
Aug 26, 2026
CVE-2026-58089High 7.8hwpmc fails to detach PMCs during exec credential transitions
Assigned by freebsd
Aug 26, 2026
CVE-2026-58088High 7.4Race condition in ELF core dump segment counting
Assigned by freebsd
Aug 19, 2026
CVE-2026-58087High 7.8Heap out-of-bounds access in semctl(2)
Assigned by freebsd
Aug 19, 2026
CVE-2026-58086High 8.1ktrace(2) privilege incorrectly validated in jails
Assigned by freebsd
Aug 19, 2026
CVE-2026-58085High 7.5Missing MAC validation in wg(4) packet decryption
Assigned by freebsd
Aug 19, 2026
CVE-2026-58084Medium 5.5Kernel stack disclosure via timer_settime(2)
Assigned by freebsd
Aug 19, 2026
CVE-2026-58083High 8.4Use-after-free in kqueue copy-on-fork
Assigned by freebsd
Aug 19, 2026
CVE-2026-58082Critical 9.8Stack based buffer overflow in iconv(3)
Assigned by freebsd
Aug 19, 2026
CVE-2026-58081Critical 9.8Heap based buffer overflow in iconv(3)
Assigned by freebsd
Aug 19, 2026
CVE-2026-49425Medium 5.5Kernel stack disclosure in 32-bit compatibility support
Assigned by freebsd
Aug 19, 2026
CVE-2026-49424Medium 5.5Kernel stack disclosure in Linux compatibility layer
Assigned by freebsd
Aug 19, 2026
CVE-2026-49423Low 3.3Remote DOS via uninitialized memory access in KTLS receive
Assigned by freebsd
Aug 19, 2026
CVE-2026-49426Low 3.3Incorrect audit records for ptrace(2) syscall requests
Assigned by freebsd
Aug 19, 2026
CVE-2026-49428High 8.4posixshm: system calls can incorrectly free memory of largepage objects
Assigned by freebsd
Aug 19, 2026
CVE-2026-49427High 8.8posixshm: largepage shared memory objects not explicitly wired
Assigned by freebsd
Aug 19, 2026
CVE-2026-49422High 8.4Use-after-free in TCP RACK stack option handler
Assigned by freebsd
Aug 19, 2026
CVE-2026-49421High 7.1unlinkat(2) ignores AT_RESOLVE_BENEATH flag
Assigned by freebsd
Aug 19, 2026
CVE-2026-49420High 8.8Buffer overflow in libalias RTSP handler
Assigned by freebsd
Aug 19, 2026
CVE-2026-49431Low 3.3Incorrect user validation in ZFS_IOC_SET_PROP ioctl
Assigned by freebsd
Aug 19, 2026
CVE-2026-49430High 7.8Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl
Assigned by freebsd
Aug 19, 2026
CVE-2026-49429High 7.8Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl
Assigned by freebsd
Aug 19, 2026
CVE-2026-49415High 8.8Local privilege escalation via execve(2) TOCTOU race
Assigned by freebsd
Aug 19, 2026
CVE-2026-49419High 8.8Jail reference count underflow
Assigned by freebsd
Aug 19, 2026
CVE-2026-49418High 8.8Use-after-free in device pager page list
Assigned by freebsd
Aug 19, 2026
CVE-2026-49416High 7.8The CONS_HISTORY ioctl handler did not adequately validate the requested history size.Jun 27, 2026
CVE-2026-49414High 7.8The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before.Jun 27, 2026
CVE-2026-49417High 7.0Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid.Jun 27, 2026
CVE-2026-49413High 7.1The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag.Jun 27, 2026
CVE-2026-49412High 7.8The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the lock.Jun 27, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.