CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99269sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux
- CVE-2026-99261drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux
- CVE-2026-99260ntfs: fix resident conversion in ntfs_new_attr_flagsLinux
- CVE-2026-99259soc/tegra: pmc: Fix uninitialised clock rateLinux
- CVE-2026-99258x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux
- CVE-2026-99257gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux
- CVE-2026-99256dm cache: fix issue with background work lockingLinux
- CVE-2026-99255io_uring/io-wq: don't hide a link from cancellationsLinux
- CVE-2026-99254io_uring: don't flood a cancelling task with task_workLinux
- CVE-2026-99253io_uring/cancel: rearm local work wake up before sleepLinux
- CVE-2026-99251Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux
- CVE-2026-99250printk: Postpone kthread startupLinux
- CVE-2026-99249pid_namespace: make zap_pid_ns_processes() freezableLinux
- CVE-2026-99248i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux
- CVE-2026-99247tracing: Do not initialize tracefs work if tracing is disabledLinux
- CVE-2026-99246tipc: protect node reset trace dump with node lockLinux
- CVE-2026-99245KEYS: Fix key_reject_and_link() race with keyring restrictionLinux
- CVE-2026-99244pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux
- CVE-2026-114442Apache HertzBeat: incomplete XPath expression validation in aliasFieldsApache Software Foundation Apache HertzBeat
- CVE-2026-120327Open Redirection in extension "Mail" (mail)TYPO3 mediaessenz/mail
- CVE-2026-120328Information Disclosure in extension "Mail" (mail)TYPO3 mediaessenz/mail
- CVE-2026-120329Broken Access Control in extension "Mail" (mail)TYPO3 mediaessenz/mail
- CVE-2026-120330Broken Access Control in extension "Mail" (mail)TYPO3 mediaessenz/mail
- CVE-2026-120331Server-Side Request Forgery in extension "Mail" (mail)TYPO3 mediaessenz/mail
- CVE-2026-120332Cross-Site Scripting in extension "Mail" (mail)TYPO3 mediaessenz/mail
- CVE-2026-120333Broken Access Control in extension "Frontend User Registration" (sf_register)TYPO3 evoweb/sf-register
- CVE-2026-77691Command injection vulnerabilityZohocorp ManageEngine Key Manager Plus
- CVE-2026-89229Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot…vivo BlueLM Copilot
- CVE-2026-119843Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tagsRed Hat Enterprise Linux · GStreamer project gst-plugins-go…
- CVE-2026-77778Improper access control vulnerabilityZohocorp ManageEngine Key Manager Plus