Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 617 of 1013.
- CVE-2026-45971 bpf: Limit bpf program signature size
- CVE-2026-45970 bonding: alb: fix UAF in rlb_arp_recv during bond up/down
- CVE-2026-4597 648540858 wvp-GB28181-pro Stream Proxy Query StreamProxyProvider.java selectAll sql injection
- CVE-2026-45969 HID: playstation: Add missing check for input_ff_create_memless
- CVE-2026-45968 cpuidle: Skip governor when only one idle state is available
- CVE-2026-45967 bpf: Return proper address for non-zero offsets in insn array
- CVE-2026-45966 apparmor: fix NULL pointer dereference in __unix_needs_revalidation
- CVE-2026-45965 apparmor: fix invalid deref of rawdata when export_binary is unset
- CVE-2026-45964 SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
- CVE-2026-45963 ASoC: nau8821: Cancel delayed work on component remove
- CVE-2026-45962 ublk: Validate SQE128 flag before accessing the cmd
- CVE-2026-45961 gfs2: fix memory leaks in gfs2_fill_super error path
- CVE-2026-45960 hfsplus: return error when node already exists in hfs_bnode_create
- CVE-2026-4596 projectworlds Lawyer Management System lawyers.php cross site scripting
- CVE-2026-45959 crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree
- CVE-2026-45958 drm/exynos: vidi: fix to avoid directly dereferencing user pointer
- CVE-2026-45957 rcu: Fix rcu_read_unlock() deadloop due to softirq
- CVE-2026-45956 drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
- CVE-2026-45955 md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout
- CVE-2026-45954 fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
- CVE-2026-45953 md/raid5: fix IO hang with degraded array with llbitmap
- CVE-2026-45952 eth: fbnic: Add validation for MTU changes
- CVE-2026-45951 bpf: Fix a potential use-after-free of BTF object
- CVE-2026-45950 crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req()
- CVE-2026-4595 code-projects Exam Form Submission update_s6.php cross site scripting
- CVE-2026-45949 hwrng: core - use RCU and work_struct to fix race condition
- CVE-2026-45948 ext4: fix memory leak in ext4_ext_shift_extents()
- CVE-2026-45947 drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
- CVE-2026-45946 power: supply: ab8500: Fix use-after-free in power_supply_changed()
- CVE-2026-45945 iommu/vt-d: Fix race condition during PASID entry replacement
- CVE-2026-45944 iommu/vt-d: Clear Present bit before tearing down context entry
- CVE-2026-45943 erofs: fix inline data read failure for ztailpacking pclusters
- CVE-2026-45942 ext4: fix e4b bitmap inconsistency reports
- CVE-2026-45941 tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
- CVE-2026-45940 net: stmmac: fix oops when split header is enabled
- CVE-2026-4594 erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection
- CVE-2026-45939 gpib: Fix memory leak in ni_usb_init()
- CVE-2026-45938 power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed()
- CVE-2026-45937 crypto: inside-secure/eip93 - fix kernel panic in driver detach
- CVE-2026-45936 power: supply: goldfish: Fix use-after-free in power_supply_changed()
- CVE-2026-45935 fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
- CVE-2026-45934 btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation
- CVE-2026-45933 bpf: Preserve id of register in sync_linked_regs()
- CVE-2026-45932 bpf: Fix tcx/netkit detach permissions when prog fd isn't given
- CVE-2026-45931 accel/amdxdna: Hold mm structure across iommu_sva_unbind_device()
- CVE-2026-45930 net: mctp: ensure our nlmsg responses are initialised
- CVE-2026-4593 erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection
- CVE-2026-45929 ovpn: fix possible use-after-free in ovpn_net_xmit
- CVE-2026-45928 media: chips-media: wave5: Fix memory leak on codec_info allocation failure
- CVE-2026-45927 bpf: Require frozen map for calculating map hash
- CVE-2026-45926 rust: pwm: Fix potential memory leak on init error
- CVE-2026-45925 thermal/of: Fix reference leak in thermal_of_cm_lookup()
- CVE-2026-45924 ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
- CVE-2026-45923 net: usb: catc: enable basic endpoint checking
- CVE-2026-45922 RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
- CVE-2026-45921 mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
- CVE-2026-45920 ext4: fix dirtyclusters double decrement on fs shutdown
- CVE-2026-4592 kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication
- CVE-2026-45919 sched/rt: Skip currently executing CPU in rto_next_cpu()
- CVE-2026-45918 ovpn: tcp - don't deref NULL sk_socket member after tcp_close()
- CVE-2026-45917 ipvs: do not keep dest_dst if dev is going down
- CVE-2026-45916 power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
- CVE-2026-45915 fat: avoid parent link count underflow in rmdir
- CVE-2026-45914 Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
- CVE-2026-45913 net: bridge: mcast: always update mdb_n_entries for vlan contexts
- CVE-2026-45912 ext4: don't cache extent during splitting extent
- CVE-2026-45911 usb: cdns3: fix role switching during resume
- CVE-2026-45910 RDMA/rxe: Fix race condition in QP timer handlers
- CVE-2026-4591 kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection
- CVE-2026-45909 clk: mediatek: Drop __initconst from gates
- CVE-2026-45908 accel/amdxdna: Fix memory leak in amdxdna_ubuf_map
- CVE-2026-45907 net/mlx5e: Fix deadlocks between devlink and netdev instance locks
- CVE-2026-45906 power: supply: pf1550: Fix use-after-free in power_supply_changed()
- CVE-2026-45905 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
- CVE-2026-45904 powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
- CVE-2026-45903 bpf: Fix memory access flags in helper prototypes
- CVE-2026-45902 power: supply: bq256xx: Fix use-after-free in power_supply_changed()
- CVE-2026-45901 netfilter: nf_tables: revert commit_mutex usage in reset path
- CVE-2026-45900 crypto: caam - fix netdev memory leak in dpaa2_caam_probe
- CVE-2026-4590 kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery
- CVE-2026-45899 ext4: drop extent cache when splitting extent fails
- CVE-2026-45898 RDMA/iwcm: Fix workqueue list corruption by removing work_list
- CVE-2026-45897 netfilter: nft_counter: serialize reset with spinlock
- CVE-2026-45896 mtd: intel-dg: Fix accessing regions before setting nregions
- CVE-2026-45895 quota: fix livelock between quotactl and freeze_super
- CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry
- CVE-2026-45893 apparmor: Fix & Optimize table creation from possibly unaligned memory
- CVE-2026-45892 ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
- CVE-2026-45891 net: hns3: fix double free issue for tx spare buffer
- CVE-2026-45890 xen-netback: reject zero-queue configuration from guest
- CVE-2026-4589 kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery
- CVE-2026-45889 mptcp: do not account for OoO in mptcp_rcvbuf_grow()
- CVE-2026-45888 md/raid1: fix memory leak in raid1_run()
- CVE-2026-45887 af_unix: Fix memleak of newsk in unix_stream_connect().
- CVE-2026-45886 bpf: Fix bpf_xdp_store_bytes proto for read-only arg
- CVE-2026-45885 power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
- CVE-2026-45884 apparmor: avoid per-cpu hold underflow in aa_get_buffer
- CVE-2026-45883 iio: sca3000: Fix a resource leak in sca3000_probe()
- CVE-2026-45882 power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed()
- CVE-2026-45881 soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()