2026 CVEs (page 413)
Page 413 of 445 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23173 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iter… |
CVE-2026-23172 | High | 8.4 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the… |
CVE-2026-23171 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-… |
CVE-2026-23170 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: drm/imx/tve: fix probe device leak Make sure to drop the reference taken to the DDC devic… |
CVE-2026-23169 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes… |
CVE-2026-23168 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq safe Bernd has reported a lockdep splat… |
CVE-2026-23167 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat… |
CVE-2026-23166 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues Add NULL pointer checks in i… |
CVE-2026-23165 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix deadlock in RSS config read Since cited commit, core locks the net_device's rss_… |
CVE-2026-23164 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: rocker: fix memory leak in rocker_world_port_post_fini() In rocker_world_port_pre_init()… |
CVE-2026-23163 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove On APUs such… |
CVE-2026-23162 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/nvm: Fix double-free on aux add failure After a successful auxiliary_device_init()… |
CVE-2026-23161 | High | 7.3 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix race of truncate and swap entry split The helper for shmem swap freei… |
CVE-2026-23160 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix memory leak in octep_device_setup() In octep_device_setup(), if octep_ctrl… |
CVE-2026-23159 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: perf: sched: Fix perf crash with new is_user_task() helper In order to do a user space st… |
CVE-2026-23158 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix UAF in configfs release path The gpio-virtuser configfs release path… |
CVE-2026-23157 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages [BUG] The… |
CVE-2026-23156 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns s… |
CVE-2026-23155 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 (… |
CVE-2026-23154 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling… |
CVE-2026-23153 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is en… |
CVE-2026-23152 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: correctly decode TTLM with default link map TID-To-Link Mapping (TTLM) el… |
CVE-2026-23151 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix memory leak in set_ssp_complete Fix memory leak in set_ssp_complete(… |
CVE-2026-23150 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). syzbot reported various memory leaks… |
CVE-2026-23149 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() S… |
CVE-2026-23148 | High | 7.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference There is a race c… |
CVE-2026-23147 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix the folio leak on S390 hardware acceleration [BUG] After commit aa60fe12… |
CVE-2026-23146 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets… |
CVE-2026-23145 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_ino… |
CVE-2026-23144 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON s… |
CVE-2026-23143 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix misalignment bug in struct virtnet_info Use the new TRAILING_OVERLAP() he… |
CVE-2026-23142 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure When a… |
CVE-2026-23141 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in range_is_hole_in_parent() Before accessing the d… |
CVE-2026-23140 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Subtract size of xdp_frame from allowed metadata size The xdp_frame struct… |
CVE-2026-23139 | High | 7.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only when GC has been performed Currently last_gc… |
CVE-2026-23138 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add recursion protection in kernel stack trace recording A bug was reported abou… |
CVE-2026-23137 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolv… |
CVE-2026-23136 | High | 7.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is ab… |
CVE-2026-23135 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dma_free_coherent() pointer dma_alloc_coherent() allocates a DMA mapped… |
CVE-2026-23134 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: slab: fix kmalloc_nolock() context check for PREEMPT_RT On PREEMPT_RT kernels, local_lock… |
CVE-2026-23133 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: fix dma_free_coherent() pointer dma_alloc_coherent() allocates a DMA mapped… |
CVE-2026-23132 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind Fix several issues in dw_dp_bi… |
CVE-2026-23131 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names The hp-bioscfg d… |
CVE-2026-23130 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit [1] converted the man… |
CVE-2026-23129 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: dpll: Prevent duplicate registrations Modify the internal registration helpers dpll_xa_re… |
CVE-2026-23128 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: arm64: Set __nocfi on swsusp_arch_resume() A DABT is reported[1] on an android based syst… |
CVE-2026-23127 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix refcount warning on event->mmap_count increment When calling refcount_inc(&even… |
CVE-2026-23126 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix a race issue related to the operation on bpf_bound_progs list The netdevsi… |
CVE-2026-23125 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT A null-ptr-deref was repor… |
CVE-2026-23124 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: ipv6: annotate data-race in ndisc_router_discovery() syzbot found that ndisc_router_disco… |
CVE-2026-23123 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize src_node and dst_node to empty strings The debugfs_crea… |
CVE-2026-23122 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue The previous 7 KB per queue ca… |
CVE-2026-23121 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mISDN: annotate data-race around dev->work dev->work can re read locklessly in mISDN_read… |
CVE-2026-23120 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tp_tunnel_del_work() We should read sk->sk_socket only whe… |
CVE-2026-23119 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: bonding: provide a net pointer to __skb_flow_dissect() After 3cbf4ffba5ee ("net: plumb ne… |
CVE-2026-23118 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix data-race warning and potential load/store tearing Fix the following: … |
CVE-2026-23117 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: ice: add missing ice_deinit_hw() in devlink reinit path devlink-reload results in ice_ini… |
CVE-2026-23116 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platfo… |
CVE-2026-23115 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix not set tty->port race condition Revert commit bfc467db60b7 ("serial: remove… |
CVE-2026-23114 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: ptrace: Fix SVE writes on !SME systems When SVE is supported but SME is not… |
CVE-2026-23113 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Currently this is checked befor… |
CVE-2026-2312 | Medium | 4.3 | 2026-02-14 | The Media Library Folders plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 8.3.6 via the delete_max… |
CVE-2026-1512 | Medium | 6.4 | 2026-02-14 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's I… |
CVE-2026-1843 | High | 7.2 | 2026-02-14 | The Super Page Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Activity Log in all versions up to, and including, 5.2.2 due to… |
CVE-2026-1258 | Medium | 4.9 | 2026-02-14 | The Mail Mint plugin for WordPress is vulnerable to blind SQL Injection via the 'forms', 'automation', 'email/templates', and 'contacts/import/tutorlms/map' AP… |
CVE-2026-1254 | Medium | 4.3 | 2026-02-14 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6… |
CVE-2026-1249 | Medium | 5.0 | 2026-02-14 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery in versions 5.3 to 5.10… |
CVE-2026-0550 | Medium | 6.4 | 2026-02-14 | The myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mycred_load_coupon' shortcode in all versions up to, and includi… |
CVE-2026-2024 | High | 7.5 | 2026-02-14 | The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 0.4.1 due to insuff… |
CVE-2026-2022 | Medium | 4.3 | 2026-02-14 | The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'rednao_smart_forms_get_campaigns' A… |
CVE-2026-1988 | High | 7.5 | 2026-02-14 | The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.5 via th… |
CVE-2026-1987 | Medium | 5.4 | 2026-02-14 | The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.1.6. This is due to the `sc… |
CVE-2026-1985 | Medium | 6.4 | 2026-02-14 | The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gutenberg block in all versions up to, and including, 1.0.2. Thi… |
CVE-2026-1944 | Medium | 5.3 | 2026-02-14 | The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cbk_save() f… |
CVE-2026-1939 | Medium | 6.4 | 2026-02-14 | The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `percent_to_graph` shortcode in all versions up to, and incl… |
CVE-2026-1915 | Medium | 6.4 | 2026-02-14 | The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' parameter in the 'plyr' shortcode in all versions up to, and… |
CVE-2026-1910 | Medium | 6.4 | 2026-02-14 | The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lang' attribute of the 'upmenu-menu' sh… |
CVE-2026-1905 | Medium | 6.4 | 2026-02-14 | The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in the 'show_sphere_image' shortcode in all vers… |
CVE-2026-1903 | Medium | 6.4 | 2026-02-14 | The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout' attribute of the 'sb_ravelry_designs' shortcode i… |
CVE-2026-1901 | Medium | 6.4 | 2026-02-14 | The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'questionpro' shortcode in all versions up to, and including… |
CVE-2026-1796 | Medium | 6.1 | 2026-02-14 | The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 1.0.0 due to insuffi… |
CVE-2026-1795 | Medium | 6.1 | 2026-02-14 | The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL Path in all versions up to, and including, 1.0.0 due to in… |
CVE-2026-1792 | Medium | 6.1 | 2026-02-14 | The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path in all versions up to, and including, 1.0 due to insufficient… |
CVE-2026-1394 | Medium | 4.3 | 2026-02-14 | The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonc… |
CVE-2026-1306 | Critical | 9.8 | 2026-02-14 | The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action… |
CVE-2026-1303 | Medium | 5.3 | 2026-02-14 | The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capabil… |
CVE-2026-1187 | Medium | 6.4 | 2026-02-14 | The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filename' parameter of the 'zoomify' shortcode in all versions up… |
CVE-2026-1096 | Medium | 6.4 | 2026-02-14 | The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google_map_vi… |
CVE-2026-0753 | High | 7.2 | 2026-02-14 | The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and inc… |
CVE-2026-0751 | Medium | 6.4 | 2026-02-14 | The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricing_plan_select_text_font_family' par… |
CVE-2026-0745 | Medium | 5.5 | 2026-02-14 | The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL vali… |
CVE-2026-0736 | Medium | 6.4 | 2026-02-14 | The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_inpost_head_script[synth_header_script]'… |
CVE-2026-0735 | Medium | 4.4 | 2026-02-14 | The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_language_switch' parameter in all versions… |
CVE-2026-0727 | Medium | 5.4 | 2026-02-14 | The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the p… |
CVE-2026-0693 | Medium | 4.4 | 2026-02-14 | The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category descriptions in all versions up to, and… |
CVE-2026-0559 | Medium | 6.4 | 2026-02-14 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stm… |
CVE-2026-0557 | Medium | 6.4 | 2026-02-14 | The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpda_app' shortcode in all versions up to, and including… |
CVE-2026-1932 | Medium | 5.3 | 2026-02-14 | The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th… |
CVE-2026-2469 | High | 7.6 | 2026-02-14 | Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Com… |
CVE-2026-2144 | High | 8.1 | 2026-02-14 | The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugi… |