CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98460Linux kernel: Bluetooth: hci_sock: reject out-of-range OCF valuesLinux
- CVE-2026-98459Linux kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis()Linux
- CVE-2026-98458Linux kernel: Bluetooth: ISO: release unused CIS holds after channel attachLinux
- CVE-2026-98457Linux kernel: Bluetooth: L2CAP: validate frame length before control and FCS accessLinux
- CVE-2026-98456Linux kernel: Bluetooth: mgmt: fix race in read_unconf_index_list()Linux
- CVE-2026-98455Linux kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFOLinux
- CVE-2026-98454Linux kernel: smb: client: fix create context out-of-bounds readsLinux
- CVE-2026-98453Linux kernel: smb: client: close handle after create-context parsing failureLinux
- CVE-2026-98452Linux kernel: smb: client: clean up failed cached directory opensLinux
- CVE-2026-98451Linux kernel: smb: client: use finish_no_open() for non-regular inodesLinux
- CVE-2026-98450Linux kernel: smb: client: close completed creates on compound wait errorsLinux
- CVE-2026-98449Linux kernel: smb: client: delete compound mids on send failure before unlockLinux
- CVE-2026-98448Linux kernel: xfs: release orphanage dir inode if chown failsLinux
- CVE-2026-98447Linux kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree rootsLinux
- CVE-2026-98446Linux kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_initLinux
- CVE-2026-98445Linux kernel: xfs: don't let memory failures leak blocks and kill repairsLinux
- CVE-2026-98444Linux kernel: xfs: drop dquot flush lock when we can't find a buffer to flushLinux
- CVE-2026-98443Linux kernel: xfs: fix cursor and pointer handling when recovering iunlink bucketsLinux
- CVE-2026-98442Linux kernel: net/sched: act_ct: fix helper UAF due to extensions reallocLinux
- CVE-2026-98441Linux kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entryLinux
- CVE-2026-98440Linux kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destructionLinux
- CVE-2026-111991WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.init code injectionWongKinYiu yolov9
- CVE-2026-98439Linux kernel: smb/server: cancel async requests when closing connectionLinux
- CVE-2026-98438Linux kernel: mptcp: options: fix uninit-value in mptcp_write_data_finLinux
- CVE-2026-98437Linux kernel: media: qcom: iris: fix runtime PM reference leaksLinux
- CVE-2026-98436Linux kernel: accel/amdxdna: Disable device buffer exportingLinux
- CVE-2026-98435Linux kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()Linux
- CVE-2026-111990kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injectionkishan0725 Hospital Management System
- CVE-2026-98434Linux kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmaxLinux
- CVE-2026-98433Linux kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failureLinux