2026 CVEs (page 171)
Page 171 of 668 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80674 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUT… |
CVE-2026-80673 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() When resolvi… |
CVE-2026-80672 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfs_check_restart_area() validates… |
CVE-2026-80671 | Critical | 9.3 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy, and BUG_ON register_pid() has several is… |
CVE-2026-80670 | Critical | 9.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in machine__resolve() machine__resolve() acc… |
CVE-2026-80669 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment BPF LSM programs can currently attach to… | |
CVE-2026-80668 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use conntrack GC to reap expectations This patch replaces… |
CVE-2026-80667 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error mlx5_mpesw_work() returned w… | |
CVE-2026-80666 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: sco: Fix a race condition in sco_sock_timeout() sco_sock_timeout() runs asynch… | |
CVE-2026-80665 | High | 7.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN kvm_handle_vncr_abor… |
CVE-2026-80664 | High | 7.3 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target families xt_nat SNAT and DNAT target handler… |
CVE-2026-80663 | High | 7.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfil… |
CVE-2026-80662 | High | 7.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capa… |
CVE-2026-80661 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TP_printk() The trace events in driver… |
CVE-2026-80660 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ lock occ_active(false) and occ_shutdown… | |
CVE-2026-80659 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmd_mutex is unlocked vub300_cmndwork_thread() holds cmd_m… | |
CVE-2026-80658 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Attempting to access driver dat… | |
CVE-2026-80657 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The manageme… | |
CVE-2026-80656 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in [1… |
CVE-2026-80655 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_power driver registers h… | |
CVE-2026-80654 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mb… | |
CVE-2026-80653 | High | 8.4 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destroy interface for v3 hw WARNING is triggered when executing… |
CVE-2026-80652 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH… | |
CVE-2026-80651 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL dsm_create() initially ch… | |
CVE-2026-80650 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235_probe() handles its error paths in… | |
CVE-2026-80649 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not valid… |
CVE-2026-80648 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemit_pin_set_config spacemit_pin_set_config() lo… | |
CVE-2026-80647 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by ib_alloc_cq() always have a… | |
CVE-2026-80646 | High | 7.5 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() c… |
CVE-2026-80645 | High | 8.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() With a list_for_each() loop… |
CVE-2026-80644 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUG_ON an invalid journal dinode [BUG] A fuzzed OCFS2 image can corrupt the… | |
CVE-2026-80643 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release() When unloading the igen6_edac driver… | |
CVE-2026-80642 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in live… | |
CVE-2026-80641 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK… | |
CVE-2026-80640 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime assertion in cxlctl_get_supported_features()… | |
CVE-2026-80639 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic Fix a runtime assertion in setup_xor_mapping(). Fortify com… | |
CVE-2026-80638 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent [BUG] Unlinking a refcount… |
CVE-2026-80637 | High | 7.5 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use get_unaligne… |
CVE-2026-80636 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not… | |
CVE-2026-80635 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response… |
CVE-2026-80634 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag The DEV_PATH_BR_VLA… |
CVE-2026-80633 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dma_resv lock before dma_buf_unpin() in release path dma_buf_unpin() requir… |
CVE-2026-80632 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() When MT76_NPU… | |
CVE-2026-80631 | High | 7.5 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzo_decompress_… |
CVE-2026-80630 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restorin… |
CVE-2026-80629 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntr_map KASAN prints below splat. This is caused by… | |
CVE-2026-80628 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q->lock snd_seq_oss_readq_clear() resets… |
CVE-2026-80627 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maar_res_walk() maar_res_walk() uses wi->num_cfg as… | |
CVE-2026-80626 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del fsl_emb_pmu_del() unconditio… | |
CVE-2026-80625 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver remo… | |
CVE-2026-80624 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was rece… | |
CVE-2026-80623 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely… | |
CVE-2026-80622 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclk_cleanup() This patch improves the module cleanup… |
CVE-2026-80621 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capabili… | |
CVE-2026-80620 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13… | |
CVE-2026-80619 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aa_replace_profiles The function aa_replace_profiles was a… |
CVE-2026-80618 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpu_amdkfd_gpuvm_free_memo… | |
CVE-2026-80617 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer… |
CVE-2026-80616 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() It's pointless… | |
CVE-2026-80615 | High | 8.2 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone kmalloc_flex() i… |
CVE-2026-80614 | High | 7.5 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe Move devm_request_irq() after devm_… |
CVE-2026-80613 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdp_rxq_in… |
CVE-2026-80612 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passi… |
CVE-2026-80611 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as __cpuidle When function tracing or Kpro… | |
CVE-2026-80610 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_vsi is zero For i.MX94 series, all the… | |
CVE-2026-80609 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access. |
CVE-2026-80608 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When force_iova mode… |
CVE-2026-80607 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Sashiko found that user can cause… | |
CVE-2026-80606 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_lock for write on inject test path When CONFIG_DRM_XE_USERP… |
CVE-2026-80605 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send… | |
CVE-2026-80604 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbered reports When a caller passes a siz… |
CVE-2026-80603 | Critical | 9.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse_dcc() treats data_… |
CVE-2026-80602 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branche… | |
CVE-2026-80601 | High | 8.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called… |
CVE-2026-80600 | Critical | 9.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called… |
CVE-2026-80599 | High | 8.1 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_get_vid() accesses the… |
CVE-2026-80598 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate arra… |
CVE-2026-80597 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtd_info contain… | |
CVE-2026-80596 | High | 8.4 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was co… |
CVE-2026-80595 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from devic… | |
CVE-2026-80594 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver p… | |
CVE-2026-80593 | High | 8.4 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk_ec_present() walks… |
CVE-2026-80592 | | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on to… | |
CVE-2026-80591 | High | 7.8 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before r… |
CVE-2026-80590 | High | 8.6 | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap… |
CVE-2026-79996 | High | 7.2 | 2026-08-28 | The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated us… |
CVE-2026-79995 | Medium | 4.3 | 2026-08-28 | The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the… |
CVE-2026-79706 | Medium | 5.3 | 2026-08-28 | The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, all… |
CVE-2026-79615 | Low | 2.7 | 2026-08-28 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API… |
CVE-2026-78238 | Medium | 5.4 | 2026-08-28 | SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product. |
CVE-2026-78032 | Critical | 9.8 | 2026-08-28 | SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege. |
CVE-2026-77838 | Medium | 5.4 | 2026-08-28 | SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product. |
CVE-2026-77701 | Medium | 5.3 | 2026-08-28 | The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated user… |
CVE-2026-76581 | Critical | 9.8 | 2026-08-28 | The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and… |
CVE-2026-73827 | Medium | 5.4 | 2026-08-28 | SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product. |
CVE-2026-6286 | High | 7.2 | 2026-08-28 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in version… |
CVE-2026-5097 | High | 7.5 | 2026-08-28 | The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to i… |
CVE-2026-4246 | Medium | 6.1 | 2026-08-28 | The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all version… |
CVE-2026-40541 | Critical | 9.0 | 2026-08-28 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22… |
CVE-2026-19423 | High | 8.1 | 2026-08-28 | The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a profile form permits… |