Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 789 of 1013.
- CVE-2026-23451 bonding: prevent potential infinite loop in bond_header_parse()
- CVE-2026-23450 net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
- CVE-2026-2345 Insufficient Origin Validation in Proctorio Chrome Extension postMessage Handlers
- CVE-2026-23449 net/sched: teql: Fix double-free in teql_master_xmit
- CVE-2026-23448 net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
- CVE-2026-23447 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
- CVE-2026-23446 net: usb: aqc111: Do not perform PM inside suspend callback
- CVE-2026-23445 igc: fix page fault in XDP TX timestamps handling
- CVE-2026-23444 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
- CVE-2026-23443 ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
- CVE-2026-23442 ipv6: add NULL checks for idev in SRv6 paths
- CVE-2026-23441 net/mlx5e: Prevent concurrent access to IPSec ASO context
- CVE-2026-23440 net/mlx5e: Fix race condition during IPSec ESN update
- CVE-2026-2344 Stored XSS on Plunet BusinessManager
- CVE-2026-23439 udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
- CVE-2026-23438 net: mvpp2: guard flow control update with global_tx_fc in buffer switching
- CVE-2026-23437 net: shaper: protect late read accesses to the hierarchy
- CVE-2026-23436 net: shaper: protect from late creation of hierarchy
- CVE-2026-23435 perf/x86: Move event pointer setup earlier in x86_pmu_enable()
- CVE-2026-23434 mtd: rawnand: serialize lock/unlock against other NAND operations
- CVE-2026-23433 arm_mpam: Fix null pointer dereference when restoring bandwidth counters
- CVE-2026-23432 mshv: Fix use-after-free in mshv_map_user_memory error path
- CVE-2026-23431 spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
- CVE-2026-23430 drm/vmwgfx: Don't overwrite KMS surface dirty tracker
- CVE-2026-2343 PeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive Download
- CVE-2026-23429 iommu/sva: Fix crash in iommu_sva_unbind_device()
- CVE-2026-23428 ksmbd: fix use-after-free of share_conf in compound request
- CVE-2026-23427 ksmbd: fix use-after-free in durable v2 replay of active file handles
- CVE-2026-23426 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
- CVE-2026-23425 KVM: arm64: Fix ID register initialization for non-protected pKVM guests
- CVE-2026-23424 accel/amdxdna: Validate command buffer payload count
- CVE-2026-23423 btrfs: free pages on error in btrfs_uring_read_extent()
- CVE-2026-23422 dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
- CVE-2026-23421 drm/xe/configfs: Free ctx_restore_mid_bb in release
- CVE-2026-23420 wifi: wlcore: Fix a locking bug
- CVE-2026-2342 XSS in Oceanicsoft's ValeApp
- CVE-2026-23419 net/rds: Fix circular locking dependency in rds_tcp_tune
- CVE-2026-23418 drm/xe/reg_sr: Fix leak on xa_store failure
- CVE-2026-23417 bpf: Fix constant blinding for PROBE_MEM32 stores
- CVE-2026-23416 mm/mseal: update VMA end correctly on merge
- CVE-2026-23415 futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
- CVE-2026-23414 tls: Purge async_hold in tls_decrypt_async_wait()
- CVE-2026-23413 clsact: Fix use-after-free in init/destroy rollback asymmetry
- CVE-2026-23412 netfilter: bpf: defer hook memory release until rcu readers are done
- CVE-2026-23411 apparmor: fix race between freeing data and fs accessing it
- CVE-2026-23410 apparmor: fix race on rawdata dereference
- CVE-2026-23409 apparmor: fix differential encoding verification
- CVE-2026-23408 apparmor: Fix double free of ns_name in aa_replace_profiles()
- CVE-2026-23407 apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
- CVE-2026-23406 apparmor: fix side-effect bug in match_char() macro usage
- CVE-2026-23405 apparmor: fix: limit the number of levels of policy namespaces
- CVE-2026-23404 apparmor: replace recursive profile removal with iterative approach
- CVE-2026-23403 apparmor: fix memory leak in verify_header
- CVE-2026-23402 KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE
- CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
- CVE-2026-23400 rust_binder: call set_notification_done() without proc lock
- CVE-2026-2340 Samba: vfs_worm does not block directory modification
- CVE-2026-23399 nf_tables: nft_dynset: fix possible stateful expression memleak in error path
- CVE-2026-23398 icmp: fix NULL pointer dereference in icmp_tag_validation()
- CVE-2026-23397 nfnetlink_osf: validate individual option lengths in fingerprints
- CVE-2026-23396 wifi: mac80211: fix NULL deref in mesh_matches_local()
- CVE-2026-23395 Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
- CVE-2026-23394 af_unix: Give up GC if MSG_PEEK intervened.
- CVE-2026-23393 bridge: cfm: Fix race condition in peer_mep deletion
- CVE-2026-23392 netfilter: nf_tables: release flowtable after rcu grace period on error
- CVE-2026-23391 netfilter: xt_CT: drop pending enqueued packets on template removal
- CVE-2026-23390 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
- CVE-2026-2339 RCE in TUBITAK BILGEM's Liderahenk
- CVE-2026-23389 ice: Fix memory leak in ice_set_ringparam()
- CVE-2026-23388 Squashfs: check metadata block offset is within range
- CVE-2026-23387 pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
- CVE-2026-23386 gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
- CVE-2026-23385 netfilter: nf_tables: clone set on flush only
- CVE-2026-23384 RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
- CVE-2026-23383 bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
- CVE-2026-23382 HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
- CVE-2026-23381 net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-23380 tracing: Fix WARN_ON in tracing_buffers_mmap_close
- CVE-2026-23379 net/sched: ets: fix divide by zero in the offload path
- CVE-2026-23378 net/sched: act_ife: Fix metalist update behavior
- CVE-2026-23377 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
- CVE-2026-23376 nvmet-fcloop: Check remoteport port_state before calling done callback
- CVE-2026-23375 mm: thp: deny THP for files on anonymous inodes
- CVE-2026-23374 blktrace: fix __this_cpu_read/write in preemptible context
- CVE-2026-23373 wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
- CVE-2026-23372 nfc: rawsock: cancel tx_work before socket teardown
- CVE-2026-23371 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
- CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
- CVE-2026-2337 Refleccted XSS on Plunet BusinessManager
- CVE-2026-23369 i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock"
- CVE-2026-23368 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
- CVE-2026-23367 wifi: radiotap: reject radiotap with unknown bits
- CVE-2026-23366 drm/client: Do not destroy NULL modes
- CVE-2026-23365 net: usb: kalmia: validate USB endpoints
- CVE-2026-23364 ksmbd: Compare MACs in constant time
- CVE-2026-23363 wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()
- CVE-2026-23362 can: bcm: fix locking for bcm_op runtime updates
- CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
- CVE-2026-23360 nvme: fix admin queue leak on controller reset
- CVE-2026-2336 Weak webstax_auth Cookie Authentication Allows Privilege Escalation