CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99121ipv4: avoid divide by zero in fib_rebalanceLinux
- CVE-2026-99120KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codesLinux
- CVE-2026-99119drm/amdgpu/userq: actually validate userq BOsLinux
- CVE-2026-99118drm/i915/dmc: Harden DMC firmware payload parsingLinux
- CVE-2026-99117net: bridge: mcast: don't truncate the port group walk on teardownLinux
- CVE-2026-99116net: psp: do not inherit the Rx association on cloneLinux
- CVE-2026-99115ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATIONLinux
- CVE-2026-99114ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATIONLinux
- CVE-2026-99113ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it inLinux
- CVE-2026-99112net/sched: cls_flower: validate mask pointer after nla_next()Linux
- CVE-2026-99111smb: client: fix data corruption with concurrent writes and O_TRUNCLinux
- CVE-2026-99110smb: client: fix heap overflow in cifs_do_set_acl()Linux
- CVE-2026-99109smb: client: reject SetEA requests that do not fit the request bufferLinux
- CVE-2026-99108ntfs: fix FITRIM range alignmentLinux
- CVE-2026-99107ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resizeLinux
- CVE-2026-99106drm/amdgpu: free the userptr ranges when a CS fails after parser_bosLinux
- CVE-2026-99105sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQLinux
- CVE-2026-99104sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestorLinux
- CVE-2026-99103workqueue: Fix unbound pool lifetime for pending pwqsLinux
- CVE-2026-99102ntfs: take invalidate_lock in ntfs_setattr_size()Linux
- CVE-2026-99101ntfs: move attribute payload before shrinking its recordLinux
- CVE-2026-110541Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-101272Incorrect session validation for API-created shredder exportspretix
- CVE-2026-101274When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate…pretix
- CVE-2026-110540Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-101273Giftcard enumerationpretix
- CVE-2026-103792Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-103779Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-112198Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop AppTactis NoviGest Desktop App
- CVE-2026-103799Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center