Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 565 of 1013.
- CVE-2026-5305 Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS
- CVE-2026-53049 gfs2: add some missing log locking
- CVE-2026-53048 gfs2: prevent NULL pointer dereference during unmount
- CVE-2026-53047 efi/capsule-loader: fix incorrect sizeof in phys array reallocation
- CVE-2026-53046 ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
- CVE-2026-53045 memory: tegra124-emc: Fix dll_change check
- CVE-2026-53044 soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables
- CVE-2026-53043 ocfs2/dlm: validate qr_numregions in dlm_match_regions()
- CVE-2026-53042 fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal
- CVE-2026-53041 ocfs2: fix listxattr handling when the buffer is full
- CVE-2026-53040 ocfs2: validate bg_bits during freefrag scan
- CVE-2026-5304 Privilege escalation in AXIS OS
- CVE-2026-53039 ocfs2: validate group add input before caching
- CVE-2026-53038 ima_fs: Correctly create securityfs files for unsupported hash algos
- CVE-2026-53037 HID: usbhid: fix deadlock in hid_post_reset()
- CVE-2026-53036 bpf, arm64: Fix off-by-one in check_imm signed range check
- CVE-2026-53035 bpf, sockmap: Fix af_unix iter deadlock
- CVE-2026-53034 bpf, sockmap: Fix af_unix null-ptr-deref in proto update
- CVE-2026-53033 bpf, sockmap: Take state lock for af_unix iter
- CVE-2026-53032 bpf: Fix NULL deref in map_kptr_match_type for scalar regs
- CVE-2026-53031 bpf: Validate node_id in arena_alloc_pages()
- CVE-2026-53030 i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()
- CVE-2026-5303 Race condition in AXIS OS
- CVE-2026-53029 fs/ntfs3: prevent uninitialized lcn caused by zero len
- CVE-2026-53028 usb: typec: Fix error pointer dereference
- CVE-2026-53027 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
- CVE-2026-53026 NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg
- CVE-2026-53025 greybus: raw: fix use-after-free on cdev close
- CVE-2026-53024 greybus: raw: fix use-after-free if write is called after disconnect
- CVE-2026-53023 fs/ntfs3: terminate the cached volume label after UTF-8 conversion
- CVE-2026-53022 platform/x86: dell-wmi-sysman: bound enumeration string aggregation
- CVE-2026-53021 scsi: target: core: Fix integer overflow in UNMAP bounds check
- CVE-2026-53020 um: Fix potential race condition in TLB sync
- CVE-2026-5302 Permissive Cross-domain Policy with Untrusted Domains in coolercontrold
- CVE-2026-53019 clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()
- CVE-2026-53018 f2fs: avoid reading already updated pages during GC
- CVE-2026-53017 f2fs: fix data loss caused by incorrect use of nat_entry flag
- CVE-2026-53016 crypto: ccp - copy IV using skcipher ivsize
- CVE-2026-53015 erofs: unify lcn as u64 for 32-bit platforms
- CVE-2026-53014 net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir
- CVE-2026-53013 macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
- CVE-2026-53012 nexthop: fix IPv6 route referencing IPv4 nexthop
- CVE-2026-53011 net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
- CVE-2026-53010 ksmbd: fix use-after-free in smb2_open during durable reconnect
- CVE-2026-5301 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui
- CVE-2026-53009 ice: fix double-free of tx_buf skb
- CVE-2026-53008 ice: fix race condition in TX timestamp ring cleanup
- CVE-2026-53007 ice: fix potential NULL pointer deref in error path of ice_set_ringparam()
- CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv()
- CVE-2026-53005 af_unix: Drop all SCM attributes for SOCKMAP.
- CVE-2026-53004 sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
- CVE-2026-53003 pppoe: drop PFC frames
- CVE-2026-53002 netfilter: conntrack: remove sprintf usage
- CVE-2026-53001 netfilter: xtables: restrict several matches to inet family
- CVE-2026-53000 netfilter: nat: use kfree_rcu to release ops
- CVE-2026-5300 Missing Authentication for Critical Function in coolercontrold
- CVE-2026-52999 netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
- CVE-2026-52998 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
- CVE-2026-52997 net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change()
- CVE-2026-52996 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
- CVE-2026-52995 net/rds: zero per-item info buffer before handing it to visitors
- CVE-2026-52994 vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting
- CVE-2026-52993 tipc: fix double-free in tipc_buf_append()
- CVE-2026-52992 fs/adfs: validate nzones in adfs_validate_bblk()
- CVE-2026-52991 sched/psi: fix race between file release and pressure write
- CVE-2026-52990 fsnotify: fix inode reference leak in fsnotify_recalc_mask()
- CVE-2026-5299 Uncontrolled Recursion in Wireshark
- CVE-2026-52989 nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
- CVE-2026-52988 netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
- CVE-2026-52987 drm/amdgpu: avoid double drm_exec_fini() in userq validate
- CVE-2026-52986 netfilter: nf_conntrack_sip: don't use simple_strtoul
- CVE-2026-52985 netdevsim: zero initialize struct iphdr in dummy sk_buff
- CVE-2026-52984 net/sched: netem: fix queue limit check to include reordered packets
- CVE-2026-52983 net: airoha: fix BQL imbalance in TX path
- CVE-2026-52982 net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
- CVE-2026-52981 neigh: let neigh_xmit take skb ownership
- CVE-2026-52980 sched/fair: Clear rel_deadline when initializing forked entities
- CVE-2026-52979 net: psp: check for device unregister when creating assoc
- CVE-2026-52978 net: psp: require admin permission for dev-set and key-rotate
- CVE-2026-52977 futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
- CVE-2026-52976 drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
- CVE-2026-52975 bonding: 3ad: implement proper RCU rules for port->aggregator
- CVE-2026-52974 net: tls: fix strparser anchor skb leak on offload RX setup failure
- CVE-2026-52973 futex: Drop CLONE_THREAD requirement for private default hash alloc
- CVE-2026-52972 crypto: af_alg - Cap AEAD AD length to 0x80000000
- CVE-2026-52971 net: ena: PHC: Fix potential use-after-free in get_timestamp
- CVE-2026-52970 netfilter: nft_ct: fix missing expect put in obj eval
- CVE-2026-52969 KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
- CVE-2026-52968 KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
- CVE-2026-52967 smb/client: fix possible infinite loop and oob read in symlink_data()
- CVE-2026-52966 drm: Replace old pointer to new idr
- CVE-2026-52965 drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure
- CVE-2026-52964 ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
- CVE-2026-52963 ALSA: usb-audio: Bound MIDI endpoint descriptor scans
- CVE-2026-52962 ceph: fix a buffer leak in __ceph_setxattr()
- CVE-2026-52961 ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
- CVE-2026-52960 ceph: put folios not suitable for writeback
- CVE-2026-5296 Missing Authorization in GitLab
- CVE-2026-52959 virt: sev-guest: Do not use host-controlled page order in cleanup path
- CVE-2026-52958 libceph: Fix potential out-of-bounds access in osdmap_decode()