CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98892Linux kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizeLinux
- CVE-2026-98891Linux kernel: wifi: mac80211: validate deauth frame length before reason accessLinux
- CVE-2026-98890Linux kernel: wifi: libertas: reject short monitor TX framesLinux
- CVE-2026-98889Linux kernel: wifi: iwlwifi: mvm: fix sched scan IE sizingLinux
- CVE-2026-98888Linux kernel: arm64: kprobes: Allow reentering kprobes while single-steppingLinux
- CVE-2026-98887Linux kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFOLinux
- CVE-2026-98886Linux kernel: drm/gma500: return errors from Oaktrail HDMI I2C readsLinux
- CVE-2026-98885Linux kernel: ima: return error early if file xattr cannot be changedLinux
- CVE-2026-98884Linux kernel: mmc: core: Add validation for host-provided max_segsLinux
- CVE-2026-98883Linux kernel: serial: 8250_port: recognize UPIO_AULinux
- CVE-2026-98882Linux kernel: media: chips-media: wave5: Add range checks for dec_output_infoLinux
- CVE-2026-98881Linux kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()Linux
- CVE-2026-98880Linux kernel: ntfs3: handle set_blocksize failuresLinux
- CVE-2026-98879Linux kernel: isofs: handle set_blocksize failuresLinux
- CVE-2026-98878Linux kernel: irqchip/gic-v5: Immediately exec priority drop following activateLinux
- CVE-2026-98877Linux kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probedLinux
- CVE-2026-98876Linux kernel: host1x: bus: Fix missing ops null check in error teardownLinux
- CVE-2026-98875Linux kernel: drm/nouveau/gsp: add SEC2 to GA100 chip tableLinux
- CVE-2026-98874Linux kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetectLinux
- CVE-2026-98873Linux kernel: netfilter: nf_conntrack_expect: zero at allocation timeLinux
- CVE-2026-98872Linux kernel: freevxfs: don't BUG() on unknown typed-extent typeLinux
- CVE-2026-98871Linux kernel: crypto: ccp - Fix possible deadlock in SEV init failure pathLinux
- CVE-2026-98870Linux kernel: ksmbd: remove stale channels from all sessions on teardownLinux
- CVE-2026-115727AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_serverFosowl AgenticSeek
- CVE-2026-115726Aider through 0.86.2 Command Execution via Repository .aider.conf.yml SettingsAider-AI aider
- CVE-2026-115725Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_idchatwoot
- CVE-2026-115724VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment ProviderVideoLAN VLC for Android
- CVE-2026-115723Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletiondavenardella snap7
- CVE-2026-115722RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Headerdiegonehab rply
- CVE-2026-107685WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackersagentjido req_llm · req_llm