CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:30 UTC )
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:scalance_xcm_xrm_xch_xrh_300_family . Show all products
187 CVEs, showing 1 to 50 Page 1 of 4 Next CVE Severity Title Published CVE-2024-8176 High 7.5 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat Assigned by redhat
Mar 14, 2025 CVE-2025-21694 Medium 5.5 fs/proc: fix softlockup in __read_vmcore (part 2) Assigned by Linux
Feb 12, 2025 CVE-2024-57951 High 7.8 hrtimers: Handle CPU state correctly on hotplug Assigned by Linux
Feb 12, 2025 CVE-2025-21692 High 7.8 net: sched: fix ets qdisc OOB Indexing Assigned by Linux
Feb 10, 2025 CVE-2024-52332 High 7.1 igb: Fix potential invalid memory access in igb_init_module() Assigned by Linux
Jan 11, 2025 CVE-2024-48881 Medium 5.5 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Assigned by Linux
Jan 11, 2025 CVE-2024-56780 Medium 5.5 quota: flush quota_release_work upon quota writeback Assigned by Linux
Jan 8, 2025 CVE-2024-56770 Medium 5.5 net/sched: netem: account for backlog updates from child qdisc Assigned by Linux
Jan 8, 2025 CVE-2024-56650 High 7.1 netfilter: x_tables: fix LED ID check in led_tg_check() Assigned by Linux
Dec 27, 2024 CVE-2024-56644 High 7.5 net/ipv6: release expired exception dst cached in socket Assigned by Linux
Dec 27, 2024 CVE-2024-56606 High 7.8 af_packet: avoid erroring out after sock_init_data() in packet_create() Assigned by Linux
Dec 27, 2024 CVE-2024-56601 High 7.8 net: inet: do not leave a dangling sk pointer in inet_create() Assigned by Linux
Dec 27, 2024 CVE-2024-56600 High 7.8 net: inet6: do not leave a dangling sk pointer in inet6_create() Assigned by Linux
Dec 27, 2024 CVE-2024-56570 High 7.8 ovl: Filter invalid inodes with missing lookup function Assigned by Linux
Dec 27, 2024 CVE-2024-56569 Medium 5.5 ftrace: Fix regression with module command in stack_trace_filter Assigned by Linux
Dec 27, 2024 CVE-2024-53165 High 7.4 sh: intc: Fix use-after-free bug in register_intc_controller() Assigned by Linux
Dec 27, 2024 CVE-2024-53101 Medium 5.5 fs: Fix uninitialized value issue in from_kuid and from_kgid Assigned by Linux
Nov 25, 2024 CVE-2024-53057 High 7.8 net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Assigned by Linux
Nov 19, 2024 CVE-2024-50301 High 7.8 security/keys: fix slab-out-of-bounds in key_task_permission Assigned by Linux
Nov 19, 2024 CVE-2024-50299 High 8.2 sctp: properly validate chunk size in sctp_sf_ootb() Assigned by Linux
Nov 19, 2024 CVE-2024-50262 High 7.8 bpf: Fix out-of-bounds write in trie_get_next_key() Assigned by Linux
Nov 9, 2024 CVE-2024-50251 Medium 6.2 netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Assigned by Linux
Nov 9, 2024 CVE-2024-50188 High 7.8 net: phy: dp83869: fix memory corruption when enabling fiber Assigned by Linux
Nov 8, 2024 CVE-2024-50095 High 7.5 RDMA/mad: Improve handling of timed out WRs of mad agent Assigned by Linux
Nov 5, 2024 CVE-2024-50602 Medium 5.9 An issue was discovered in libexpat before 2.6.4. Assigned by mitre
Oct 27, 2024 CVE-2024-50046 Critical 9.8 NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() Assigned by Linux
Oct 21, 2024 CVE-2024-50045 High 7.5 netfilter: br_netfilter: fix panic with metadata_dst skb Assigned by Linux
Oct 21, 2024 CVE-2024-50040 Medium 5.5 igb: Do not bring the device up after non-fatal error Assigned by Linux
Oct 21, 2024 CVE-2024-50039 High 7.8 net/sched: accept TCA_STAB only for root qdisc Assigned by Linux
Oct 21, 2024 CVE-2024-50035 High 7.1 ppp: fix ppp_async_encode() illegal access Assigned by Linux
Oct 21, 2024 CVE-2024-50033 Critical 9.8 slip: make slhc_remember() more robust against malicious packets Assigned by Linux
Oct 21, 2024 CVE-2024-50015 Medium 5.5 ext4: dax: fix overflowing extents beyond inode size when partially writing Assigned by Linux
Oct 21, 2024 CVE-2024-50006 Medium 4.7 ext4: fix i_data_sem unlock order in ext4_ind_migrate() Assigned by Linux
Oct 21, 2024 CVE-2024-50001 High 7.8 net/mlx5: Fix error path in multi-packet WQE transmit Assigned by Linux
Oct 21, 2024 CVE-2024-49997 High 7.5 net: ethernet: lantiq_etop: fix memory disclosure Assigned by Linux
Oct 21, 2024 CVE-2024-49982 High 8.8 aoe: fix the potential use-after-free problem in more places Assigned by Linux
Oct 21, 2024 CVE-2024-49977 Medium 5.5 net: stmmac: Fix zero-division error when disabling tc cbs Assigned by Linux
Oct 21, 2024 CVE-2024-49955 Medium 5.5 ACPI: battery: Fix possible crash when unregistering a battery hook Assigned by Linux
Oct 21, 2024 CVE-2024-49952 High 7.8 netfilter: nf_tables: prevent nf_skb_duplicated corruption Assigned by Linux
Oct 21, 2024 CVE-2024-49949 Medium 5.5 net: avoid potential underflow in qdisc_pkt_len_init() with UFO Assigned by Linux
Oct 21, 2024 CVE-2024-49948 Medium 5.5 net: add more sanity checks to qdisc_pkt_len_init() Assigned by Linux
Oct 21, 2024 CVE-2024-49944 Medium 5.5 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start Assigned by Linux
Oct 21, 2024 CVE-2024-49889 High 7.8 ext4: avoid use-after-free in ext4_ext_show_leaf() Assigned by Linux
Oct 21, 2024 CVE-2024-49884 High 7.8 ext4: fix slab-use-after-free in ext4_split_extent_at() Assigned by Linux
Oct 21, 2024 CVE-2024-49881 Medium 5.5 ext4: update orig_path in ext4_find_extent() Assigned by Linux
Oct 21, 2024 CVE-2024-49851 Medium 5.5 tpm: Clean up TPM space after command failure Assigned by Linux
Oct 21, 2024 CVE-2024-47747 High 7.8 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition Assigned by Linux
Oct 21, 2024 CVE-2024-47735 Medium 5.5 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Assigned by Linux
Oct 21, 2024 CVE-2024-47710 Medium 5.5 sock_map: Add a cond_resched() in sock_hash_free() Assigned by Linux
Oct 21, 2024 CVE-2024-47709 Medium 5.5 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). Assigned by Linux
Oct 21, 2024
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
