2026 CVEs (page 321)
Page 321 of 462 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-35342 | Low | 3.3 | 2026-04-22 | The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR i… |
CVE-2026-35341 | High | 7.1 | 2026-04-22 | A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO becaus… |
CVE-2026-35340 | Medium | 5.5 | 2026-04-22 | A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The fin… |
CVE-2026-35339 | Medium | 5.5 | 2026-04-22 | The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is deter… |
CVE-2026-35338 | High | 7.3 | 2026-04-22 | A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the… |
CVE-2026-32885 | Medium | 6.5 | 2026-04-22 | DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `U… |
CVE-2026-1660 | Medium | 6.5 | 2026-04-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certai… |
CVE-2026-30139 | Medium | 6.1 | 2026-04-22 | A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute ar… |
CVE-2026-35548 | High | 8.5 | 2026-04-22 | An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0). A logic flaw allowed stored d… |
CVE-2026-6862 | Medium | 5.5 | 2026-04-22 | A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4… |
CVE-2026-6861 | Medium | 6.1 | 2026-04-22 | A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS… |
CVE-2026-6859 | High | 8.8 | 2026-04-22 | A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This allows a remote atta… |
CVE-2026-6356 | Critical | 9.6 | 2026-04-22 | A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, ena… |
CVE-2026-6355 | Medium | 6.5 | 2026-04-22 | A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct… |
CVE-2026-5750 | | 2026-04-22 | An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other r… | |
CVE-2026-5749 | | 2026-04-22 | Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interac… | |
CVE-2026-41651 | High | 8.8 | 2026-04-22 | PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit betw… |
CVE-2026-33611 | Medium | 6.5 | 2026-04-22 | An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database… |
CVE-2026-33610 | Medium | 5.9 | 2026-04-22 | A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request… |
CVE-2026-33609 | Medium | 5.3 | 2026-04-22 | Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees. |
CVE-2026-33608 | High | 7.4 | 2026-04-22 | An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration t… |
CVE-2026-33602 | Medium | 6.5 | 2026-04-22 | A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading t… |
CVE-2026-33599 | Low | 3.1 | 2026-04-22 | A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newS… |
CVE-2026-33598 | Medium | 4.8 | 2026-04-22 | A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache. |
CVE-2026-33597 | Low | 3.7 | 2026-04-22 | PRSD detection denial of service |
CVE-2026-33596 | Low | 3.1 | 2026-04-22 | A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed que… |
CVE-2026-33595 | Medium | 5.3 | 2026-04-22 | A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not prop… |
CVE-2026-33594 | Medium | 5.3 | 2026-04-22 | A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate int… |
CVE-2026-33593 | High | 7.5 | 2026-04-22 | A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query. |
CVE-2026-33254 | Medium | 5.3 | 2026-04-22 | An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service… |
CVE-2026-31530 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parent_port in cxl_detach_ep() cxl_detach_ep() is called… |
CVE-2026-31529 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Failing the first sysfs_update_group() ne… |
CVE-2026-31528 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: perf: Make sure to use pmu_ctx->pmu for groups Oliver reported that x86_pmu_del() ended u… |
CVE-2026-31527 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: driver core: platform: use generic driver_override infrastructure When a driver is probed… |
CVE-2026-31526 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs process_bpf_exit_full() passes check_l… |
CVE-2026-31525 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's si… |
CVE-2026-31524 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was… |
CVE-2026-31523 | Medium | 4.7 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at… |
CVE-2026-31522 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fix… |
CVE-2026-31521 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is out of bounds The module loader doesn'… |
CVE-2026-31520 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function w… |
CVE-2026-31519 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a num… |
CVE-2026-31518 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full… |
CVE-2026-31517 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_con… |
CVE-2026-31516 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policy_hthresh.work from racing with netns teardown A XFRM_MSG_NEWSPDINFO r… |
CVE-2026-31515 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate() syzbot was able to trigger a crash in s… |
CVE-2026-31514 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case For file-backed mount, IO requests are ha… |
CVE-2026-31513 | High | 8.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Syzbot reported a… |
CVE-2026-31512 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() … |
CVE-2026-31511 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixe… |
CVE-2026-31510 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Before using sk pointer, chec… |
CVE-2026-31509 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes… |
CVE-2026-31508 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the… |
CVE-2026-31507 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_… |
CVE-2026-31506 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was insta… |
CVE-2026-31505 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() iavf incorrectly uses real_num… |
CVE-2026-31504 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` has a race… |
CVE-2026-31503 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using hash2 When binding a udp_sock to a local… |
CVE-2026-31502 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f7254… |
CVE-2026-31501 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path cppi5_hdesc_get_p… |
CVE-2026-31500 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock btintel_hw_error(… |
CVE-2026-31499 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() l2cap_conn_del() calls cancel_delayed_… |
CVE-2026-31498 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop l2cap_config_req() proc… |
CVE-2026-31497 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indices btusb_work() maps the number of acti… |
CVE-2026-31496 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations in other netns via proc Skip expectatio… |
CVE-2026-31495 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use netlink policy range checks Replace manual range and mask valid… |
CVE-2026-31494 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between th… |
CVE-2026-31493 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the… |
CVE-2026-31492 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_… |
CVE-2026-31491 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in… |
CVE-2026-31490 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_srio… |
CVE-2026-31489 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the control… |
CVE-2026-31488 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commi… |
CVE-2026-31487 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: spi: use generic driver_override infrastructure When a driver is probed through __driver_… |
CVE-2026-31486 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) Protect regulator operations with mutex The regulator operations pmbu… |
CVE-2026-31485 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue (UAF) There is a teardown order issue in the… |
CVE-2026-31484 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check __io_uring_show_fdinfo() iterates o… |
CVE-2026-31483 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is… |
CVE-2026-31482 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Before commit f33f2d4c7c80 ("s390/bp: remo… |
CVE-2026-31481 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registr… |
CVE-2026-31480 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with osnoise The following sequence may le… |
CVE-2026-31479 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next During 3D workload, user is reporting hittin… |
CVE-2026-31478 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After th… |
CVE-2026-31477 | High | 7.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leaks and NULL deref in smb2_lock() smb2_lock() has three error handlin… |
CVE-2026-31476 | High | 8.2 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: do not expire session on binding failure When a multichannel session binding reque… |
CVE-2026-31475 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL chec… |
CVE-2026-31474 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() isotp_sendmsg() uses only cmpxch… |
CVE-2026-31473 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex MEDIA_REQUEST_IOC_REIN… |
CVE-2026-31472 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Add validation of the inn… |
CVE-2026-31471 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: only publish mode_data after clone setup iptfs_clone_state() stores x->mode_… |
CVE-2026-31470 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host cont… |
CVE-2026-31469 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false … |
CVE-2026-31468 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfio_pci_core_feature… |
CVE-2026-31467 | High | 7.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: erofs: add GFP_NOIO in the bio completion if needed The bio completion path in the proces… |
CVE-2026-31466 | Medium | 4.7 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() On arm64 server, we found f… |
CVE-2026-31465 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_… |
CVE-2026-31464 | High | 8.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() A malicious or compromised… |
CVE-2026-31463 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: iomap: fix invalid folio access when i_blkbits differs from I/O granularity Commit aa35dd… |
CVE-2026-31462 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue wh… |
CVE-2026-31461 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is connected, aconnect… |