CVE-2026 records published in August 2026
Page seven of 13: records 6,001 to 7,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2026-74882 | openssl_encrypt insecure default Configuration | 9.1NVD v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-74881 | openssl_encrypt CORS Misconfiguration via Wildcard Origins | 9.3NVD v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74880 | openssl_encrypt token leakage via Query parameters | 9.3CNA v4.0 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-74879 | openssl_encrypt information disclosure via /ready endpoint | 8.7CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74878 | openssl_encrypt TOTP Rate Limiter Bypass | 9.3CNA v4.0 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-74877 | openssl_encrypt Missing Ownership Verification via revoke_key | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74876 | openssl_encrypt Unverified Key Bundle Encryption | 9.3CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74875 | openssl_encrypt Schema Validation Bypass | 9.3CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74874 | openssl_encrypt Weak PRNG Steganography Pixel Selection | 8.7CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74873 | openssl_encrypt password exposure via CLI argument | 8.7CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74872 | openssl_encrypt arbitrary code execution via Whirlpool | 9.3CNA v4.0 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-74871 | openssl_encrypt KDF Bypass via Sequential-XOR | 5.5NVD v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-74870 | openssl_encrypt Hardware Pepper information disclosure | 8.7CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74869 | stoatchat missing authorization via Subscribe | 8.3CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74868 | SiYuan brute-force Authentication via Publish service | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74867 | SiYuan cross-site request forgery via CheckAuth | 2.3CNA v4.0 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-74858 | jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-74845 | 2100 Technology|Official Document Management System arbitrary file upload | 8.7CNA v4.0 | 0.9% | 2026-08-17 | Fix |
| CVE-2026-74843 | Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow | 10.0CNA v4.0 | 1.0% | 2026-08-17 | |
| CVE-2026-74842 | Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-74802 | SiYuan Cross-Site WebSocket Hijacking via network proxy | 7.1CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-74801 | SiYuan local privilege escalation via elevator.exe | 8.6CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-74800 | SiYuan stored XSS via assets endpoint | 9.4CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74799 | SiYuan Unauthenticated Debug endpoint information disclosure | 9.2CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74798 | SiYuan kernel path traversal via database_clean MCP tool | 9.3CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74579 | Linux kernel nft_payload offload mask vulnerability | 7.1CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-74254 | Joomla extension joomlack.fr SQL injection in Page Builder CK | 9.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-74253 | Joomla extension regularlabs.com unauthenticated RCE | 10.0CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-74238 | TIER IV Nebula Heap out-of-bounds read via VLP32 UDP Decoder | 8.7CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-73851 | Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference | 6.1CNA v4.0 | 2.3% | 2026-08-17 | Fix |
| CVE-2026-73646 | PostCSS: Path traversal in Previous Source Map Auto-Loading leads to arbitrary .map File Disclosure | 7.5CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-73560 | vLLM MiMoV2OmniMultiModalProcessor server-side request forgery | 6.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-73523 | COVESA Open1722 Stack Memory Disclosure via acf-can-listener.c Integer Truncation | 8.7CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-73522 | COVESA Open1722 stack buffer overflow via avtp_to_can in acf-can-listener | 8.7CNA v4.0 | 4.0% | 2026-08-17 | |
| CVE-2026-73424 | Astro: Unauthenticated path override in the @astrojs/vercel ISR function | 6.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-73410 | Budibase: SSRF via DNS rebinding in the REST datasource integration | 8.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-71980 | Belledonne Communications bcg729 out-of-bounds read via decodeSIDframe | 8.7CNA v4.0 | 0.6% | 2026-08-17 | |
| CVE-2026-71979 | INDI indiserver stack buffer overflow via XML Tag Parsing | 8.7CNA v4.0 | 0.6% | 2026-08-17 | |
| CVE-2026-71858 | Notepad++ shortcuts.xml macro validation vulnerability | 5.4CNA v4.0 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-71567 | fakefish shell variable interpolation command injection | 7.7CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-71566 | openshift-metal3 fakefish KubeVirt backend is not authenticated | 9.3CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-71553 | ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS | 7.1CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-71518 | Typemill authorization bypass via Media File Download route | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Exploit codeFix |
| CVE-2026-71491 | sqlparse comment grouping denial of service | 8.7CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-71486 | vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds | 4.3CNA v3.1 | 0.4% | 2026-08-17 | Exploit codeFix |
| CVE-2026-71479 | QuantumNous new-api new API: Integer overflow in quota billing yields negative charges | 9.1CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-71472 | Red Hat Advanced Cluster Management for Kubernetes PostgreSQL start script OS command injection | 9.1CNA v3.1 | 0.9% | 2026-08-17 | Fix |
| CVE-2026-71424 | Onyx: Cross-user OAuth-token leak via /API/mcp/servers* for per-user MCP servers | 9.6CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-70495 | Red Hat Advanced Cluster Management search service account privilege escalation | 8.8CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-70412 | Dell iDRAC9 information disclosure | 3.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-69148 | MLflow: CreateModelVersion source validation does not check read permission on referenced run_id | 7.1CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-69146 | MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth | 6.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-68765 | hashcat KeePass KDBX v4 module heap buffer overflow via Token field | 5.2CNA v4.0 | 0.2% | 2026-08-17 | |
| CVE-2026-68762 | JetBrains Ktor infinite loop | 5.9CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-68520 | Glances: As_dict_secure Value-Level Bypass leaks credentials in URL Values via /API/4/config | 5.3CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-68519 | Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of) | 7.1CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-68518 | Glances: Command injection bypass of action-template sanitizer | 8.8CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-68517 | Glances REST API CORS guard permissive cross-domain policy | 6.5CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-68005 | ACME mini_httpd HTTP request header parser denial of service | 7.5CISA ADP v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-68004 | OSSRS SRS RTMP publish authorization remote code execution | 9.8CISA ADP v3.1 | 0.8% | 2026-08-17 | |
| CVE-2026-67967 | Tenda W20E V16.01.0.6(2782) buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-67966 | Tenda W20E goform/telnet endpoint missing authentication | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-67965 | W20E login URL handler OS command injection | 9.8CISA ADP v3.1 | 0.9% | 2026-08-17 | |
| CVE-2026-67961 | O2OA script execution sandbox code injection | 7.8CISA ADP v3.1 | 0.2% | 2026-08-17 | |
| CVE-2026-67960 | PbootCMS code injection | 9.8CISA ADP v3.1 | 0.7% | 2026-08-17 | |
| CVE-2026-67926 | JeecgBoot AI chat module code injection | 9.8CISA ADP v3.1 | 0.9% | 2026-08-17 | |
| CVE-2026-67925 | JeecgBoot v.3.9.2 cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2026-08-17 | |
| CVE-2026-67919 | Halo PluginEndpoint.java installFromUri method code injection | 9.8CISA ADP v3.1 | 0.9% | 2026-08-17 | Exploit codeKCV |
| CVE-2026-67918 | hermes-studio v.0.6.26 path traversal | 7.5CISA ADP v3.1 | 1.4% | 2026-08-17 | |
| CVE-2026-67917 | AzuraCast backup restore command SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-67868 | S2OPC heap-based out-of-bounds write | 9.8CISA ADP v3.1 | 1.1% | 2026-08-17 | |
| CVE-2026-67854 | Qcms v.6.0.6 SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2026-08-17 | |
| CVE-2026-67678 | RainyGao-Hithub DocSys v.2.02.80 file upload | 9.8CISA ADP v3.1 | 0.9% | 2026-08-17 | |
| CVE-2026-66795 | Red Hat multicluster engine for Kubernetes improper certificate validation | 9.9CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-66792 | Red Hat Advanced Cluster Management for Kubernetes privilege escalation | 9.9CNA v3.1 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-65976 | Deskflow: Clipboard receiver can accumulate data beyond Deskflow's configured clipboard size limit | 6.5CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65974 | ERPNext: Server-side template injection leading to remote code execution | 9.9CNA v3.1 | 1.0% | 2026-08-17 | Fix |
| CVE-2026-65832 | Deskflow ServerProxy modifier translation table out-of-bounds read | 8.2CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-65822 | ERPNext: SQL injection in Inactive Customers report via unvalidated `doctype` filter | 7.6CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65640 | WordPress unrestricted file upload | 8.8CNA v3.0 | 1.9% | 2026-08-17 | Exploit codeFix |
| CVE-2026-65351 | Apple Safari denial of service | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Exploit codeFix |
| CVE-2026-65349 | Apple macOS out-of-bounds read | 6.6CISA ADP v3.1 | 0.2% | 2026-08-17 | Exploit codeFix |
| CVE-2026-65347 | Apple macOS denial of service | 6.5CISA ADP v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-65346 | Apple macOS integer overflow | 8.8CISA ADP v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-65343 | Apple macOS use-after-free | 7.5CISA ADP v3.1 | 0.7% | 2026-08-17 | Exploit codeFix |
| CVE-2026-65341 | Apple Safari use-after-free | 5.4CISA ADP v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-65340 | Apple Safari denial of service | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65339 | Apple macOS logic flaw | 5.0CISA ADP v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-65338 | Apple Safari use-after-free | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65337 | Apple Safari denial of service | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65336 | Apple Safari improper input validation | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65335 | Apple Safari memory corruption | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65334 | Apple Safari out-of-bounds write | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65333 | Apple Safari memory corruption | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65332 | Apple Safari denial of service | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65331 | Apple Safari denial of service | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-65330 | Apple macOS denial of service | 6.5CISA ADP v3.1 | 0.5% | 2026-08-17 | Exploit codeKCVFix |
| CVE-2026-65329 | Apple iOS and iPadOS improper authentication | 5.9CISA ADP v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-64868 | QuantumNous new-api new API: Unauthenticated payment webhooks allow memory and disk DoS | 7.5CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-64866 | QuantumNous new-api new API: Admin can reset passkeys for same-level or higher-privileged users | 5.1CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-64865 | QuantumNous New API user quota cache race condition | 6.0CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-64859 | QuantumNous New API admin user list API information disclosure | 9.1CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-64849 | MLflow server-side request forgery | 9.3CNA v3.1 | 9.8% | 2026-08-17 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2026-64788 | Apple macOS memory corruption | 5.4CISA ADP v3.1 | 0.3% | 2026-08-17 | Exploit codeKCVFix |
| CVE-2026-64787 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-64784 | Apple Safari out-of-bounds read | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-64782 | Apple Safari race condition | 3.1CISA ADP v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-64781 | Apple Safari improper input validation | 4.3CISA ADP v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-64780 | Apple Safari memory corruption | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-64779 | Apple Safari race condition | 3.1CISA ADP v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-64778 | Apple Safari information disclosure | 6.5CISA ADP v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-64760 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-64715 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-64657 | Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL | 8.4CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-63670 | ApostropheCMS HTML sanitizer cross-site scripting | 6.1CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-63669 | ApostropheCMS page move operation missing authorization | 6.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-63667 | ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal | 6.5CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-63409 | Deskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow client | 8.2CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-63178 | Onyx Curator-scope IDOR: Any curator can modify membership of arbitrary user groups | 6.5CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-62982 | Glances action template sanitizer OS command injection | 8.8CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-61666 | faye websocket-driver-ruby websocket-driver: Denial of service via malformed host header | 8.9CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-59911 | Dell ObjectScale sensitive information in log files | 5.5CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-59910 | Dell ObjectScale OS command injection | 7.8CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-59909 | Dell ObjectScale path traversal | 7.1CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-59903 | Netty: Cache poisoning and information disclosure via CORS Vary Header Overwrite | 6.5CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-59902 | Netty: Memory exhaustion in SctpMessageCompletionHandler | 7.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-59894 | sqlparse Python and PHP output formatter code injection | 6.2CNA v4.0 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-59893 | sqlparse dollar-quoted literal parser vulnerability | 7.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-59829 | Discourse: Review queue exposes flag-related private message excerpts to category group moderators | 4.3CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-58561 | Huawei HarmonyOS null pointer dereference issue in the image codec module | 4.0CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-58560 | Huawei HarmonyOS null pointer dereference issue in the image codec module | 4.0CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-57485 | Stirling-PDF: Internal Service Account API key disclosure via Pipeline endpoint | 8.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-57233 | notepad-plus-plus Notepad++: Path traversal (Zip Slip) in WinGup Plugin Extraction | 8.1CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-56686 | Dell ObjectScale OS command injection | 7.8CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-56685 | Dell ObjectScale OS command injection | 7.3CNA v3.1 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-56677 | 9Router: Authenticated server-side request forgery (SSRF) via OIDC Provider Test endpoint | 8.6CNA v3.1 | 0.4% | 2026-08-17 | |
| CVE-2026-56090 | Dell ObjectScale uncontrolled search path | 7.3CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-56089 | Dell ObjectScale path traversal | 3.3CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-55704 | Discourse: Shared-draft titles and excerpts leak through group post serialization | 4.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-55674 | Discourse: Cache poisoning/XSS via color scheme cookies | 9.3CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-54758 | notepad-plus-plus notepad++: Stack buffer overflow in expandNppEnvironmentStrs | 7.8CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-54356 | Budibase attachments upload URL endpoint missing authorization | 7.1CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-54336 | JumpServer: KoKo Web Terminal SFTP path traversal on Authorized Asset | 5.4CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-54284 | sqlparse token list construction denial of service | 8.7CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-53960 | Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD | 5.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-52886 | notepad-plus-plus notepad++: Session.xml backupFilePath starts_with Bypass | 5.1CNA v4.0 | 0.2% | 2026-08-17 | Exploit codeFix |
| CVE-2026-51977 | Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera RSA private key hard-coded cryptographic key | 9.1CISA ADP v3.1 | 0.4% | 2026-08-17 | |
| CVE-2026-51346 | StudIP SQL injection | 9.1CISA ADP v3.1 | 0.7% | 2026-08-17 | |
| CVE-2026-50776 | Pronis Loisirs Billetterie CSE path traversal | 7.5CISA ADP v3.1 | 1.8% | 2026-08-17 | |
| CVE-2026-50775 | DataHub v.1.5.0.1 blind server-side request forgery | 9.8CISA ADP v3.1 | 0.8% | 2026-08-17 | |
| CVE-2026-50774 | An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role. | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-50773 | CompuGroup Medical CGM ISIS MED uncontrolled search path | 7.8CISA ADP v3.1 | 0.2% | 2026-08-17 | |
| CVE-2026-50772 | Squirro Cognitive Search password reset function code injection | 9.8CISA ADP v3.1 | 0.9% | 2026-08-17 | |
| CVE-2026-50771 | Squirro Cognitive Search email notification and HTML editor functions cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-08-17 | |
| CVE-2026-50770 | Squirro Cognitive Search privilege escalation | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-50769 | Brainformatik CRM+ appointment conflict check endpoint SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-50768 | T-Systems International GmbH ImageMaster Version: file upload | 8.8CISA ADP v3.1 | 0.7% | 2026-08-17 | |
| CVE-2026-50602 | Planet9 incorrect permission assignment vulnerability Information | 8.5CNA v4.0 | 0.1% | 2026-08-17 | |
| CVE-2026-50601 | Planet9 hard-coded credentials vulnerability Information | 6.6CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-49308 | Huawei HarmonyOS permission control vulnerability in the clipboard module | 5.5CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49307 | Huawei HarmonyOS permission control vulnerability in the multi-mode input module | 6.2CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49306 | Huawei HarmonyOS UAF vulnerability in the time and time zone module | 3.3CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49305 | Huawei HarmonyOS permission control vulnerability in the Wi-Fi enhancement module | 6.2CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49304 | Huawei HarmonyOS permission control vulnerability in the device key management module | 6.2CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49303 | Huawei HarmonyOS permission control vulnerability in the notification module | 5.1CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49302 | Huawei HarmonyOS permission control vulnerability in the notification service module | 6.2CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-49301 | Huawei HarmonyOS permission control vulnerability in the Gallery module | 6.2CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-48053 | Kolibri has unauthenticated server-side request forgery (SSRF) in RemoteFacilityUserViewset | 5.8CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-47698 | patriksimek vm2 host prototype chain vulnerability | 9.8CNA v3.1 | 1.0% | 2026-08-17 | Fix |
| CVE-2026-47686 | VM2 has Missing Error.cause Sanitization that enables sandbox escape to RCE | 9.9CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-47683 | Vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-46345 | compliance-trestle jinja has an arbitrary file write via path traversal | 8.4CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-45791 | Dokploy: Password Change Does not Revoke Active Sessions | 5.9CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-45790 | Dokploy: Invitation Role Escalation allows Organization takeover | 8.0CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-45698 | Netatalk has integer underflow → stack buffer overflow in deletedir | 7.5CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-44846 | JumpServer: Privilege Overwrite via Organization Invite logic flaw | 6.2CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-44845 | JumpServer: Remote command execution (RCE) via Jinja template injection in Applet Host Deployment | 6.7CNA v3.1 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-43795 | Apple Safari memory corruption | 4.3CISA ADP v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-43794 | Apple Safari memory corruption | 8.8CISA ADP v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-43667 | Apple macOS reachable assertion | 6.5CISA ADP v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-42164 | Mahara Text block section information disclosure | 9.8CISA ADP v3.1 | 0.6% | 2026-08-17 | |
| CVE-2026-42163 | Mahara LTI integration improper access control | 9.8CISA ADP v3.1 | 0.5% | 2026-08-17 | |
| CVE-2026-42162 | Mahara artefact file path handling path traversal | 9.1CISA ADP v3.1 | 0.5% | 2026-08-17 | |
| CVE-2026-40506 | OpenEMR path traversal arbitrary Directory Deletion via standard_tables_manage.php | 7.0CNA v4.0 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-40145 | Control protections bypass in BeyondTrust Endpoint Privilege Management support utility | 7.1CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-40144 | Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) | 7.3CNA v4.0 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-40126 | DOM-based cross-site scripting in OutSystems Service Center | 4.8CNA v4.0 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-39255 | SteelSeries GG buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2026-08-17 | |
| CVE-2026-39254 | SteelSeries GG buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2026-08-17 | |
| CVE-2026-38165 | xdocreport Velocity template engine configuration template injection | 9.8CISA ADP v3.1 | 0.9% | 2026-08-17 | |
| CVE-2026-35219 | Budibase: SSRF in Automation Steps Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist | 7.1CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-34789 | FreeCAD: Arbitrary code execution | 7.0CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-34399 | FreeCAD: Arbitrary code execution | 7.8CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-34398 | FreeCAD: Arbitrary code execution via eval on untrusted project file metadata in BIM Workbench | 7.8CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-33437 | Stirling-Tools Stirling-PDF Stirling PDF: Stored XSS in Info Summary | 8.1CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-28984 | Apple Safari use-after-free | 4.3CISA ADP v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-22072 | OPPO Health arbitrary URL Loading in WebView leading to token leakage Risk | 8.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-20000 | itsourcecode Hospital Management System viewprescriptionrecord.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-19999 | Assimp MDL7 bone transformation key parser buffer overflow | 5.3CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-19998 | code-projects Online Shopping System offersmail.php cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-19997 | Webkul Bagisto Backend Sales RMA endpoint requests authorization | 5.1CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19996 | Webkul Bagisto admin customers endpoint improper privilege management | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19995 | Webkul Bagisto RMA message send-message cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-19994 | Webkul Bagisto Configuration Management execute authorization | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19993 | Webkul Bagisto RMA State Validation update-status behavioral workflow | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19992 | Orange View DualSafe Password Manager and Digital Vault extension information disclosure | 2.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19988 | Alaev SEO Tools Extension Popup UI popup.html addDiv cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19987 | SourceCodester Best Employee Management System profile image upload directory directory listing | 6.9CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-19986 | Adblock for YouTube extension content script event listener improper authorization | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19984 | jkawamoto mcp-florence2 __init__.py get_images server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19983 | GL.iNet XE3000 NAS command service gl_nas_sys os command injection | 6.9CNA v4.0 | 2.1% | 2026-08-17 | |
| CVE-2026-19982 | GL.iNet BE9300/MT6000 Firewall-management RPC os command injection | 5.3CNA v4.0 | 1.8% | 2026-08-17 | |
| CVE-2026-19981 | GL.iNet XE3000 Wi-Fi Timer Power-Schedule feature os command injection | 5.3CNA v4.0 | 1.8% | 2026-08-17 | |
| CVE-2026-19980 | GL.iNet XE3000 Language Update ui.update_langs code injection | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19979 | GL.iNet XE3000 WebDAV Service MOVE authorization | 6.9CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-19978 | jiantao88 android-mcp-server command execution index.js child_process.exec os command injection | 4.8CNA v4.0 | 1.2% | 2026-08-17 | |
| CVE-2026-19977 | EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication | 10.0CNA v4.0 | 1.3% | 2026-08-17 | |
| CVE-2026-19976 | Comfast CF-N1-S mbox-config sub_44A968 command injection | 5.1CNA v4.0 | 2.9% | 2026-08-17 | |
| CVE-2026-19975 | Azuriom CMS Money Transfer ProfileController.php transferMoney toctou | 2.3CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-19974 | TreeFrog Framework session cookie store improper authentication | 6.3CNA v4.0 | 0.6% | 2026-08-17 | |
| CVE-2026-19973 | itsourcecode Hospital Management System viewpaymentreport.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-19972 | itsourcecode Hospital Management System viewpatient.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-19971 | LB-Link WR1210M Backup endpoint backup.cgi main missing authentication | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19970 | Assimp MDL7 node graph parser heap-based buffer overflow | 5.3CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-19969 | Assimp MDL7 model mesh generator buffer overflow | 5.3CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-19968 | Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow | 5.3CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-19967 | Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow | 5.3CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-19966 | CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-19965 | automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy | 6.3CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-19693 | extract-zip arbitrary file write outside the destination directory | 8.1CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-19650 | Cross-site request forgery (CSRF) in GitLab | 7.1CNA v3.1 | 0.6% | 2026-08-17 | Exploit codeFix |
| CVE-2026-19589 | Packer vulnerable to arbitrary file write via crafted plugin archive during installation | 7.1CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-19478 | Improper control of generation of code (code injection) in GitLab | 9.4CNA v3.1 | 60.2% | 2026-08-17 | Reported exploitedNucleiEmerging ThreatsExploit codeFix |
| CVE-2026-18674 | Kong Mesh KDS multi-zone sync incorrect authorization | 7.0CNA v4.0 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-17639 | Certain HP Smart Tank All in One potential denial of service | 6.9CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-16471 | Broken access control in Dolusoft Software's Sonlogger | 7.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-16467 | Broken access control in Dolusoft Software's Fortilogger | 7.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-16139 | Progress ShareFile Storage Zones Controller download preparation flow path traversal | 7.2CNA v3.1 | 0.9% | 2026-08-17 | Fix |
| CVE-2026-16138 | Progress ShareFile Storage Zones Controller CICO service insecure deserialization | 8.0CNA v3.1 | 0.8% | 2026-08-17 | Fix |
| CVE-2026-16137 | Progress ShareFile Storage Zones Controller resumable upload endpoint path traversal | 7.2CNA v3.1 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-16049 | Mattermost _GitLab plugin allows cross-channel post injection and phishing | 3.9CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-16048 | Mattermost channel member roles accept out-of-scope roles | 6.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-16047 | Mattermost board channel linking without read channel permission validation | 4.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-16046 | Mattermost missing run-state validation on finished playbook runs | 3.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-16045 | Mattermost delegated OAuth tokens could revoke unrelated OAuth application authorizations | 2.7CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-16044 | Mattermost insufficient validation of guest board admin privileges on archive import | 3.9CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-15754 | Mattermost Server access control policy unassign endpoint incorrect authorization | 4.2CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-15623 | Authenticated blind SQL injection in Google Cloud SecOps SOAR Dashboard Widget Query service | 9.4CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-15218 | Red Hat OpenShift AI maas-api and maas-controller ServiceAccounts privilege escalation | 7.9CNA v3.1 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-14832 | ShopSmart Loyalty for WooCommerce WordPress plugin unauthenticated sensitive information disclosure | 5.3CISA ADP v3.1 | 0.3% | 2026-08-17 | |
| CVE-2026-14564 | Sensitive data exposure in Innotim Software's Logsign SIEM | 9.0CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-13700 | WooMS server-side request forgery | 5.9CISA ADP v3.1 | 0.3% | 2026-08-17 | |
| CVE-2026-13202 | OpenText Directory Services HTML injection in OTDS Swagger UI | 7.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-12630 | Zephyr 6LoWPAN IPHC uncompression out-of-bounds read | 4.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-12629 | Zephyr PL011 UART driver infinite loop | 4.6CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-12553 | HP Web Jetadmin (WJA) potential arbitrary file read/Write | 8.9CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-12519 | Out-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsing | 5.0CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-11817 | Grafana cross-organization permissions API information disclosure | 5.3CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-10527 | Mattermost boards plugin retains Board Admin rights for users demoted to System Guest | 6.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-10080 | Mattermost boards plugin panics on WebSocket command with non-string field types | 6.5CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-9859 | Mattermost Server Boards channel linking incorrect authorization | 6.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-9816 | Mattermost Server Boards board member role validation privilege escalation | 8.3CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-9771 | Zephyr flash_copy system call untrusted pointer dereference | 8.8CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-9693 | Mattermost Server team threads API incomplete cleanup | 3.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74797 | OpenTofu denial of service via malicious zip | 2.3CNA v4.0 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-74796 | OpenTofu symlink following path traversal | 7.0CNA v4.0 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-74795 | Scriban denial of service via uncontrolled recursion | 8.7CNA v4.0 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-74794 | Scriban denial of service via Infinite Recursion | 8.7CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74792 | Scriban stack overflow via nested array initializers | 8.7CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74791 | Scriban authorization bypass via Stale Include Cache | 9.2CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-74790 | Scriban MemberFilter Bypass via TemplateContext Cache | 9.3CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74789 | Scriban LoopLimit Bypass via Built-in Operations | 8.7CNA v4.0 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-74788 | Scriban denial of service via string.pad_left/pad_right | 8.7CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74787 | Scriban uncontrolled recursion via object.to_json | 8.7CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74786 | Scriban denial of service via Unbounded Template Output | 7.1CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74785 | Scriban denial of service via Unbounded resource consumption | 7.1CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74784 | Scriban denial of service via array.insert_at | 8.7CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-74783 | Scriban Parser Recursion denial of service | 8.7CNA v4.0 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-74578 | Linux kernel algif_skcipher AIO IV handling vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-16 | Fix |
| CVE-2026-74251 | Joomla extension phoca.cz unauthenticated SQL injection via attribute filter in Phoca Cart | 9.3CNA v4.0 | 0.4% | 2026-08-16 | Exploit code |
| CVE-2026-73062 | Scriban denial of service via Array Multiplication | 8.7CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-73061 | Scriban arbitrary Property Write via TypedObjectAccessor | 9.3CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-73060 | Scriban denial of service via ScriptRange.Multiply | 8.7CNA v4.0 | 0.5% | 2026-08-16 | |
| CVE-2026-73059 | stoatchat permission bypass via message_fetch | 7.1CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-73058 | stoatchat SSRF via IPv6 unspecified address bypass | 6.9CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-73057 | stoatchat Uncapped SVG Rendering denial of service | 8.7CNA v4.0 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-73056 | SiYuan kernel Unthrottled brute-force via API Token | 9.3CNA v4.0 | 0.8% | 2026-08-16 | Fix |
| CVE-2026-72888 | Net::OAuth versions for Perl allow memory exhaustion | 6.5CISA ADP v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-72887 | Net::OAuth::Client get_request_token vulnerability | 9.8CISA ADP v3.1 | 0.7% | 2026-08-16 | Fix |
| CVE-2026-19964 | Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection | 5.1CNA v4.0 | 0.3% | 2026-08-16 | |
| CVE-2026-19963 | Edimax EW-7478APC stainfo command injection | 5.3CNA v4.0 | 2.0% | 2026-08-16 | |
| CVE-2026-19962 | Edimax EW-7478APC setWAN command injection | 5.3CNA v4.0 | 2.0% | 2026-08-16 | |
| CVE-2026-19961 | Edimax EW-7478APC formWlSiteSurvey buffer overflow | 9.4CNA v4.0 | 0.8% | 2026-08-16 | |
| CVE-2026-19960 | Edimax EW-7478APC formWlbasic command injection | 5.3CNA v4.0 | 2.0% | 2026-08-16 | |
| CVE-2026-19959 | Edimax EW-7478APC formWanTcpipSetup stack-based overflow | 9.4CNA v4.0 | 0.8% | 2026-08-16 | |
| CVE-2026-19958 | iatsiuk pptr-mcp execute tool vm-executor.ts executeCode code injection | 5.3CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19957 | graphlit graphlit-mcp-server ssrf-test endpoint tools.ts fetch server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19956 | gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19955 | TrailDB TOC Validation tdb.c tdb_open out-of-bounds | 5.1CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19934 | itsourcecode Hospital Management System vieworder.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-08-16 | |
| CVE-2026-19933 | DefaultFuction Customer-Relationship-Management-In-C-Project stack-based buffer overflow | 5.3CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19932 | DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection | 5.3CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19930 | Dolibarr User Cloning card.php LDAP injection | 5.3CNA v4.0 | 0.4% | 2026-08-16 | |
| CVE-2026-19929 | OpenBoxes Template Processing server-side template injection | 5.3CNA v4.0 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-19928 | OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management | 5.3CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-19927 | OpenBoxes Product upload Endpoint ProductController.groovy upload server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-19926 | Evergreen open-ils.fielder OpenSRF service osrf-gateway-v1 SQL injection | 6.9CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-19925 | SourceCodester Stock Management System Master.php delete_supplier SQL injection | 5.1CNA v4.0 | 0.3% | 2026-08-16 | |
| CVE-2026-19924 | Tenda AC10 httpd R7WebsSecurityHandler improper authentication | 9.3CNA v4.0 | 1.4% | 2026-08-16 | |
| CVE-2026-19923 | code-projects Online Shopping System checkout_process.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-08-16 | |
| CVE-2026-19922 | code-projects Online Shopping System checkout.php cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-08-16 | |
| CVE-2026-19921 | code-projects Online Shopping System homeaction.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-08-16 | |
| CVE-2026-19728 | Extra Product Options Builder for WooCommerce customer file upload endpoint missing authorization | 7.5CISA ADP v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-19726 | Visualizer WordPress plugin Contributor+ Cross-User Chart Configuration disclosure | 6.5CISA ADP v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-19725 | WPvivid Backup and Migration WordPress plugin unauthenticated path traversal | 9.1CISA ADP v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-19717 | CatFolders Document Gallery WordPress plugin unauthenticated Attachment disclosure via REST API | 7.5CISA ADP v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-19714 | Simple JWT Login WordPress plugin unauthenticated account takeover | 9.1CISA ADP v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-19712 | Masteriyo LMS WordPress plugin Instructor+ stored XSS via Quiz Description | 6.1CISA ADP v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-19711 | Premium Packages Sell Digital Products Securely WordPress plugin arbitrary Amount Withdrawal request | 6.5CISA ADP v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-19613 | ECS WordPress plugin Contributor+ arbitrary post Meta disclosure via Dynamic Repeater ACF Source | 6.5CISA ADP v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-19349 | Lemonldap::NG::Portal versions from, from, from for Perl allow authentication bypass | 9.8CISA ADP v3.1 | 0.8% | 2026-08-16 | Fix |
| CVE-2026-18653 | WP Directory Kit WordPress plugin Admin+ SQL injection via section parameter | 7.2CISA ADP v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-18432 | Frontend Admin by DynamiApps WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.8% | 2026-08-16 | Fix |
| CVE-2026-18402 | SureDash WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-18385 | properfraction ProfilePress profile name fields code injection | 5.4CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-18347 | Kirki WordPress plugin missing authorization authenticated sensitive information disclosure | 4.3CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-18316 | Solace Extra WordPress plugin unauthorized access | 9.1CNA v3.1 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-17608 | WP Compress WordPress plugin cross-site request forgery to arbitrary options deletion | 6.5CNA v3.1 | 0.2% | 2026-08-16 | Fix |
| CVE-2026-17604 | Kirki WordPress plugin path traversal to arbitrary file read | 4.9CNA v3.1 | 1.2% | 2026-08-16 | Fix |
| CVE-2026-17582 | Slider Hero with Video Background, Animation WordPress plugin SQL injection | 4.9CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-17581 | WCPOS WordPress plugin authenticated (Shop Manager+) code injection via thermal Template Engine | 7.2CNA v3.1 | 1.4% | 2026-08-16 | Fix |
| CVE-2026-17533 | All-in-One WP Migration and Backup REST import privilege escalation | 7.2CISA ADP v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-17123 | Royal Addons for Elementor WordPress plugin server-side request forgery | 8.8CNA v3.1 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-17087 | WP Travel Engine WordPress plugin authorization bypass | 7.5CNA v3.1 | 0.7% | 2026-08-16 | Fix |
| CVE-2026-16779 | Kubio AI Page Builder WordPress plugin authorization bypass | 4.3CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-16775 | Smash Balloon Social Post Feed WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-16758 | Snippet Shortcodes WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-16099 | Podlove Podcast Publisher WordPress plugin PHP object injection to arbitrary file deletion | 8.8CNA v3.1 | 1.1% | 2026-08-16 | Fix |
| CVE-2026-16098 | ProSolution WP Client WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.2% | 2026-08-16 | Fix |
| CVE-2026-16079 | Fullscreen Galleria WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-15963 | Quiz and Survey Master (QSM) WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-15790 | Video Gallery WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-15726 | Serious Slider WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-15604 | Toocheke Companion WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-15602 | NEX-Forms WordPress plugin authenticated (Admin+) SQL injection via additional_params parameter | 4.9CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-15441 | Product Table and List Builder For WooCommerce WordPress plugin unauthenticated CSS injection | 5.3CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-15384 | Manual Image Crop WordPress plugin Subscriber+ arbitrary Attachment Image Overwrite via IDOR | 5.7CISA ADP v3.1 | 0.2% | 2026-08-16 | Fix |
| CVE-2026-15351 | WC Vendors WordPress plugin authenticated (Shop Manager+) SQL injection via status parameter | 4.9CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-15345 | ShortPixel Adaptive Images WordPress plugin authorization bypass | 4.3CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-15066 | Loco Translate WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-15056 | StoreEngine WordPress plugin arbitrary file read | 6.5CNA v3.1 | 1.1% | 2026-08-16 | Fix |
| CVE-2026-15009 | Advanced File Manager WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-15002 | Autopay WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-14524 | ProSolution WP Client WordPress plugin unauthenticated arbitrary file deletion | 9.1CNA v3.1 | 1.1% | 2026-08-16 | Fix |
| CVE-2026-14498 | Query Wrangler WordPress plugin remote code execution | 8.8CNA v3.1 | 1.0% | 2026-08-16 | Fix |
| CVE-2026-13712 | Divi - Contributor+ stored XSS via Social Media Follow Skype URL | 5.4CISA ADP v3.1 | 0.2% | 2026-08-16 | Fix |
| CVE-2026-13424 | Online Scheduling and Appointment Booking System WordPress plugin stored cross-site scripting | 7.2CNA v3.1 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-13358 | Appointment Booking Calendar WordPress plugin insecure direct object reference | 6.5CNA v3.1 | 0.7% | 2026-08-16 | Fix |
| CVE-2026-13167 | Everest Forms WordPress plugin authorization bypass | 4.3CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-12998 | Forminator Forms WordPress plugin insecure direct object reference | 5.3CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-12905 | Bookly WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-12477 | Gravity Booster WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-11780 | Quiz and Survey Master (QSM) WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-10734 | Infility Global WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2026-08-16 | Fix |
| CVE-2026-10035 | Turnkey bbPress by WeaverTheme WordPress plugin authenticated (Administrator+) PHP object injection | 6.6CNA v3.1 | 0.7% | 2026-08-16 | Fix |
| CVE-2026-9767 | The School Management WordPress plugin SQL injection | 6.5CNA v3.1 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-2497 | Gallery by BestWebSoft WordPress plugin SQL injection | 7.2CNA v3.1 | 0.6% | 2026-08-16 | Fix |
| CVE-2026-2487 | Admin Custom Login WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-2357 | Bold Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-16 | Fix |
| CVE-2026-2283 | User Login History WordPress plugin SQL injection | 4.9CNA v3.1 | 0.5% | 2026-08-16 | Fix |
| CVE-2026-74767 | Unbounded DAA Decompression in Pandora allows denial of service via decompression bomb | 8.7CNA v4.0 | 0.4% | 2026-08-15 | |
| CVE-2026-74764 | Path traversal in TAR Archive Extraction allows arbitrary file write in Pandora | 10.0CNA v4.0 | 0.6% | 2026-08-15 | |
| CVE-2026-74577 | Linux kernel MPLS route netlink reply vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74576 | Linux kernel slab object extension allocator vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74575 | Linux kernel Thunderbolt XDomain delayed work use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74574 | Linux kernel idxd character device open path vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74573 | Linux kernel arm-smmu-v3-iommufd vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74572 | Linux kernel btrfs zoned metadata writeback deadlock | 7.5CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74571 | Linux kernel btrfs rescue mount block group init null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74570 | Linux kernel NTFS runlist allocation vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74569 | Linux kernel SIP connection tracking NAT vulnerability | 9.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74568 | Linux kernel vGIC LPI xarray race condition | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74567 | Linux kernel keyring key-chunk lookup out-of-bounds read | 7.1CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74566 | Linux kernel keyring index tree vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74565 | Linux kernel nf_tables object table use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74564 | Linux kernel xt_hashlimit netfilter match vulnerability | 7.1CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74563 | Linux kernel RDS over TCP address lookup vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74562 | Linux kernel nexthop replace notification use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74561 | Linux kernel IPv6 nexthop route cache use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74560 | Linux kernel AF_XDP multi-buffer Tx vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74559 | Linux kernel AF_XDP generic Tx path vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74558 | Linux kernel xsk vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74557 | Linux kernel libiscsi SCSI response handling information disclosure | 7.5CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74556 | Linux kernel libiscsi_tcp PDU parser vulnerability | 9.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74555 | Linux kernel libsas host adapter deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74554 | Linux kernel ath12k Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74553 | Linux kernel nct6775 hwmon driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74552 | Linux kernel lm90 hwmon driver null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74551 | Linux kernel nzxt-smart2 hwmon driver memory corruption | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74550 | Linux kernel ICMP and NDISC redirect handling vulnerability | 7.5CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74549 | Linux kernel nct6775 hwmon driver out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74548 | Linux kernel forcedeth driver use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74547 | Linux kernel adt7470 hwmon driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74546 | Linux kernel adt7470 hwmon driver race condition | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74545 | Linux kernel rtase driver double free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74544 | Linux kernel cls_u32 packet classifier vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74543 | Linux kernel UDP tunnel NIC offload memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74542 | Linux kernel netfs writeback allocation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74541 | Linux kernel Bluetooth ISO connection cleanup use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74540 | Linux kernel L2CAP channel lookup use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74539 | Linux kernel Bluetooth ISO socket handling vulnerability | 8.0CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74538 | Linux kernel Bluetooth ISO connection handling vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74537 | Linux kernel Bluetooth ISO socket handling use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74536 | Linux kernel Bluetooth ISO socket release vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74535 | Linux kernel Bluetooth ISO socket timeout handling deadlock | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74534 | Linux kernel Bluetooth ISO connection reference counting use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74533 | Linux kernel Bluetooth ISO connection data handling use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74532 | Linux kernel btintel Bluetooth driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74531 | Linux kernel Bluetooth hci_conn abort handling use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74530 | Linux kernel Bluetooth hci_sync BIG sync connect use-after-free | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74529 | Linux kernel Bluetooth hci_sync periodic advertising sync use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74528 | Linux kernel Bluetooth hci_sync PAST callback vulnerability | 8.0CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74527 | Linux kernel octeontx2-af CGX PKIND configuration vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74526 | Linux kernel mpi3mr fault uevent handling deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74525 | Linux kernel sxgbe TX and RX ring allocation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74524 | Linux kernel RISC-V memory hot-remove page table walk vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74523 | Linux kernel qede tunnel port recovery deadlock | 7.5CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74522 | Linux kernel ksmbd file table closing use-after-free | 8.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74521 | Linux kernel ksmbd SMB3 multichannel session binding vulnerability | 9.1CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74520 | Linux kernel IOMMUFD I/O page fault handling use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74519 | Linux kernel pinctrl device tree map parsing double free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74518 | Linux kernel hugetlb file region cache vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74517 | Linux kernel KVM I/O APIC delayed EOI handling use-after-free | 9.3CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74516 | Linux kernel KVM SVM AVIC MSR interception denial of service | 8.2CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74515 | Linux kernel KVM s390 zPCI adapter interrupt forwarding vulnerability | 8.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74514 | Linux kernel KVM s390 PCI vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74513 | Linux kernel dibs loopback device driver use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74512 | Linux kernel audit rule deletion use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74510 | Linux kernel Bluetooth pairing command management use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74509 | Linux kernel Bluetooth advertising instance management use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74508 | Linux kernel Bluetooth HIDP frame parsing vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74507 | Linux kernel Bluetooth HIDP report parsing vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74506 | Linux kernel AFS call handling use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74505 | Linux kernel 6fire USB audio driver probe use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74504 | Linux kernel sequencer timer initialization divide-by-zero | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74503 | Linux kernel ALSA timer instance close handling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74502 | Linux kernel UMP legacy rawmidi conversion double free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74501 | Linux kernel ALSA USB audio driver use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74500 | Linux kernel RME Digiface status reporting information disclosure | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74499 | Linux kernel ALSA USB Audio driver out-of-bounds write | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74498 | Linux kernel USB audio DMA buffer allocation out-of-bounds write | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74497 | Linux kernel USB audio implicit feedback sync vulnerability | 8.4CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74496 | Linux kernel FOU tunnel socket creation use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74495 | Linux kernel igbvf transmit DMA cleanup vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74494 | Linux kernel ksmbd SMB2 negotiate handling memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74493 | Linux kernel SMC link group termination use-after-free | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74492 | Linux kernel netfilter ipset hash sets vulnerability | 8.4CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74491 | Linux kernel PCI address range parser vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74490 | Linux kernel TIPC socket poll tracing use-after-free | 8.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74489 | Linux kernel mac80211 block ack session handling use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74488 | Linux kernel mwifiex Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-74487 | Linux kernel binfmt_misc interpreter handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74486 | Linux kernel binfmt_misc interpreter handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74485 | Linux kernel binfmt_misc field parser vulnerability | 7.1CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74484 | Linux kernel binfmt_misc F entry handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74483 | Linux kernel binfmt_misc mount handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74482 | Linux kernel huge page splitting vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74481 | Linux kernel page reporting use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74480 | Linux kernel bridge multicast fast-leave vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74479 | Linux kernel pktgen proc entry handling use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74478 | Linux kernel um vector use-after-free | 9.8CNA v3.1 | 0.9% | 2026-08-15 | Fix |
| CVE-2026-74477 | Linux kernel uprobes fork handling null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74476 | Linux kernel veth XDP path vulnerability | 9.1CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74475 | Linux kernel VXLAN route shortcircuit vulnerability | 10.0CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74474 | Linux kernel VXLAN transmit path vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74473 | Linux kernel VXLAN route shortcircuit vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74472 | Linux kernel ublk driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74471 | Linux kernel ftrace event registration use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74470 | Linux kernel scsi_debug REPORT ZONES handler out-of-bounds write | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74469 | Linux kernel SCTP sock_diag vulnerability | 8.8CNA v3.1 | 1.5% | 2026-08-15 | Exploit codeFix |
| CVE-2026-74468 | Linux kernel pch GPIO driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74467 | Linux kernel s390 qeth driver vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74466 | Linux kernel s390 zcrypt driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74465 | Linux kernel openvswitch use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74464 | Linux kernel openvswitch vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74463 | Linux kernel jz4780 I2C driver deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74462 | Linux kernel i.MX I2C driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74461 | Linux kernel i.MX I2C slave driver use-after-free | 8.4CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74460 | Linux kernel EMS CPC USB CAN driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74459 | Linux kernel ETAS ES58x USB CAN driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74458 | Linux kernel Kvaser USB CAN driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74457 | Linux kernel peak_usb CAN driver out-of-bounds read | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74456 | Linux kernel peak_usb CAN driver double free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74455 | Linux kernel peak_usb CAN driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74454 | Linux kernel VC4 GPU binner overflow handling vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74453 | Linux kernel VC4 GPU binner tile state data array vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74452 | Linux kernel Panthor GPU firmware loader buffer overflow | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74451 | Linux kernel Panthor GPU firmware interface vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74450 | Linux kernel amdgpu power management pptable use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74449 | Linux kernel amdgpu display mcache setting calculation divide by zero | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74448 | Linux kernel amdkfd queue ID allocation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74447 | Linux kernel amdkfd EOP ring buffer size alignment vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74446 | Linux kernel amdkfd CRIU event checkpointing vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74445 | Linux kernel vmwgfx DX_BIND_QUERY handler null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74444 | Linux kernel vmwgfx DRAW_PRIMITIVES command handler out-of-bounds read | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74443 | Linux kernel vmwgfx DMA command verifier vulnerability | 8.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74442 | Linux kernel vmwgfx VKMS initialization vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74441 | Linux kernel USB Type-C UCSI port unregistration use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74440 | Linux kernel Xe driver exec IOCTL vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74439 | Linux kernel IOMMU vt-d driver vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74438 | Linux kernel sun4i-ss RNG driver buffer overflow | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74437 | Linux kernel uvcvideo status control deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74436 | Linux kernel rxrpc vulnerability | 9.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74435 | Linux kernel rxrpc data decryption buffer null pointer dereference | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74434 | Linux kernel rxrpc out-of-band message queue vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74433 | Linux kernel rxrpc use-after-free | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74432 | Linux kernel rxrpc recvmsg MSG_PEEK handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74431 | Linux kernel rxrpc denial of service | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74430 | Linux kernel rxrpc ACKALL packet handling null pointer dereference | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74429 | Linux kernel rxrpc client call transmission vulnerability | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74428 | Linux kernel rxrpc vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74427 | Linux kernel AFS network namespace teardown vulnerability | 9.8CNA v3.1 | 0.8% | 2026-08-15 | Fix |
| CVE-2026-74426 | Linux kernel AFS dynamic root mount null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74425 | Linux kernel AFS cache manager callback handler vulnerability | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74424 | Linux kernel framebuffer console null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74423 | Linux kernel amdxdna accelerator driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74422 | Linux kernel Rockchip HDMI driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74421 | Linux kernel rockchip dw_dp driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74420 | Linux kernel drm gpusvm denial of service | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74419 | Linux kernel amdxdna accelerator driver vulnerability | 7.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74418 | Linux kernel dma-fence tracepoints null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74417 | Linux kernel Radeon framebuffer pitch calculation integer overflow | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74416 | Linux kernel Radeon GPU ring buffer restore memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74415 | Linux kernel atcspi200 SPI driver use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74414 | Linux kernel hfsplus file system null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74413 | Linux kernel rtw89 Wi-Fi driver AER handler vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74412 | Linux kernel rtw88 Wi-Fi driver AER handler vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74411 | Linux kernel rtw89 Wi-Fi driver scan index handling infinite loop | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74410 | Linux kernel rtw88 PCIe RX handling out-of-bounds read | 8.1CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74409 | Linux kernel rtw89 Wi-Fi driver link lookup vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74408 | Linux kernel ath9k TX status queue handling vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74407 | Linux kernel ath11k SSR recovery null pointer dereference | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74406 | Linux kernel VXLAN GRO receive null pointer dereference | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74405 | Linux kernel OPP table lookup race condition | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74404 | Linux kernel CCP SNP reserved memory region parsing out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74403 | Linux kernel crypto ccp vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74402 | Linux kernel Atmel SHA204A hardware RNG driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74401 | Linux kernel DLM message send queue use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74400 | Linux kernel BPF dentry xattr kfuncs null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74399 | Linux kernel EVM extended attribute listing vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74398 | Linux kernel IPv6 duplicate address detection vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74397 | Linux kernel mlx5 transport domain allocation vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74396 | Linux kernel mlx5 RDMA driver vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74395 | Linux kernel mlx5 DEVX event subscription null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74394 | Linux kernel RDMA srpt driver integer overflow | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74393 | Linux kernel DRM sync object memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74392 | Linux kernel device mapper bio polling denial of service | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74391 | Linux kernel synthetic event tracing vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74390 | Linux kernel irdma driver out-of-bounds write | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74389 | Linux kernel hns RoCE driver denial of service | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74388 | Linux kernel OSS sequencer use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74387 | Linux kernel sequencer MIDI output use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74386 | Linux kernel nvmet-tcp driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74385 | Linux kernel nvmet-tcp driver vulnerability | 7.5CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74384 | Linux kernel NVMe multipath NUMA path array vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74383 | Linux kernel NVMe PCI descriptor pool setup out-of-bounds access | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74382 | Linux kernel cls_bpf offload rollback stack overflow | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74381 | Linux kernel Host1x buffer object cache memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74380 | Linux kernel Host1x IOMMU buffer mapping vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74379 | Linux kernel DAX kmem resource removal null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74378 | Linux kernel RDMA rxe SRQ WQE handling buffer overflow | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74377 | Linux kernel RDMA rxe non-SRQ receive queue handling out-of-bounds read | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74376 | Linux kernel RAID10 discard bio cleanup vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74375 | Linux kernel RAID1 and RAID10 read error recovery deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74374 | Linux kernel RAID1 and RAID10 error-path allocation deadlock | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74373 | Linux kernel RAID1 and RAID10 bio accounting vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74372 | Linux kernel RAID1 REQ_ATOMIC error handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74371 | Linux kernel BPF_PROG_QUERY cgroup handler out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74370 | Linux kernel live update session retrieval race condition | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74369 | Linux kernel liveupdate vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74368 | Linux kernel ath12k Wi-Fi7 TKIP MIC verification memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74367 | Linux kernel ath12k Wi-Fi driver vdev creation vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74366 | Linux kernel ath12k Wi-Fi driver station link handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74365 | Linux kernel NVDIMM BTT lane acquisition race condition | 7.3CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74364 | Linux kernel BPF map-in-map exclusivity check vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74363 | Linux kernel bpffs inode freeing use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74362 | Linux kernel ext2 direct I/O writes improper error handling | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74361 | Linux kernel NVMe FDP index validation vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74360 | Linux kernel BPF map element iterator vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74359 | Linux kernel configfs directory lookup vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74358 | Linux kernel ext4 fast commit vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74357 | Linux kernel amdgpu core dump vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74356 | Linux kernel vhost ring notifications denial of service | 7.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74355 | Linux kernel vt-d IOMMU driver vulnerability | 8.2CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74354 | Linux kernel BPF arena memory vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74353 | Linux kernel amdkfd queue suspend and resume vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74352 | Linux kernel reserved memory lookup use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74351 | Linux kernel OCFS2 DLM debugfs interface vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74350 | Linux kernel OCFS2 fast symlink vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74349 | Linux kernel OCFS2 FITRIM handling integer underflow | 7.1CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74348 | Linux kernel OCFS2 DLM debugfs interface use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74347 | Linux kernel netfilter conntrack timeout policy vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74346 | Linux kernel irdma RDMA driver out-of-bounds read | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74345 | Linux kernel siw RDMA driver use-after-free | 9.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74344 | Linux kernel BPF red-black tree map vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74343 | Linux kernel kernfs extended attributes race condition | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74342 | Linux kernel kernfs node initialization vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74341 | Linux kernel wcn36xx Wi-Fi driver out-of-bounds write | 8.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-74340 | Linux kernel wcn36xx Wi-Fi driver out-of-bounds read | 8.1CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74339 | Linux kernel ALSA sequencer read path vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74338 | Linux kernel BPF LSM cgroup verifier vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74337 | Linux kernel BPF LRU map locking deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74336 | Linux kernel mac80211 S1G TIM element parser vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74335 | Linux kernel BPF task lookup by vpid null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74334 | Linux kernel RDMA nldev race condition | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74333 | Linux kernel acp-sdw-legacy driver vulnerability | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74332 | Linux kernel AMD ACP SDW SOF driver vulnerability | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74331 | Linux kernel firmware loader PM notifier deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74330 | Linux kernel configfs directory traversal vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74329 | Linux kernel watchdog PM notifier vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74328 | Linux kernel IOMMUFD dmabuf detachment vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74327 | Linux kernel vmalloc subsystem null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74326 | Linux kernel mt7921 Wi-Fi driver probe resource leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74325 | Linux kernel mt76 Wi-Fi driver offchannel link handling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74324 | Linux kernel mt7925 Wi-Fi driver testmode query vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74323 | Linux kernel mt7996 Wi-Fi driver TX token handling vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74322 | Linux kernel mt7996 Wi-Fi driver TX path null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74321 | Linux kernel Btrfs delayed reference processing vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74320 | Linux kernel sm501fb OF binding code use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74319 | Linux kernel Btrfs zoned data relocation deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74318 | Linux kernel Btrfs inline extent cloning deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74317 | Linux kernel ixgbe XDP queue configuration vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74316 | Linux kernel NFSD vulnerability | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74315 | Linux kernel NFS lock manager file lookup vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74314 | Linux kernel BPF map value recycling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74313 | Linux kernel VDUSE device open path use-after-free | 8.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74312 | Linux kernel vhost-vDPA mmap and fault handling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74311 | Linux kernel virtio RTC driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74310 | Linux kernel vhost-net zerocopy transmit vulnerability | 9.3CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74309 | Linux kernel Octeon endpoint vDPA driver vulnerability | 10.0CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-74308 | Linux kernel ext4 inline data handling denial of service | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74307 | Linux kernel ext4 file system vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74306 | Linux kernel VFIO QAT migration driver race condition | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74305 | Linux kernel BPF cgroup local storage vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74304 | Linux kernel hci_qca Bluetooth driver null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74303 | Linux kernel hci_qca Bluetooth driver null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74302 | Linux kernel Bluetooth HCI device teardown use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74301 | Linux kernel btmtk Bluetooth driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74300 | Linux kernel Bluetooth HCI codec capability parser vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-74299 | Linux kernel RDMA core FRMR pool aging vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74298 | Linux kernel RDMA core FRMR pool vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74297 | Linux kernel mlx5 RDMA RQ WQE sizing vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74296 | Linux kernel mlx5 RDMA UAR allocation vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74295 | Linux kernel hdac_hdmi codec driver vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74294 | Linux kernel Meson AIU audio driver vulnerability | 7.3CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74293 | Linux kernel fsl_audmix ASoC driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74292 | Linux kernel Tegra210 AHUB driver vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74291 | Linux kernel ASoC topology parser vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74290 | Linux kernel cls_flow traffic classifier vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74289 | Linux kernel IPv4 FIB notification use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74288 | Linux kernel FIB rules dump vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74287 | Linux kernel SCTP ASCONF parameter parsing vulnerability | 9.1CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74286 | Linux kernel PFCP netdevice driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74285 | Linux kernel leased RX queue memory provider vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74284 | Linux kernel sch_hfsc scheduler vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74283 | Linux kernel TIPC netlink interface vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | KCVFix |
| CVE-2026-74282 | Linux kernel TIPC connection manager integer underflow | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74281 | Linux kernel TIPC name table vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74280 | Linux kernel Marvell OcteonTX crypto driver vulnerability | 10.0CNA v3.1 | 0.8% | 2026-08-15 | Fix |
| CVE-2026-74279 | Linux kernel Cavium CPT crypto driver vulnerability | 10.0CNA v3.1 | 0.8% | 2026-08-15 | Fix |
| CVE-2026-74278 | Linux kernel ALSA sequencer error events vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74277 | Linux kernel IOMMU DMA mapping vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74276 | Linux kernel Xilinx SPI driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74275 | Linux kernel CXL region auto-attach out-of-bounds access | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74274 | Linux kernel CXL region auto-discovery vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74273 | Linux kernel CXL region creation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74272 | Linux kernel CXL region deletion race condition | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74271 | Linux kernel power supply core vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74270 | Linux kernel handshake netlink interface vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74269 | Linux kernel bnxt XDP receive path vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74268 | Linux kernel TCP child socket teardown vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74267 | Linux kernel CoDel queueing discipline vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-74266 | Linux kernel dualpi2 queueing discipline null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74265 | In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup cal | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74264 | Linux kernel net watchdog race condition | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74263 | Linux kernel t7xx WWAN control TX null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74262 | Linux kernel KCM socket callbacks vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74261 | Linux kernel ALSA sequencer FIFO vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74260 | Linux kernel netfilter nf_dup_netdev vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74258 | Linux kernel BPF uprobe multi vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74257 | Linux kernel sockmap UDP receive use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-74256 | Linux kernel BPF sockmap integer overflow | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-74255 | Linux kernel TIPC use-after-free | 9.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73635 | Apache Struts: Unbounded growth of localized-text caches driven by the request locale | 7.5CISA ADP v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-73634 | Apache Struts: Unbounded read of a Content Security Policy violation report | 7.5CISA ADP v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-73632 | Apache Struts: Shared serialization state in the JSON plugin | 4.3CISA ADP v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-73631 | Apache Struts: Shared parsing state in the JSON plugin | 4.3CISA ADP v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-73194 | DBI versions for Perl allow a heap out-of-bounds write | 9.1CISA ADP v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73193 | DBI versions for Perl allow a heap out-of-bounds write on 32-bit perl | 9.8CISA ADP v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-73055 | Shescape and Home Directory Disclosure via BusyBox | 6.3CNA v4.0 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-73054 | SiYuan authentication bypass via WebSocket | 8.7CNA v4.0 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73053 | SiYuan cross-site scripting via unicode2Emoji | 9.4CNA v4.0 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73052 | SiYuan stored XSS via Attribute-View Field Names | 9.4CNA v4.0 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73050 | SiYuan stored XSS via select option color | 9.4CNA v4.0 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-73047 | siyuan server-side template injection via attribute-view | 8.6CNA v4.0 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-73046 | SiYuan authentication bypass via HTTP Basic Auth | 9.3CNA v4.0 | 0.8% | 2026-08-15 | Fix |
| CVE-2026-73045 | SiYuan brute-force via authFilePublishAccess | 8.7CNA v4.0 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73044 | SiYuan stored cross-site scripting via Column Width | 9.4CNA v4.0 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-73043 | SiYuan remote code execution via Template Calculation | 9.4CNA v4.0 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-73042 | SiYuan remote code execution via Menu Metadata | 9.4CNA v4.0 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-73041 | SiYuan remote code execution via PDF Annotations | 9.4CNA v4.0 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72502 | Linux kernel IPv6 TCP MSS calculation null pointer dereference | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72501 | Linux kernel bnxt_re RDMA driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72500 | Linux kernel bnxt_re SRQ toggle page vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72499 | Linux kernel bnxt_re CQ toggle page vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72498 | Linux kernel bnxt_re RDMA driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72497 | Linux kernel bnxt_re RDMA driver vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72496 | Linux kernel bnxt_re RDMA driver vulnerability | 9.2CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-72495 | Linux kernel bnxt_re RDMA driver vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72494 | Linux kernel irdma RDMA driver vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72493 | Linux kernel net use-after-free | 9.9CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72492 | Linux kernel ksmbd server use-after-free | 8.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72491 | Linux kernel 9P RDMA transport race condition | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72490 | Linux kernel RTL8723BS Wi-Fi driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72489 | Linux kernel NVEC driver use-after-free | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72488 | Linux kernel SoundWire core vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72487 | Linux kernel PCI ROM access vulnerability | 7.7CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72486 | Linux kernel mtk-adsp mailbox driver use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72485 | Linux kernel CoreSight platform driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72484 | Linux kernel MOST video driver double free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72483 | Linux kernel MAX3421 USB host driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72482 | Linux kernel GPIB driver use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72481 | Linux kernel AK8975 magnetometer driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72480 | Linux kernel Xilinx AMS ADC driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72479 | Linux kernel mma8452 accelerometer driver improper error handling | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72478 | Linux kernel NTFS3 mapping-pairs parsing out-of-bounds read | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72477 | Linux kernel NTFS3 rename handling vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72476 | Linux kernel DMA engine channel release use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72475 | Linux kernel AXI DMAC driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72474 | Linux kernel AXI DMAC driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72473 | Linux kernel xprtrdma request recycling vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72472 | Linux kernel NFS file lock list traversal use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72471 | Linux kernel NTFS3 seek data or hole vulnerability | 7.1CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-72470 | Linux kernel NTFS3 log replay vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72469 | Linux kernel xprtrdma connection teardown vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72468 | Linux kernel xprtrdma device removal null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72467 | Linux kernel xprtrdma connection setup vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72466 | Linux kernel xprtrdma backchannel decoding vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72465 | Linux kernel xprtrdma reply credit parsing vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72464 | Linux kernel xprtrdma receive handling vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72463 | Linux kernel xfrm async resumption use-after-free | 9.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72462 | Linux kernel AppArmor unix socket mediation race condition | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72461 | Linux kernel AppArmor vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72460 | Linux kernel AppArmor profile change vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72459 | Linux kernel AppArmor label allocation memory leak | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72458 | Linux kernel AppArmor policy unpacking null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72457 | Linux kernel AppArmor policy unpacking vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72456 | Linux kernel AppArmor executable path lookup memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72455 | Linux kernel AppArmor audit logging vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72454 | Linux kernel MIPI I3C HCI device lookup use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72453 | Linux kernel regmap cache initialization null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72452 | Linux kernel i915 CRTC color management vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72451 | Linux kernel XFRM state cache race condition | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72450 | Linux kernel XFRM selector matching vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72449 | Linux kernel AMDKFD CRIU SVM resume use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72448 | Linux kernel octeontx2-pf driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72447 | Linux kernel SCTP diagnostic interface information disclosure | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72446 | Linux kernel ALSA USB Audio qcom driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72445 | Linux kernel ALSA usb-audio qcom driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72444 | Linux kernel flow dissector Ethernet address parsing vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-72443 | Linux kernel ALSA USB audio driver use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72442 | Linux kernel flowtable IP6IP6 tunnel handling vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72441 | Linux kernel ieee802154 driver information disclosure | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72440 | Linux kernel RAID1 write request handling memory leak | 7.1CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-72439 | Linux kernel RAID10 write request handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72438 | Linux kernel RAID10 discard handling vulnerability | 7.5CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-72437 | Linux kernel RAID1 read retry path vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72436 | Linux kernel ipset hash type lockless reader vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72435 | Linux kernel ipset comment extension vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72434 | Linux kernel netfilter ipset vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72433 | Linux kernel nftables bridge metadata expression vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72432 | Linux kernel TPM CRB driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72431 | Linux kernel /proc/allocinfo interface use-after-free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72430 | Linux kernel net/sched act_ct memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72429 | Linux kernel IPv6 IOAM type confusion | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72428 | Linux kernel BPF verifier nospec check vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72427 | Linux kernel BPF cgroup effective program array vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72426 | Linux kernel BPF verifier stack slot cleanup vulnerability | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72425 | Linux kernel ice driver memory leak | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72424 | Linux kernel RTC msc313 driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72423 | Linux kernel BPF conntrack helpers vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72422 | Linux kernel ksmbd SMB2 NEGOTIATE handler use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72421 | Linux kernel IPv4 FIB lookup vulnerability | 10.0CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72420 | Linux kernel md raid5 stripe batch handling race condition | 8.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72419 | Linux kernel netfilter NAT initialization vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72418 | Linux kernel netfilter nf_conncount vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72417 | Linux kernel netfilter flowtable IPv4 tunnel vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72416 | Linux kernel netfilter nft_compat ebtables emulation vulnerability | 7.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72415 | Linux kernel ASoC SDCA enum control vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72414 | Linux kernel DSA sja1105 PTP perout pin divide-by-zero | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72413 | Linux kernel SCTP INIT handling memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72412 | Linux kernel s390 page table handling vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72411 | Linux kernel DSA mxl862xx switch driver use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72410 | Linux kernel octeontx2-af driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72409 | Linux kernel mvneta driver vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72408 | Linux kernel Geneve GRO completion vulnerability | 10.0CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72407 | Linux kernel Geneve GRO completion vulnerability | 10.0CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72406 | In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_remove_one() unregisters and frees resources owned by the net_device, including the DMA block, MMIO mapping, PCI regions, | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72405 | Linux kernel UDP tunnel NIC sync use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72404 | Linux kernel TIPC UDP media bearer use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72403 | Linux kernel ALSA FCP USB audio driver null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72402 | Linux kernel BPF verifier log output vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72401 | Linux kernel BPF verifier vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72400 | Linux kernel SEG6 BPF encapsulation validator vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72399 | Linux kernel enetc XDP redirect vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72398 | Linux kernel SCTP handshake cookie processing vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72397 | Linux kernel PMBus core VID encoding vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72396 | Linux kernel adm1275 hwmon driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72395 | Linux kernel PMBus regulator core vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72394 | Linux kernel aspeed-g6-pwm-tach driver divide-by-zero | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72393 | Linux kernel fbnic driver use-after-free | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72392 | Linux kernel IPv6 FIB6 table dump null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72391 | Linux kernel SFP I2C MDIO bus driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72390 | Linux kernel sch_teql use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72389 | Linux kernel bridge STP topology change timer use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72388 | Linux kernel Panthor GPU driver fence lock vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72387 | Linux kernel Panthor GPU driver tiler OOM handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72386 | Linux kernel Panthor GPU driver tiler OOM handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72385 | Linux kernel fprobe function graph tracer null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72384 | Linux kernel ts4800 interrupt controller driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72383 | Linux kernel SCTP address workqueue timer use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72382 | Linux kernel ksmbd security descriptor ACL parser integer underflow | 8.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72381 | Linux kernel ksmbd durable handle reconnect use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72380 | Linux kernel Xen pvcalls frontend driver out-of-bounds write | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72379 | Linux kernel VFS O_TMPFILE creation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72378 | Linux kernel AFS client vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72377 | Linux kernel AFS symlink and mountpoint folio handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72376 | Linux kernel AFS cell creation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72375 | Linux kernel AFS inode lock work initialization vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72374 | Linux kernel AFS callback service message parsing vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72373 | Linux kernel AFS callback break handling null pointer dereference | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72372 | Linux kernel AFS cell lookup vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72371 | Linux kernel AFS volume tree management vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72370 | Linux kernel iomap vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72369 | Linux kernel Minix v3 superblock validation vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72368 | Linux kernel cachefiles directory creation vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72367 | Linux kernel iomap writeback EOF trimming integer underflow | 8.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72366 | Linux kernel netfs cache write request creation vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72365 | Linux kernel netfs writethrough writes vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72364 | Linux kernel netfs writeback improper error handling | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72363 | Linux kernel netfs writeback vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72362 | Linux kernel Xe GPU page table walk null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72361 | Linux kernel Xe GPU driver hardware engine init double free | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72360 | Linux kernel Xe GPU driver VF/PF relay handling denial of service | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72359 | Linux kernel Xe GPU driver memory stats null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72358 | Linux kernel Xe GPU page table walk vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72357 | Linux kernel uprobe trampoline check vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72356 | Linux kernel cifs read request handling vulnerability | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72355 | Linux kernel netfs subrequest list walk vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72354 | Linux kernel NTFS MFT writeback vulnerability | 8.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-72353 | Linux kernel NTFS runlist handling vulnerability | 8.8CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-72352 | Linux kernel HID-BPF data access vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72351 | Linux kernel GUE remote checksum offload vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72350 | Linux kernel xt_u32 netfilter match vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72349 | Linux kernel xt_rateest netfilter match vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72348 | Linux kernel ip6tables extension header matching vulnerability | 9.1CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72347 | Linux kernel xt_connmark netfilter target vulnerability | 7.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72346 | Linux kernel bitland-mifs WMI driver null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72345 | Linux kernel mlx5 LAG FDB error rollback vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72344 | Linux kernel mlx5e TC peer flow cleanup vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72343 | Linux kernel mlx5e HV VHCA statistics vulnerability | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72342 | Linux kernel mlx5e HV VHCA statistics race condition | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72341 | Linux kernel mlx5e channel statistics race condition | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72340 | Linux kernel Microchip VCAP driver race condition | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72339 | Linux kernel qede Rx buffer descriptor ring off-by-one error | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72338 | Linux kernel tc pedit offload out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72337 | Linux kernel 6LoWPAN enable work vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72336 | Linux kernel 6LoWPAN debugfs control vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72335 | Linux kernel Bluetooth advertisement monitor management vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72334 | Linux kernel Bluetooth ISO packet handling vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72333 | Linux kernel L2CAP identifier allocation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72332 | Linux kernel amdxdna accelerator driver deadlock | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72331 | Linux kernel amdxdna accelerator driver use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72330 | Linux kernel TLS socket layer denial of service | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72329 | Linux kernel LiquidIO VF driver vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72328 | Linux kernel amdxdna accelerator driver use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72327 | Linux kernel V3D GPU driver indirect CSD null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72326 | Linux kernel CAKE scheduler integer underflow | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72325 | Linux kernel AMD perf SVM reload path vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72324 | Linux kernel mvebu GPIO driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72323 | Linux kernel IGMP query timer use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72322 | Linux kernel IPv6 MLD delayed work use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72321 | Linux kernel IGMP timer handling memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72320 | Linux kernel netfilter nft_lookup vulnerability | 9.1CNA v3.1 | 0.5% | 2026-08-15 | Fix |
| CVE-2026-72319 | Linux kernel IPVS ICMP handling vulnerability | 9.8CNA v3.1 | 0.8% | 2026-08-15 | Fix |
| CVE-2026-72318 | Linux kernel CIFS DFS referral parsing vulnerability | 9.4CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72317 | Linux kernel SunRPC TLS transport use-after-free | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72316 | Linux kernel dm era null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72315 | Linux kernel SMB client memory leak | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72314 | Linux kernel regulator core locking deadlock | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72313 | Linux kernel DRM fbdev helper CRTC sync vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72312 | Linux kernel octeontx2 AF VF handling vulnerability | 7.9CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72311 | Linux kernel Xe GPU driver madvise ioctl vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72310 | Linux kernel SMB client passthrough ioctl vulnerability | 8.1CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72309 | Linux kernel ftrace remote buffer allocation memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72308 | Linux kernel mlxsw switch driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72307 | Linux kernel mlxsw switch driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72306 | Linux kernel VDUSE driver race condition | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72305 | Linux kernel VDUSE driver information disclosure | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72304 | Linux kernel SOF IPC4 control byte transfer race condition | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72303 | Linux kernel SOF IPC4 control notification handling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72302 | Linux kernel SOF IPC3 control update size calculation integer overflow | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72301 | Linux kernel SOF IPC3 control byte transfer race condition | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72300 | Linux kernel SOF topology vendor array parsing vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72299 | Linux kernel TIPC socket enqueue tracing vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72298 | Linux kernel qrtr endpoint packet handling integer overflow | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72297 | Linux kernel ATM QoS traffic class validation out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72296 | Linux kernel IFE packet decoding denial of service | 9.1CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72295 | Linux kernel KVM LoongArch irqfd routing vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72294 | Linux kernel KVM LoongArch interrupt injection vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72293 | Linux kernel KVM s390 VSIE shadow fault handling vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72292 | Linux kernel KVM s390 CMMA bitmap migration vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72291 | Linux kernel KVM s390 race condition | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72290 | Linux kernel KVM s390 PCI interrupt forwarding resource leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72289 | Linux kernel KVM ARM64 vGIC interrupt migration vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72288 | Linux kernel KVM ARM64 vGIC LPI interrupt handling use-after-free | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72287 | Linux kernel KVM nVMX vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-15 | Fix |
| CVE-2026-72286 | Linux kernel KVM SEV-SNP VM migration improper initialization | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72285 | Linux kernel KVM TDX VM initialization vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72284 | Linux kernel KVM paravirtual EOI handling denial of service | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72283 | Linux kernel KVM interrupt bypass producer tracking use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72282 | Linux kernel KVM I/O bus device lookup vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72281 | Linux kernel KVM protected guest memory accounting vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72280 | Linux kernel KVM ARM64 nested virtualization vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72279 | Linux kernel arm64 nested virtualization VNCR mapping vulnerability | 9.0CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72278 | Linux kernel arm64 nested virtualization VNCR translation vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72277 | Linux kernel arm64 nested virtualization VNCR mapping vulnerability | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72276 | Linux kernel metronomefb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72275 | Linux kernel broadsheetfb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72274 | Linux kernel hecubafb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72273 | Linux kernel efifb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72272 | Linux kernel radeonfb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72271 | Linux kernel i740fb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72270 | Linux kernel s3fb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72269 | Linux kernel uvesafb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72268 | Linux kernel tdfxfb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72267 | Linux kernel carminefb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72266 | Linux kernel vesafb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72265 | Linux kernel nvidiafb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72264 | Linux kernel tridentfb framebuffer driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72263 | Linux kernel SOF topology loader memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72262 | Linux kernel SOF IPC3 control interface out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72261 | Linux kernel SOF IPC3 control interface vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72260 | Linux kernel mt8192 ASoC driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72259 | Linux kernel mt8192 ASoC driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72258 | Linux kernel mt8183 ASoC driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72257 | Linux kernel qcom q6apm driver null pointer dereference | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72256 | Linux kernel netfilter xt_cluster match denial of service | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72255 | Linux kernel netfilter NFQUEUE bridge dst handling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72254 | Linux kernel nftables fib expression null pointer dereference | 7.5CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72253 | Linux kernel SIP conntrack helper vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72252 | Linux kernel nftables pipapo set vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72251 | Linux kernel SIP NAT helper vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72250 | Linux kernel IPv6 fragment reassembly vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72249 | Linux kernel netfilter flowtable IPIP header push vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72248 | Linux kernel netfilter flowtable IPIP tunnel offload vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72247 | Linux kernel nf_conncount tuple deduplication vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72245 | Linux kernel host1x device registration memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72244 | Linux kernel GPU buddy memory allocator vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72243 | Linux kernel SELinux TCP Fast Open connect hook vulnerability | 8.4CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72242 | Linux kernel SELinux SCTP hook vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72241 | Linux kernel uleds LED name handling out-of-bounds read | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72240 | Linux kernel sm501 device registration vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72239 | Linux kernel x86 virt SEV race condition | 9.3CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72238 | Linux kernel x86 early serial console denial of service | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72237 | Linux kernel AMD branch sampling perf driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72236 | Linux kernel s390 perf_cpum_cf vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72235 | Linux kernel batman-adv driver use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-72234 | Linux kernel batman-adv driver use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72233 | Linux kernel batman-adv bridge loop avoidance use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-15 | Fix |
| CVE-2026-72232 | Linux kernel batman-adv driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72231 | Linux kernel batman-adv driver vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72230 | Linux kernel batman-adv fragmentation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72229 | Linux kernel batman-adv VLAN registration vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72228 | Linux kernel batman-adv driver vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72227 | Linux kernel batman-adv driver out-of-bounds read | 8.1CNA v3.1 | 0.4% | 2026-08-15 | Fix |
| CVE-2026-72226 | Linux kernel batman-adv driver vulnerability | 9.8CNA v3.1 | 0.8% | 2026-08-15 | Fix |
| CVE-2026-72225 | Linux kernel JBD2 fast commit initialization integer underflow | 7.8CNA v3.1 | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72224 | Linux kernel NVDIMM BTT initialization memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72223 | Linux kernel NVDIMM BTT arena discovery memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72222 | Linux kernel SunRPC TLS handshake callback vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72221 | Linux kernel SunRPC TLS handshake cancellation race condition | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72220 | Linux kernel SunRPC request procinfo lifecycle double free | 9.8CNA v3.1 | 0.6% | 2026-08-15 | Fix |
| CVE-2026-72219 | Linux kernel lockd nlm_file allocation vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72218 | Linux kernel lockd nlm_file cache lookup vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72217 | Linux kernel SunRPC bvec buffer conversion vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-15 | Fix |
| CVE-2026-72216 | Linux kernel qcom remoteproc driver memory leak | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72215 | Linux kernel MIPS DEC firmware console calls vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72214 | Linux kernel cpcap-battery nvmem lookup vulnerability | – | 0.2% | 2026-08-15 | Fix |
| CVE-2026-72213 | Linux kernel hugetlb cgroup reservation charging vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-15 | Fix |