Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,705 vulnerabilities match.

CVESeveritySummary
CVE-2026-99084Not scoredreaddir: take no inode lock on an immutable directory
CVE-2026-990838.8 Highksmbd: fix heap out-of-bounds write in krb5_authenticate()
CVE-2026-990828.8 HighKVM: x86: Use active memslots for the per-vCPU MMIO cache
CVE-2026-558888.8 HighXDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal
CVE-2026-558898.3 HighXDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key
CVE-2026-572107.0 HighHeimdall: IP Spoofing via Unvalidated Forwarding Headers
CVE-2026-572097.0 HighHeimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode
CVE-2026-551906.5 MediumEvent Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import
CVE-2026-990817.5 Highbnxt_en: fix DMA mapping length for padded small packets
CVE-2026-99080Not scoredfs: Free any excess xarray nodes in clear_inode()
CVE-2026-990799.8 Criticalnet/mlx5e: Prevent stale XSK buffer release on refill retry
CVE-2026-990789.8 Criticalnet/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
CVE-2026-990777.4 Highipv4: udp: Create exceptions before socket matching
CVE-2026-99076Not scoredipv6: udp: Create exceptions before socket matching
CVE-2026-99075Not scoredrust_binder: reschedule node refcount update on thread exit
CVE-2026-99074Not scoredipv4: stop PMTU walk when nexthop group shrinks
CVE-2026-99073Not scoredipv4: stop exception dump when nexthop group shrinks
CVE-2026-99072Not scoredipv4: stop route notification sizing when nexthop group shrinks
CVE-2026-99071Not scoredipv4: do not warn on route notification size race
CVE-2026-99070Not scoredipv6: do not warn on route notification size race
CVE-2026-99069Not scoredInput: ati_remote2 - fix type confusion in device attribute handlers
CVE-2026-99068Not scoredALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
CVE-2026-99067Not scoredbtrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
CVE-2026-99066Not scoredcan: dev: init_can_skb(): restore skb header initialization
CVE-2026-99065Not scoredcgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()
CVE-2026-990648.1 Highcipso: adjust cached option offsets when removing CIPSO
CVE-2026-99063Not scoreddm ioctl: don't let data_start run past the buffer
CVE-2026-99062Not scoredvsock/virtio: account only unread bytes in read_skb()
CVE-2026-99061Not scoredwifi: brcmfmac: fix P2P device removal race in brcmf_detach()
CVE-2026-99060Not scoredwifi: mt76: mt7603: initialize global station WCID
CVE-2026-990597.7 Highwireguard: noise: reject response consumption after intermediate initiation
CVE-2026-99058Not scoredworkqueue: Fix NULL current_pwq deref in chained work check
CVE-2026-99057Not scoredxen/netfront: don't leak the skb when xennet_fill_frags() fails
CVE-2026-990567.8 Highstrparser: make sure __strp_recv isn't running before tearing down the parser
CVE-2026-99055Not scoredtcp: reject net_iov in zerocopy receive mapping hints
CVE-2026-990547.8 Hightipc: destroy topsrv workqueues before closing connections
CVE-2026-990537.8 Hightipc: hold a reference to nodes found by link name
CVE-2026-99052Not scoredselinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
CVE-2026-990517.8 Highfsverity: RCU-delay the freeing of struct fsverity_info
CVE-2026-990507.8 Highgpio: mpsse: fix race when arming the IRQ poll worker
CVE-2026-99049Not scoredgpio: xilinx: fix runtime PM leak on request error path
CVE-2026-99048Not scoredgve: fix napi_disable deadlock when attempting to disable XSK pools
CVE-2026-99047Not scoredgve: fix XSK buffer leak when rings are stopped
CVE-2026-990467.5 Highgve: fix XSK buffer leak on error descriptor
CVE-2026-99045Not scoredibmveth: h_free logical LAN on open-fail after register
CVE-2026-99044Not scoredice: fix use-after-free in dynamic port cleanup
CVE-2026-99043Not scoredice: fix metadata_dst refcount handling on representor teardown
CVE-2026-990428.4 Highio_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6
CVE-2026-99041Not scoredip6_gre: remove obsolete ERSPAN PMTU update
CVE-2026-99040Not scoredKEYS: Fix add_key() race with keyring restriction

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.