CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:00 UTC )
This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product zephyrproject_rtos:zephyr . Show all products
28 CVEs, showing 1 to 28
CVE Severity Title Published CVE-2026-13351 High 7.5 net: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packets Assigned by zephyr
Jun 25, 2026 CVE-2026-5068 High 7.6 bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_data Assigned by zephyr
Jun 9, 2026 CVE-2026-5067 Critical 9.8 Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key Assigned by zephyr
Jun 9, 2026 CVE-2026-5066 Medium 6.3 net: sockets: tls: Potential out-of-bounds write/read in socket_op_vtable::connect function Assigned by zephyr
Jun 4, 2026 CVE-2026-5589 Medium 6.3 Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem. Assigned by zephyr
Jun 4, 2026 CVE-2026-5071 Medium 6.1 can: Local Denial of Service via SocketCAN Send Assigned by zephyr
May 30, 2026 CVE-2026-5072 Medium 6.5 ptp: Potential Denial of Service via PTP Interval Shift Assigned by zephyr
May 22, 2026 CVE-2026-1681 Medium 6.1 net: Stack Overflow with Ping (to own IP Address) via Shell Assigned by zephyr
May 12, 2026 CVE-2026-1677 Medium 5.3 net: TLS 1.2 connections allowed on TLS 1.3 sockets Assigned by zephyr
May 11, 2026 CVE-2026-5590 Medium 6.4 net: ip/tcp: Null pointer dereference can be triggered by a race condition Assigned by zephyr
Apr 5, 2026 CVE-2026-1679 High 7.3 net: eswifi socket send payload length not bounded Assigned by zephyr
Mar 27, 2026 CVE-2026-4179 Medium 6.1 stm32: usb: Infinite while loop in Interrupt Handler Assigned by zephyr
Mar 14, 2026 CVE-2026-0849 Low 3.8 crypto: ATAES132A response length allows stack buffer overflow Assigned by zephyr
Mar 14, 2026 CVE-2026-1678 Critical 9.4 dns: memory‑safety issue in the DNS name parser Assigned by zephyr
Mar 5, 2026 CVE-2025-12899 Medium 6.5 net: icmp: Out of bound memory read Assigned by zephyr
Jan 30, 2026 CVE-2025-12035 Medium 6.5 Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP Assigned by zephyr
Dec 15, 2025 CVE-2025-9557 High 7.6 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont Assigned by zephyr
Nov 26, 2025 CVE-2025-9558 High 7.6 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start Assigned by zephyr
Nov 26, 2025 CVE-2025-9408 High 8.2 Userspace privilege escalation vulnerability on Cortex M Assigned by zephyr
Nov 11, 2025 CVE-2025-12890 Medium 6.5 Bluetooth: peripheral: Invalid handling of malformed connection request Assigned by zephyr
Nov 7, 2025 CVE-2025-10456 High 7.1 Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests Assigned by zephyr
Sep 19, 2025 CVE-2025-10458 High 7.6 Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values Assigned by zephyr
Sep 19, 2025 CVE-2025-7403 High 7.6 Bluetooth: bt_conn_tx_processor unsafe handling Assigned by zephyr
Sep 19, 2025 CVE-2025-10457 Medium 4.3 Bluetooth: Out-Of-Context le_conn_rsp Handling Assigned by zephyr
Sep 19, 2025 CVE-2025-2962 High 8.2 Infinite loop in dns_copy_qname Assigned by zephyr
Jun 24, 2025 CVE-2025-1675 High 8.2 Out of bounds read in dns_copy_qname Assigned by zephyr
Feb 25, 2025 CVE-2025-1674 High 8.2 Out of bounds read when unpacking DNS answers Assigned by zephyr
Feb 25, 2025 CVE-2025-1673 High 8.2 Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg Assigned by zephyr
Feb 25, 2025
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
