CVE-2026-57438 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-55895 - Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulne

CVE-2026-55892 - Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in

CVE-2026-55693 - Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function

CVE-2026-55477 - 3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated admini

CVE-2026-54036 - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the

CVE-2026-4522 - Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Cr

CVE-2026-48946 - The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's

CVE-2026-48945 - The K2 article gallery upload path accepts a zip/tar archive, extracts it under `/media/k2/galleries

CVE-2026-48944 - The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concate

CVE-2026-48943 - K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A Registered

CVE-2026-48942 - K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via two distinc

CVE-2026-48941 - The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parameter and us

CVE-2026-48940 - A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `emb

CVE-2026-12844 - List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise functi

CVE-2026-6432 - Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dyna

CVE-2026-57588 - A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file tha

CVE-2026-57587 - A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls rever

CVE-2026-57536 - Our payment integration with Mollie did not properly validate payment status responses. An attacker

CVE-2026-57535 - Content injected to PDF rendering contexts could, in many places, include HTML content including <im

CVE-2026-57534 - Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.

CVE-2026-57533 - Malicious HTML content could be injected into the page pretix shows when redirection to an untruste

CVE-2026-57532 - Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was ex

CVE-2026-57437 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-57436 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-57435 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-57434 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-57236 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-57235 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-57234 - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4,

CVE-2026-49319 - Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured b

CVE-2026-46735 - Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutraliz

CVE-2026-13314 - Malicious HTML content could be injected into the content rendered by the pretix-digital plugin.

CVE-2026-13225 - Malicious HTML content could be injected into the email address of an order, which pretix showed wi

CVE-2026-13223 - Our payment integration with Computop-based payment methods did not properly validate payment statu

CVE-2026-13222 - Our payment integration with Oppwa-based payment methods did not properly validate payment status r

CVE-2026-57619 - Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions.

CVE-2026-57429 - Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.

CVE-2026-56122 - Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthent

CVE-2026-56071 - Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.

CVE-2026-56054 - Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.

CVE-2026-56053 - Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.

CVE-2026-56051 - Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions.

CVE-2026-56050 - Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectl

CVE-2026-56049 - Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.

CVE-2026-56042 - Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions.

CVE-2026-56023 - Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions.

CVE-2026-56014 - Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 versions.

CVE-2026-56013 - Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.1

CVE-2026-56006 - Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions.

CVE-2026-56005 - Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 versions.

CVE-2026-54849 - Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.

CVE-2026-54848 - Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for

CVE-2026-54845 - Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.

CVE-2026-54844 - Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions.

CVE-2026-54843 - Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.

CVE-2026-54842 - Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configu

CVE-2026-54841 - Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.

CVE-2026-54838 - Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.

CVE-2026-54836 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-54830 - Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions.

CVE-2026-54829 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-54828 - Unauthenticated Broken Access Control in Motors <= 1.4.109 versions.

CVE-2026-54823 - Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

CVE-2026-54822 - Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions.

CVE-2026-54821 - Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions.

CVE-2026-52690 - Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, cau

CVE-2026-4526 - In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in fr

CVE-2026-49506 - Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathn

CVE-2026-47154 - In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds re

CVE-2026-47153 - In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process th

CVE-2026-47152 - In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process th

CVE-2026-47151 - In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds w

CVE-2026-47150 - In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds

CVE-2026-47149 - In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger ou

CVE-2026-47148 - In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads pa

CVE-2026-47147 - In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-

CVE-2026-47146 - In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate

CVE-2026-47145 - In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate

CVE-2026-46734 - Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certifica

CVE-2026-46733 - Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Acces

CVE-2026-46732 - Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Executio

CVE-2026-42390 - An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCac

CVE-2026-42389 - This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers

CVE-2026-42388 - Incomplete validation of the SOA record present in a catalog zone might lead to a crash.

CVE-2026-42387 - A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to

CVE-2026-41120 - Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untru

CVE-2026-40012 - ECS zero scoped answers are stored in the packet cache while they should not. This impacts only conf

CVE-2026-2815 - Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys

CVE-2026-27366 - Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.

CVE-2026-12755 - Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 throug

CVE-2026-42004 - An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, bu

CVE-2026-40211 - An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buf

CVE-2026-40210 - An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitial

CVE-2026-40209 - An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout o

CVE-2026-40208 - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with a

CVE-2026-40011 - An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block b

CVE-2026-33612 - A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to

CVE-2026-42005 - An attacker can send a web request that causes unlimited memory allocation in the internal web serv

CVE-2026-56130 - "Remember me" cookie age is not verified on the server. This potentially allows an attacker to inter

CVE-2026-56091 - When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HT

CVE-2026-54226 - A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. U

CVE-2026-53277 - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock

CVE-2026-53276 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after

CVE-2026-53275 - In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free

CVE-2026-53274 - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock

CVE-2026-53273 - In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-f

CVE-2026-53272 - In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sb

CVE-2026-53271 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo

CVE-2026-53270 - In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler p

CVE-2026-53269 - In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex

CVE-2026-53268 - In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix p

CVE-2026-53267 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: bail out on

CVE-2026-53266 - In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_sna

CVE-2026-53265 - In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allo

CVE-2026-53264 - In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU wit

CVE-2026-53263 - In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in mult

CVE-2026-53262 - In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference

CVE-2026-53261 - In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relatio

CVE-2026-53260 - In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enabl

CVE-2026-53259 - In the Linux kernel, the following vulnerability has been resolved: ipv6: anycast: insert aca into

CVE-2026-53258 - In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz s

CVE-2026-53257 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT

CVE-2026-53256 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listene

CVE-2026-53255 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate adver

CVE-2026-53254 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb

CVE-2026-53253 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short f

CVE-2026-53252 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in e

CVE-2026-53251 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasi

CVE-2026-53250 - In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offs

CVE-2026-53249 - In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and I

CVE-2026-53248 - In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix use-after-free

CVE-2026-53247 - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Fix

CVE-2026-53246 - In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT

CVE-2026-53245 - In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribu

CVE-2026-53244 - In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to un

CVE-2026-53243 - In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialize

CVE-2026-53242 - In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list

CVE-2026-53241 - In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event

CVE-2026-53240 - In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix use-after-free

CVE-2026-53239 - In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-fre

CVE-2026-53238 - In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled ad

CVE-2026-53237 - In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer d

CVE-2026-53236 - In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER

CVE-2026-53235 - In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb

CVE-2026-53234 - In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: Fix use-after-f

CVE-2026-53233 - In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netd

CVE-2026-53232 - In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstrea

CVE-2026-53231 - In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PH

CVE-2026-53230 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bound

CVE-2026-53229 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp

CVE-2026-53228 - In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 he

CVE-2026-53227 - In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible

CVE-2026-53226 - In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ

CVE-2026-53225 - In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sct

CVE-2026-53224 - In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT ch

CVE-2026-53223 - In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to r

CVE-2026-53222 - In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix resource freeing

CVE-2026-53221 - In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel m

CVE-2026-53220 - In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge po

CVE-2026-53219 - In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leak

CVE-2026-53218 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix regi

CVE-2026-53217 - In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the

CVE-2026-53216 - In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame siz

CVE-2026-53215 - In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: refill RX buffers b

CVE-2026-53214 - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix a potential NPD in cl

CVE-2026-53213 - In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory

CVE-2026-53212 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-

CVE-2026-53211 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix

CVE-2026-53210 - In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in regis

CVE-2026-53209 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: reject ove

CVE-2026-53208 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR

CVE-2026-53207 - In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix hugetlb_

CVE-2026-53206 - In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check fo

CVE-2026-53205 - In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds checks f

CVE-2026-53204 - In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NU

CVE-2026-53203 - In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow

CVE-2026-53202 - In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer

CVE-2026-53201 - In the Linux kernel, the following vulnerability has been resolved: Revert "drm/xe: Skip exec queue

CVE-2026-53200 - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of

CVE-2026-53199 - In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: use kmap_local_page

CVE-2026-53198 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a

CVE-2026-53197 - In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock

CVE-2026-53196 - In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap ov

CVE-2026-53195 - In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap ov

CVE-2026-53194 - In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bu

CVE-2026-53193 - In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Forcibly close tim

CVE-2026-53192 - In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_tim

CVE-2026-53191 - In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQ

CVE-2026-53190 - In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_fence refco

CVE-2026-53189 - In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD

CVE-2026-53188 - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed

CVE-2026-53187 - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpu_id agai

CVE-2026-53186 - In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense c

CVE-2026-53185 - In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zra

CVE-2026-53184 - In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before runn

CVE-2026-53183 - In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to

CVE-2026-53182 - In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized

CVE-2026-53181 - In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog

CVE-2026-53180 - In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock

CVE-2026-53179 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix buffer

CVE-2026-53178 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: a

CVE-2026-53177 - In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer deref

CVE-2026-53176 - In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs sho

CVE-2026-53175 - In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free

CVE-2026-53174 - In the Linux kernel, the following vulnerability has been resolved: ovl: keep err zero after succes

CVE-2026-53173 - In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix OOB write in

CVE-2026-53172 - In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix IFM region in

CVE-2026-53171 - In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix arithmetic is

CVE-2026-53170 - In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject DMA comman

CVE-2026-53169 - In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject NPU_OP_RES

CVE-2026-53168 - In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() page

CVE-2026-53167 - In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEV

CVE-2026-53166 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-53165 - In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null fol

CVE-2026-53164 - In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Do not try to iommu_

CVE-2026-53163 - In the Linux kernel, the following vulnerability has been resolved: locking/rtmutex: Skip remove_wa

CVE-2026-53162 - In the Linux kernel, the following vulnerability has been resolved: memcg: use round-robin victim s

CVE-2026-53161 - In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-fr

CVE-2026-53160 - In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-fr

CVE-2026-53159 - In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix DMA address

CVE-2026-53158 - In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix NULL pointer

CVE-2026-53157 - In the Linux kernel, the following vulnerability has been resolved: net: phonet: free phonet_device

CVE-2026-53156 - In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free

CVE-2026-53155 - In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: use correct fla

CVE-2026-53154 - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore reservation

CVE-2026-53153 - In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clear

CVE-2026-53152 - In the Linux kernel, the following vulnerability has been resolved: mmc: dw_mmc-rockchip: Add missi

CVE-2026-53151 - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to ex

CVE-2026-53150 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length

CVE-2026-53149 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directo

CVE-2026-53148 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain resp

CVE-2026-53147 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain r

CVE-2026-53146 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Limit XDomain resp

CVE-2026-53145 - In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_hand

CVE-2026-53144 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL dereferenc

CVE-2026-53143 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix buffer overflow

CVE-2026-53142 - In the Linux kernel, the following vulnerability has been resolved: drm/xe/display: fix oops in sus

CVE-2026-53141 - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance

CVE-2026-53140 - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix vaddr leak when in

CVE-2026-53139 - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Skip CSD when it has z

CVE-2026-53138 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Bound VBIOS re

CVE-2026-53137 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDC

CVE-2026-53136 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp VBIOS HD

CVE-2026-53135 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref

CVE-2026-53134 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: fix stale s

CVE-2026-53133 - In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for b

CVE-2026-53132 - In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unb

CVE-2026-53131 - In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC

CVE-2026-46752 - Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache