Freebsd vulnerabilities
165 CVEs and advisories name Freebsd as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45250Stack buffer overflow via setcred(2)
- CVE-2026-35547Heap overflow in libnv
- CVE-2026-39457Stack overflow via select() file descriptor set overflow
- CVE-2026-42512Remotely triggerable out-of-bounds heap write in dhclient
- CVE-2026-7164pf can overflow the stack parsing crafted SCTP packets
- CVE-2026-7270Local privilege escalation via execve()
- CVE-2026-42511Remote code execution via malicious DHCP options
- CVE-2026-6386Missing large page handling in pmap_pkru_update_range()
- CVE-2026-5398Kernel use-after-free bug in the TIOCNOTTY handler
- CVE-2026-4748pf silently ignores certain rules
- CVE-2026-4747Remote code execution via RPCSEC_GSS packet validation
- CVE-2026-4652Remote denial of service via null pointer dereference
- CVE-2026-4247TCP: remotely exploitable DoS vector (mbuf leak)
- CVE-2026-3038Local DoS and possible privilege escalation via routing sockets
- CVE-2026-2261blocklistd(8) socket leak
- CVE-2025-15576Jail chroot escape via fd exchange with a different jail
- CVE-2025-15547Jail escape by a privileged user via nullfs
- CVE-2025-14769ipfw denial of service
- CVE-2025-14558Remote code execution via ND6 Router Advertisements
- CVE-2025-24934SO_REUSEPORT_LB breaks connect(2) for UDP sockets
- CVE-2025-0662Uninitialized kernel memory disclosure via ktrace(2)
- CVE-2025-0374Unprivileged access to system files
- CVE-2025-0373Buffer overflow in some filesystems via NFS
- CVE-2024-45289Unbounded allocation in ctl(4) CAM Target Layer
- CVE-2024-39281Unbounded allocation in ctl(4) CAM Target Layer
- CVE-2024-51566bhyve(8) NVMe driver to guest-induced infinite loops.
- CVE-2024-51565bhyve(8) hda driver buffer over-read
- CVE-2024-51564bhyve(8) infinite loop in the hda audio driver
- CVE-2024-51563bhyve(8) virtio_vq_recordon time-of-check to time-of-use race
- CVE-2024-51562bhyve(8) nvme_opc_get_log_page buffer over-read