Search
151,644 CVEs · High severity
CVEs (151,644, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 151–175 of 151,644 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-98169 | HIGH | 7.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If snapshot_array_size is smaller than GM… | |
| CVE-2026-98166 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving their bulk_move range ttm_tt_swapout() returns the nu… | |
| CVE-2026-98164 | HIGH | Patched | 7.1 | 2026-09-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the su… |
| CVE-2026-98163 | HIGH | Patched | 7.8 | 2026-09-26 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero refcount The commit 260fbcb92bbea ("cgroup: Move dyin… |
| CVE-2026-9816 | HIGH | Patched | 8.3 | 2026-08-17 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields server-side on insert and archive-import paths which… |
| CVE-2026-98156 | HIGH | Patched | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no rela… |
| CVE-2026-98155 | HIGH | Patched | 7.1 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although 'commit 2feec5ae5df7 ("acce… |
| CVE-2026-98154 | HIGH | Patched | 7.0 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -EIO, the RDMA queue_rq path reports a host path erro… |
| CVE-2026-98150 | HIGH | Patched | 7.0 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the target CPU ID in the upper 32 bi… |
| CVE-2026-98149 | HIGH | Patched | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map up… |
| CVE-2026-98143 | HIGH | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPU_SET_{IFM,OFM}_PREC… | |
| CVE-2026-98136 | HIGH | Patched | 7.1 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table size ntfs_attr_find_in_attrdef() walks the in-memo… |
| CVE-2026-98130 | HIGH | Patched | 8.1 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_START handler checks timer_pending(… |
| CVE-2026-98122 | HIGH | Patched | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() vxlan_mdb_is_valid_source(), which valida… |
| CVE-2026-98116 | HIGH | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF snd_pcm_hw_params() and snd_pcm… | |
| CVE-2026-98115 | HIGH | Patched | 8.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on… |
| CVE-2026-98112 | HIGH | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket… | |
| CVE-2026-98108 | HIGH | 7.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan l2cap_new_connection() sets defaul… | |
| CVE-2026-98096 | HIGH | 7.4 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6_srh_rcv() runs with skb->data at t… | |
| CVE-2026-98093 | HIGH | Patched | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_params() enables mclk unconditionally and hw_free() d… |
| CVE-2026-9809 | HIGH | 7.6 | 2026-05-29 | A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (su… | |
| CVE-2026-98083 | HIGH | Patched | 7.0 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a RAID stripe extent f… |
| CVE-2026-9808 | HIGH | 7.1 | 2026-05-29 | An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles configured with owner-scope restrict… | |
| CVE-2026-98073 | HIGH | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). syzbot reported the … | |
| CVE-2026-98070 | HIGH | 8.1 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() rds_tcp_reset_callbacks() quiesces the trans… |