Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
54755
Total
4323
Critical
16270
High
16026
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-93791 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware ba_notif->tid is … | Sep 24, 2026 |
| CVE-2026-93790 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif mvmsta->tid_data was indexed by the … | Sep 24, 2026 |
| CVE-2026-93789 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser … | Sep 24, 2026 |
| CVE-2026-93788 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tbl_rev bounds before BIT(tbl_rev) to avoid … | Sep 24, 2026 |
| CVE-2026-93787 | HIGH | 8.1 | In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the … | Sep 24, 2026 |
| CVE-2026-93786 | HIGH | 8.1 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from … | Sep 24, 2026 |
| CVE-2026-93785 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in … | Sep 24, 2026 |
| CVE-2026-93784 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() The KASAN allocation trace shows that a malformed IE … | Sep 24, 2026 |
| CVE-2026-93783 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame rfcomm_recv_frame() casts skb->data to struct rfcomm_hdr and dereferences … | Sep 24, 2026 |
| CVE-2026-93782 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace iovecs when … | Sep 24, 2026 |
| CVE-2026-93781 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi_eh_lock_door() scsi_eh_lock_door() is called from scsi_restart_operations() … | Sep 24, 2026 |
| CVE-2026-93545 | MEDIUM | 6.5 | An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | Sep 24, 2026 |
| CVE-2026-93544 | MEDIUM | 6.5 | An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached … | Sep 24, 2026 |
| CVE-2026-93543 | HIGH | 7.4 | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | Sep 24, 2026 |
| CVE-2026-93542 | MEDIUM | 6.5 | An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the … | Sep 24, 2026 |
| CVE-2026-93288 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl_log_net_exit() calls … | Sep 24, 2026 |
| CVE-2026-93287 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length … | Sep 24, 2026 |
| CVE-2026-93286 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp_send_ddp() aarp_send_ddp() calls atalk_find_dev_addr(dev) in the LocalTalk fast … | Sep 24, 2026 |
| CVE-2026-93285 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This … | Sep 24, 2026 |
| CVE-2026-93284 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drm_pagemap_migrate_unmap_pages() relies on the pages array to determine … | Sep 24, 2026 |
| CVE-2026-91161 | MEDIUM | 6.4 | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/{sessionId}/groups/{groupId}/invite-code endpoint and the GroupGetInviteCode MCP tool have no OPERATOR … | Sep 24, 2026 |
| CVE-2026-91160 | HIGH | 8.2 | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the session.qr event to a VIEWER API … | Sep 24, 2026 |
| CVE-2026-91134 | MEDIUM | 5.4 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the Discourse post sanitizer allowed a stored cross-origin iframe to bypass the … | Sep 24, 2026 |
| CVE-2026-91133 | MEDIUM | 6.5 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, authenticated users could supply unescaped SQL LIKE metacharacters to upload-resolution patterns, causing … | Sep 24, 2026 |
| CVE-2026-91132 | MEDIUM | 4.3 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, sites using wildcard patterns in the allowed_iframes setting could accept a crafted … | Sep 24, 2026 |