Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 614 of 1013.
- CVE-2026-4625 SourceCodester Online Admission System programmes.php sql injection
- CVE-2026-46249 octeontx2-af: Fix PF driver crash with kexec kernel booting
- CVE-2026-46248 wifi: ath12k: clear stale link mapping of ahvif->links_map
- CVE-2026-46247 clk: qcom: gfx3d: add parent to parent request map
- CVE-2026-46246 power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler
- CVE-2026-46245 drm/amd/display: Fix dc_link NULL handling in HPD init
- CVE-2026-46244 netfilter: nft_inner: Fix IPv6 inner_thoff desync
- CVE-2026-46243 smb: client: reject userspace cifs.spnego descriptions
- CVE-2026-46242 eventpoll: fix ep_remove struct eventpoll / struct file UAF
- CVE-2026-46241 spi: mpc52xx: fix use-after-free on registration failure
- CVE-2026-46240 media: iris: Fix use-after-free in iris_release_internal_buffers()
- CVE-2026-4624 SourceCodester Online Library Management System Parameter home.php sql injection
- CVE-2026-46239 media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
- CVE-2026-46238 batman-adv: stop caching unowned originator pointers in BAT IV
- CVE-2026-46236 media: rc: xbox_remote: heed DMA restrictions
- CVE-2026-46235 media: saa7164: add ioremap return checks and cleanups
- CVE-2026-46234 vsock: fix buffer size clamping order
- CVE-2026-46233 batman-adv: bla: only purge non-released claims
- CVE-2026-46232 HID: playstation: Clamp num_touch_reports
- CVE-2026-46231 batman-adv: bla: put backbone reference on failed claim hash insert
- CVE-2026-46230 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
- CVE-2026-4623 DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery
- CVE-2026-46229 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
- CVE-2026-46228 spi: ch341: fix devres lifetime
- CVE-2026-46227 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
- CVE-2026-46226 spi: fsl: fix controller deregistration
- CVE-2026-46225 spi: rspi: fix controller deregistration
- CVE-2026-46224 drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
- CVE-2026-46223 cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
- CVE-2026-46222 media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
- CVE-2026-46221 EDAC/versalnet: Fix device name memory leak
- CVE-2026-46220 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
- CVE-2026-4622 Command injection in Aterm GB1200PE
- CVE-2026-46219 spi: mpc52xx: fix use-after-free on unbind
- CVE-2026-46218 drm/amdgpu: Add bounds checking to ib_{get,set}_value
- CVE-2026-46216 drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()
- CVE-2026-46215 drm: Set old handle to NULL before prime swap in change_handle
- CVE-2026-46214 vsock/virtio: fix accept queue count leak on transport mismatch
- CVE-2026-46213 HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
- CVE-2026-46212 batman-adv: bla: prevent use-after-free when deleting claims
- CVE-2026-46211 drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
- CVE-2026-46210 media: iris: fix use-after-free of fmt_src during MBPF check
- CVE-2026-4621 Security feature bypass in Aterm GB1200PE
- CVE-2026-46209 drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
- CVE-2026-46208 batman-adv: stop tp_meter sessions during mesh teardown
- CVE-2026-46207 vsock/virtio: fix empty payload in tap skb for non-linear buffers
- CVE-2026-46206 batman-adv: reject new tp_meter sessions during teardown
- CVE-2026-46205 staging: media: atomisp: Disallow all private IOCTLs
- CVE-2026-46204 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
- CVE-2026-46203 spi: cadence-quadspi: fix unclocked access on unbind
- CVE-2026-46202 HID: appletb-kbd: run inactivity autodim from workqueues
- CVE-2026-46201 drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
- CVE-2026-46200 spi: mpc52xx: fix controller deregistration
- CVE-2026-4620 Command injection in Aterm WX1500HP
- CVE-2026-46199 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
- CVE-2026-46198 batman-adv: fix integer overflow on buff_pos
- CVE-2026-46197 drm/amdkfd: validate SVM ioctl nattr against buffer size
- CVE-2026-46196 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
- CVE-2026-46195 smb: client: validate dacloffset before building DACL pointers
- CVE-2026-46193 xfrm: ah: account for ESN high bits in async callbacks
- CVE-2026-46192 spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations
- CVE-2026-46191 fbcon: Avoid OOB font access if console rotation fails
- CVE-2026-46190 mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
- CVE-2026-4619 Path traversal in Aterm WX3600HP
- CVE-2026-46189 RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
- CVE-2026-46188 octeon_ep_vf: add NULL check for napi_build_skb()
- CVE-2026-46187 wifi: rsi: fix kthread lifetime race between self-exit and external-stop
- CVE-2026-46186 Bluetooth: virtio_bt: validate rx pkt_type header length
- CVE-2026-46185 smb/client: fix out-of-bounds read in symlink_data()
- CVE-2026-46184 sound: ua101: fix division by zero at probe
- CVE-2026-46183 mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock
- CVE-2026-46182 pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
- CVE-2026-46181 RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
- CVE-2026-46180 wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
- CVE-2026-46179 ASoC: SOF: Don't allow pointer operations on unconfigured streams
- CVE-2026-46178 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
- CVE-2026-46177 ipmi: Add limits to event and receive message requests
- CVE-2026-46176 RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
- CVE-2026-46175 f2fs: fix fsck inconsistency caused by FGGC of node block
- CVE-2026-46174 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
- CVE-2026-46173 exit: prevent preemption of oopsing TASK_DEAD task
- CVE-2026-46172 ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
- CVE-2026-46171 riscv: kvm: fix vector context allocation leak
- CVE-2026-46170 mptcp: pm: ADD_ADDR rtx: free sk if last
- CVE-2026-4617 Missing authorization in Patients Waiting Area Queue Management System
- CVE-2026-46169 hfsplus: fix uninit-value by validating catalog record size
- CVE-2026-46168 mptcp: fix scheduling with atomic in timestamp sockopt
- CVE-2026-46167 usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
- CVE-2026-46166 wifi: mac80211: use safe list iteration in radar detect work
- CVE-2026-46165 openvswitch: vport: fix self-deadlock on release of tunnel ports
- CVE-2026-46164 btrfs: fix double free in create_space_info_sub_group() error path
- CVE-2026-46163 wifi: b43legacy: enforce bounds check on firmware key index in RX path
- CVE-2026-46162 ice: fix double free in ice_sf_eth_activate() error path
- CVE-2026-46161 md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
- CVE-2026-46160 btrfs: fix missing last_unlink_trans update when removing a directory
- CVE-2026-4616 bolo-blog Article Title article cross site scripting
- CVE-2026-46159 btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
- CVE-2026-46158 mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
- CVE-2026-46157 ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
- CVE-2026-46156 LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()