CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:50 UTC )
This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
952 CVEs, showing 1 to 50 Page 1 of 20 Next CVE Severity Title Published CVE-2026-64560 High 7.8 posix-cpu-timers: Prevent UAF caused by non-leader exec() race Assigned by Linux
Jul 29, 2026 CVE-2026-53362 Known exploited
High 7.8 ipv6: account for fraggap on the paged allocation path Assigned by Linux
Jul 4, 2026 CVE-2026-53358 High 8.8 Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() Assigned by Linux
Jul 2, 2026 CVE-2026-53356 High 7.8 drm/i915/gem: Fix phys BO pread/pwrite with offset Assigned by Linux
Jul 1, 2026 CVE-2026-53352 Medium 4.7 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() Assigned by Linux
Jul 1, 2026 CVE-2026-53350 Medium 5.5 ASoC: wm_adsp: Fix NULL dereference when removing firmware controls Assigned by Linux
Jul 1, 2026 CVE-2026-53349 Medium 5.5 netfilter: nf_conntrack: destroy stale expectfn expectations on unregister Assigned by Linux
Jul 1, 2026 CVE-2026-53337 Medium 5.5 net: bonding: fix NULL pointer dereference in bond_do_ioctl() Assigned by Linux
Jul 1, 2026 CVE-2026-53325 Medium 5.5 agp/amd64: Fix broken error propagation in agp_amd64_probe() Assigned by Linux
Jun 29, 2026 CVE-2026-53275 High 8.8 ipv6: mcast: Fix use-after-free when processing MLD queries Assigned by Linux
Jun 25, 2026 CVE-2026-53269 Medium 5.5 netfilter: synproxy: add mutex to guard hook reference counting Assigned by Linux
Jun 25, 2026 CVE-2026-53268 High 8.2 netfilter: conntrack_irc: fix possible out-of-bounds read Assigned by Linux
Jun 25, 2026 CVE-2026-53265 High 7.8 dm cache policy smq: check allocation under invalidate lock Assigned by Linux
Jun 25, 2026 CVE-2026-53264 High 7.8 net/sched: act_api: use RCU with deferred freeing for action lifecycle Assigned by Linux
Jun 25, 2026 CVE-2026-53263 Medium 5.5 6lowpan: fix off-by-one in multicast context address compression Assigned by Linux
Jun 25, 2026 CVE-2026-53256 High 8.0 Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() Assigned by Linux
Jun 25, 2026 CVE-2026-53255 High 7.1 Bluetooth: MGMT: validate advertising TLV before type checks Assigned by Linux
Jun 25, 2026 CVE-2026-53254 High 8.1 Bluetooth: RFCOMM: validate skb length in MCC handlers Assigned by Linux
Jun 25, 2026 CVE-2026-53253 High 7.1 Bluetooth: bnep: reject short frames before parsing Assigned by Linux
Jun 25, 2026 CVE-2026-53249 Medium 5.5 ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options Assigned by Linux
Jun 25, 2026 CVE-2026-53245 Medium 5.5 net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr Assigned by Linux
Jun 25, 2026 CVE-2026-53242 High 7.8 ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams Assigned by Linux
Jun 25, 2026 CVE-2026-53239 High 7.8 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Assigned by Linux
Jun 25, 2026 CVE-2026-53236 Medium 5.5 tcp: restrict SO_ATTACH_FILTER to priv users Assigned by Linux
Jun 25, 2026 CVE-2026-53228 Critical 9.8 ipv6: sit: reload inner IPv6 header after GSO offloads Assigned by Linux
Jun 25, 2026 CVE-2026-53227 Medium 5.5 net: openvswitch: fix possible kfree_skb of ERR_PTR Assigned by Linux
Jun 25, 2026 CVE-2026-53225 Critical 9.1 sctp: fix uninit-value in __sctp_rcv_asconf_lookup() Assigned by Linux
Jun 25, 2026 CVE-2026-53221 Critical 9.8 ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Assigned by Linux
Jun 25, 2026 CVE-2026-53219 Medium 5.5 netfilter: x_tables: avoid leaking percpu counter pointers Assigned by Linux
Jun 25, 2026 CVE-2026-53218 Medium 5.5 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag Assigned by Linux
Jun 25, 2026 CVE-2026-53212 High 7.8 netfilter: nft_tunnel: fix use-after-free on object destroy Assigned by Linux
Jun 25, 2026 CVE-2026-53208 Medium 5.5 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig Assigned by Linux
Jun 25, 2026 CVE-2026-53198 High 8.8 ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL Assigned by Linux
Jun 25, 2026 CVE-2026-53192 High 7.8 ALSA: timer: Fix UAF at snd_timer_user_params() Assigned by Linux
Jun 25, 2026 CVE-2026-53184 High 7.5 udp: clear skb->dev before running a sockmap verdict Assigned by Linux
Jun 25, 2026 CVE-2026-53183 High 7.5 mptcp: allow subflow rcv wnd to shrink Assigned by Linux
Jun 25, 2026 CVE-2026-53181 Medium 5.5 vsock/vmci: fix sk_ack_backlog leak on failed handshake Assigned by Linux
Jun 25, 2026 CVE-2026-53177 Medium 5.5 bnxt_en: Fix NULL pointer dereference Assigned by Linux
Jun 25, 2026 CVE-2026-53168 Medium 5.5 fuse: reject fuse_notify() pagecache ops on directories Assigned by Linux
Jun 25, 2026 CVE-2026-53167 Medium 5.5 fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios Assigned by Linux
Jun 25, 2026 CVE-2026-53150 Medium 5.5 thunderbolt: Reject zero-length property entries in validator Assigned by Linux
Jun 25, 2026 CVE-2026-53149 High 7.1 thunderbolt: Bound root directory content to block size Assigned by Linux
Jun 25, 2026 CVE-2026-53148 High 7.0 thunderbolt: Clamp XDomain response data copy to allocation size Assigned by Linux
Jun 25, 2026 CVE-2026-53147 High 8.1 thunderbolt: Validate XDomain request packet size before type cast Assigned by Linux
Jun 25, 2026 CVE-2026-53146 High 7.1 thunderbolt: Limit XDomain response copy to actual frame size Assigned by Linux
Jun 25, 2026 CVE-2026-53131 Critical 9.4 netfilter: require Ethernet MAC header before using eth_hdr() Assigned by Linux
Jun 25, 2026 CVE-2026-53080 Medium 5.5 net/sched: cls_fw: fix NULL dereference of "old" filters before change() Assigned by Linux
Jun 24, 2026 CVE-2026-52948 Medium 5.5 i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl Assigned by Linux
Jun 24, 2026 CVE-2026-52947 High 7.8 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove Assigned by Linux
Jun 24, 2026 CVE-2026-52946 High 7.5 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling Assigned by Linux
Jun 24, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
