The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,809 matching vulnerabilities · Page 95 of 777

CPANSec2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-73193 · CPANSec

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-73194 · CPANSec

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse

EPSS 0.5%CVSS 9.1

cozmoslabs1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-15826 · cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

EPSS 4%CVSS 9.8

Linux46 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-74279 · Linux Linux

crypto: cavium/cpt - fix DMA cleanup using wrong loop index

EPSS 0.8%CVSS 10.0

CVE-2026-74280 · Linux Linux

crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

EPSS 0.8%CVSS 10.0

CVE-2026-74427 · Linux Linux

afs: Fix netns teardown to cancel the preallocation charger

EPSS 0.8%CVSS 9.8

CVE-2026-72491 · Linux Linux

net/9p: fix race condition on rdma->state in trans_rdma.c

EPSS 0.7%CVSS 9.8

CVE-2026-74267 · Linux Linux

net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

EPSS 0.7%CVSS 9.8

CVE-2026-74268 · Linux Linux

tcp: clear sock_ops cb flags before force-closing a child socket

EPSS 0.7%CVSS 9.8

CVE-2026-74309 · Linux Linux

vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler

EPSS 0.6%CVSS 10.0

CVE-2026-74361 · Linux Linux

nvme: fix FDP fdpcidx bounds check

EPSS 0.6%CVSS 9.8

CVE-2026-74401 · Linux Linux

dlm: fix add msg handle in send_queue ordered

EPSS 0.7%CVSS 9.8

CVE-2026-74428 · Linux Linux

rxrpc: Fix double unlock in rxrpc_recvmsg()

EPSS 0.6%CVSS 9.8

CVE-2026-74433 · Linux Linux

rxrpc: Fix UAF in rxgk_issue_challenge()

EPSS 0.6%CVSS 9.8

CVE-2026-74434 · Linux Linux

rxrpc: Don't move a peeked OOB message onto the pending queue

EPSS 0.6%CVSS 9.8

CVE-2026-74315 · Linux Linux

lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()

EPSS 0.6%CVSS 9.8

CVE-2026-74394 · Linux Linux

RDMA/srpt: fix integer overflow in immediate data length check

EPSS 0.5%CVSS 9.8

CVE-2026-74478 · Linux Linux

um: vector: fix use-after-free in vector_mmsg_rx()

EPSS 0.6%CVSS 9.8

CVE-2026-74480 · Linux Linux

net: bridge: stop fast-leave after deleting a port group

EPSS 0.6%CVSS 9.8

CVE-2026-74570 · Linux Linux

ntfs: harden runlist realloc size calculations

EPSS 0.6%CVSS 9.8

CVE-2026-72494 · Linux Linux

RDMA/irdma: Replace waitqueue and flag with completion

EPSS 0.5%CVSS 9.8

CVE-2026-74255 · Linux Linux

tipc: fix UAF in tipc_l2_send_msg()

EPSS 0.5%CVSS 9.8

CVE-2026-74269 · Linux Linux

bnxt: fix head underflow on XDP head-grow

EPSS 0.5%CVSS 9.8

CVE-2026-74287 · Linux Linux

sctp: validate embedded address parameter length

EPSS 0.7%CVSS 9.1

CVE-2026-74345 · Linux Linux

RDMA/siw: Fix endpoint/socket association handling

EPSS 0.5%CVSS 9.8

CVE-2026-74350 · Linux Linux

ocfs2: validate fast symlink target during inode read

EPSS 0.5%CVSS 9.8

CVE-2026-74376 · Linux Linux

md/raid10: reset read_slot when reusing r10bio for discard

EPSS 0.5%CVSS 9.8

CVE-2026-74384 · Linux Linux

nvme-multipath: fix flex array size in struct nvme_ns_head

EPSS 0.5%CVSS 9.8

CVE-2026-74398 · Linux Linux

ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD

EPSS 0.5%CVSS 9.8

CVE-2026-74406 · Linux Linux

vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().

EPSS 0.5%CVSS 9.8

CVE-2026-74473 · Linux Linux

vxlan: use pskb_network_may_pull() in route_shortcircuit()

EPSS 0.5%CVSS 9.8

CVE-2026-74474 · Linux Linux

vxlan: use pskb_network_may_pull() for transmit path header pulls

EPSS 0.5%CVSS 9.8

CVE-2026-74475 · Linux Linux

vxlan: use neigh_ha_snapshot() in route_shortcircuit()

EPSS 0.5%CVSS 10.0

CVE-2026-74493 · Linux Linux

net/smc: fix socket use-after-free during link group termination

EPSS 0.5%CVSS 9.8

CVE-2026-74495 · Linux Linux

igbvf: Fix leak in TX DMA error cleanup

EPSS 0.5%CVSS 9.8

CVE-2026-72493 · Linux Linux

net: serialize netif_running() check in enqueue_to_backlog()

EPSS 0.4%CVSS 9.9

CVE-2026-74545 · Linux Linux

rtase: fix double free of multi-frag skb on DMA map failure

EPSS 0.5%CVSS 9.8

CVE-2026-74436 · Linux Linux

rxrpc: serialize kernel accept preallocation with socket teardown

EPSS 0.4%CVSS 9.8

CVE-2026-74476 · Linux Linux

veth: convert frag_list skbs before running XDP

EPSS 0.5%CVSS 9.1

CVE-2026-74556 · Linux Linux

scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

EPSS 0.4%CVSS 9.8

CVE-2026-74569 · Linux Linux

netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

EPSS 0.4%CVSS 9.8

CVE-2026-74521 · Linux Linux

ksmbd: use memcmp() to compare ClientGUIDs

EPSS 0.4%CVSS 9.1

CVE-2026-72495 · Linux Linux

RDMA/bnxt_re: Avoid repeated requests to allocate WC pages

EPSS 0.2%CVSS 9.3

CVE-2026-74439 · Linux Linux

iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry

EPSS 0.2%CVSS 9.3

CVE-2026-74568 · Linux Linux

KVM: arm64: vgic: Fix race between LPI release and re-registration

EPSS 0.2%CVSS 9.3

CVE-2026-74310 · Linux Linux

vhost/net: complete zerocopy ubufs only once

EPSS 0.1%CVSS 9.3

CVE-2026-74517 · Linux Linux

KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs

EPSS 0.1%CVSS 9.3

CVE-2026-72496 · Linux Linux

RDMA/bnxt_re: Proper rollback if the ioremap fails

EPSS 0.1%CVSS 9.2

CVE-2026-74573 · Linux Linux

iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE

EPSS 0.1%CVSS 9.3

themetechmount1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-16142 · themetechmount TrueBooker – Appointment Booking and Scheduler System

TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter

EPSS 0.7%CVSS 9.8