Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,206 vulnerabilities match.

CVESeveritySummary
CVE-2026-1033305.3 MediumSadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass
CVE-2026-1033135.3 MediumBitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler
CVE-2026-99216Not scoredDrivers: hv: Don't reset VMBus connection state on error/exit paths
CVE-2026-99215Not scoredpower: supply: core: prevent unregistering a power supply while a callback runs
CVE-2026-99214Not scoreddrm/vc4: hdmi: Move packet RAM enable to PM runtime
CVE-2026-99213Not scoredvsock: treat TCP_CLOSING as once-established
CVE-2026-99212Not scorednet/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
CVE-2026-99211Not scorednetlink: reset skb headers before unicast and multicast filtering
CVE-2026-99210Not scoredaccel/rocket: clear rdev on device init failure
CVE-2026-99209Not scoreddrm/xe: skip eviction of a BO with no resource
CVE-2026-99208Not scoreddrm/xe/oa: Zero OA buffer at allocation
CVE-2026-99207Not scoredscsi: target: Disable interrupts while holding delayed_cmd_lock
CVE-2026-99206Not scoredscsi: target: iscsi: Fix race in discovery auth updates
CVE-2026-99205Not scoredsched/core: Call wakeup_preempt() for queued tasks during class change
CVE-2026-99204Not scoredocfs2/dlm: Protect the recovery list during debugfs reads
CVE-2026-99203Not scoredpipe: preserve existing fasync readers on writer setup failure
CVE-2026-99202Not scoredscsi: libsas: Fix SMP IO deadlock during HA resume
CVE-2026-99201Not scorednetlink: avoid hashing the network namespace pointer
CVE-2026-99200Not scorednet: hisilicon: hisi_femac: Move setting of netops to fix crash
CVE-2026-99199Not scorednet: hisilicon: hip04_eth: Move setting of netops to fix crash
CVE-2026-99198Not scorednet: ethernet: actions: Move setting of netops to fix crash
CVE-2026-99197Not scorednet: mv643xx: move setting of netops to fix crash
CVE-2026-99196Not scorednet: au1000: move setting of netops to fix crash
CVE-2026-99195Not scorednet: ethoc: move setting of netops to fix crash
CVE-2026-99194Not scorednet: ethernet: aeroflex: move setting of netops to fix crash
CVE-2026-99193Not scorednet: ti: icssm-prueth: Move setting of netops to fix crash
CVE-2026-99192Not scorednet: bcmgenet: unshare the skb before writing the control block
CVE-2026-99191Not scoredcalipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
CVE-2026-99190Not scoredgpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
CVE-2026-99189Not scoredgpio: mxc: fix race between chained IRQ handler install and probe completion
CVE-2026-99188Not scorednet: stmmac: dwmac1000: clear the RGMII status interrupt
CVE-2026-99187Not scoredperf: Fix perf_pmu_migrate_context() leaving events behind
CVE-2026-99186Not scoredx86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()
CVE-2026-99185Not scoredfirewire: core: fix race condition in split transaction handling
CVE-2026-99184Not scoredaccel/rocket: search every core slot when a core is removed
CVE-2026-99183Not scoredaccel/rocket: search every core slot when looking up a scheduler
CVE-2026-99182Not scoredASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
CVE-2026-99181Not scoredautofs: ignore notification errors from a replaced pipe
CVE-2026-99180Not scoredunicode: free the map after a grace period
CVE-2026-99179Not scoredwatch_queue: Fix note pool publication race in watch_queue_set_size()
CVE-2026-99178Not scoredx86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
CVE-2026-99177Not scoredKVM: SEV: Fix page dirtying in sev_gmem_post_populate()
CVE-2026-99176Not scoredKVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
CVE-2026-99175Not scoredfsnotify: prevent mark additions during connector teardown
CVE-2026-99174Not scoredext4: free the sbi after a grace period
CVE-2026-99173Not scoredeventfs: Free the eventfs_inode after an rcu grace period too
CVE-2026-99172Not scoredipc: drop the mqueue mount with kern_unmount() on setup failure
CVE-2026-99171Not scoredntfs3: free the sbi after a grace period
CVE-2026-99170Not scorednamespace: a mount that copy_tree() leaves out can't take over a lock
CVE-2026-99169Not scoredfutex: Fix mm reuse handling for FUT_OFF_MMSHARED

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.