CVE-2026-54506 - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor

CVE-2026-54343 - Frappe Learning Management System (LMS) is a learning system that helps users structure their conten

CVE-2026-53557 - SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0,

CVE-2026-53556 - SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0,

CVE-2026-53555 - SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0,

CVE-2026-53554 - SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0,

CVE-2026-53534 - JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, wh

CVE-2026-50291 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-50158 - yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the captio

CVE-2026-16750 - The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unaut

CVE-2026-16582 - The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unau

CVE-2026-14311 - The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unau

CVE-2026-11432 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-93395 - A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer

CVE-2026-93394 - A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authenti

CVE-2026-93393 - A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built wi

CVE-2026-93387 - Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker

CVE-2026-93386 - UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote atta

CVE-2026-93385 - Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtai

CVE-2026-93384 - Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed

CVE-2026-93383 - Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to

CVE-2026-93382 - Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execut

CVE-2026-93381 - Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote att

CVE-2026-93380 - Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who h

CVE-2026-93379 - Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to

CVE-2026-93378 - Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker w

CVE-2026-93377 - Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging so

CVE-2026-93376 - Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker

CVE-2026-93375 - Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allo

CVE-2026-93374 - Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attack

CVE-2026-93373 - Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to ex

CVE-2026-93372 - Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote atta

CVE-2026-86049 - Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request

CVE-2026-77615 - Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.

CVE-2026-77281 - Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, thre

CVE-2026-76154 - A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user

CVE-2026-68537 - `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by

CVE-2026-68523 - `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by

CVE-2026-67071 - HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when proces

CVE-2026-57847 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-54918 - NetBox Device Type Library is a collection of community-sourced device type definitions for import i

CVE-2026-54916 - NetBox Device Type Library is a collection of community-sourced device type definitions for import i

CVE-2026-54907 - Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. P

CVE-2026-54604 - OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in l

CVE-2026-54597 - ITFlow provides an IT documentation, ticketing and accounting system for small managed service provi

CVE-2026-54596 - ITFlow provides an IT documentation, ticketing and accounting system for small managed service provi

CVE-2026-54565 - rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp

CVE-2026-54521 - FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319,

CVE-2026-54510 - Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior

CVE-2026-54501 - Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-ho

CVE-2026-54460 - OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl

CVE-2026-54355 - MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's O

CVE-2026-54354 - MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS

CVE-2026-54339 - Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/

CVE-2026-54237 - Wavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes /install/

CVE-2026-52483 - The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with fir

CVE-2026-50277 - dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses

CVE-2026-50275 - The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP.

CVE-2026-50022 - Metacat is data repository software that helps researchers preserve, share, and discover data. Prior

CVE-2026-49137 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-48977 - OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's pa

CVE-2026-45143 - Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo

CVE-2026-45140 - Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unau

CVE-2026-15815 - Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin arch

CVE-2026-11314 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-10594 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-62167 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-33626. Reason:

CVE-2025-55787 - In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

CVE-2021-3030 - Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper valid

CVE-2026-93337 - NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerabi

CVE-2026-92993 - A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function

CVE-2026-92943 - Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS

CVE-2026-92758 - If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs m

CVE-2026-92757 - Applications built on MongoDB Entity Framework Core Provider which place a database name in the conn

CVE-2026-92756 - Applications built on MongoDB Entity Framework Core Provider which combine independent encryption se

CVE-2026-57846 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-54752 - NetBox Device Type Library is a collection of community-sourced device type definitions for import i

CVE-2026-54716 - Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data

CVE-2026-54692 - SAIL is a cross-platform library for loading and saving images with support for animation, metadata,

CVE-2026-54627 - SAIL is a cross-platform library for loading and saving images with support for animation, metadata,

CVE-2026-54626 - SAIL is a cross-platform library for loading and saving images with support for animation, metadata,

CVE-2026-54618 - Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize

CVE-2026-54594 - OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation,

CVE-2026-54495 - The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and

CVE-2026-50285 - Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/

CVE-2026-50125 - MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes th

CVE-2026-45726 - Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1

CVE-2026-45723 - Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, ma

CVE-2026-45720 - Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.

CVE-2026-92992 - A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element i

CVE-2026-92230 - Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long

CVE-2026-90997 - A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in r

CVE-2026-55062 - uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit c

CVE-2026-55061 - uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit c

CVE-2026-54649 - punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to

CVE-2026-54617 - GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an una

CVE-2026-54571 - ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 an

CVE-2026-54524 - Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.7.0, an authenti

CVE-2026-54504 - MCP Documentation Server is a local-first document management and semantic search server for AI codi

CVE-2026-54451 - Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, service

CVE-2026-54253 - TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/dow

CVE-2026-54239 - Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticate

CVE-2026-52852 - Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permissio

CVE-2026-52851 - Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user

CVE-2026-52727 - lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch

CVE-2026-49292 - Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ pag

CVE-2026-47252 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INS

CVE-2026-19477 - There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for

CVE-2026-92927 - A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some

CVE-2026-92926 - A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects t

CVE-2026-89038 - Verizon Cloud for Android (com.vcast.mediamanager) before 26.7.10 contains a path traversal vulnerab

CVE-2026-54677 - Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who

CVE-2026-54676 - Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API

CVE-2026-54551 - WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management.

CVE-2026-54546 - CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with

CVE-2026-54446 - NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage

CVE-2026-54053 - Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the Z

CVE-2026-52836 - OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution

CVE-2026-44236 - rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP serve

CVE-2026-44235 - rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP serve

CVE-2026-9314 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-93296 - MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics v

CVE-2026-93295 - MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execu

CVE-2026-93292 - SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel ana

CVE-2026-93204 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically upd

CVE-2026-93203 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corr

CVE-2026-93202 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive lock

CVE-2026-93201 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fiel

CVE-2026-93200 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free

CVE-2026-93199 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat maste

CVE-2026-93198 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persist

CVE-2026-93197 - In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting

CVE-2026-93196 - In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount r

CVE-2026-93195 - In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Su

CVE-2026-93194 - In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Release co

CVE-2026-93193 - In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix

CVE-2026-93192 - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_jo

CVE-2026-93191 - In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task conte

CVE-2026-93190 - In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec:

CVE-2026-93189 - In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid

CVE-2026-93188 - In the Linux kernel, the following vulnerability has been resolved: HID: roccat: bound device-suppl

CVE-2026-93187 - In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Retur

CVE-2026-93186 - In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Clamp mailbox output

CVE-2026-93185 - In the Linux kernel, the following vulnerability has been resolved: ASoC: rt700-sdw: always drain j

CVE-2026-93184 - In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_audmix: rework runtim

CVE-2026-93183 - In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drm_mm_init() wi

CVE-2026-93182 - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in upd

CVE-2026-93181 - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix unco

CVE-2026-93180 - In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NPD issue on p

CVE-2026-93179 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageO

CVE-2026-93178 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds

CVE-2026-93177 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds

CVE-2026-93176 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling p

CVE-2026-93175 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling p

CVE-2026-93174 - In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value pad

CVE-2026-93173 - In the Linux kernel, the following vulnerability has been resolved: bpf,lsm: Drop bpf_prog_free fro

CVE-2026-93172 - In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: handle alloc_percpu

CVE-2026-93171 - In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential d

CVE-2026-93170 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix chan

CVE-2026-93169 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: fix race

CVE-2026-93168 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix CPU

CVE-2026-93167 - In the Linux kernel, the following vulnerability has been resolved: csky: Fix a4/a5 restoration in

CVE-2026-93166 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: debug: fix off by

CVE-2026-93165 - In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Fix

CVE-2026-93164 - In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Move optimized upr

CVE-2026-93163 - In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on r

CVE-2026-93162 - In the Linux kernel, the following vulnerability has been resolved: crypto: qat - cancel work on re

CVE-2026-93161 - In the Linux kernel, the following vulnerability has been resolved: crypto: qat - clear AES key sch

CVE-2026-93160 - In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hard

CVE-2026-93159 - In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix hea

CVE-2026-93158 - In the Linux kernel, the following vulnerability has been resolved: crypto: sa2ul - stop probe if c

CVE-2026-93157 - In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate

CVE-2026-93156 - In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash req

CVE-2026-93155 - In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Fix AEAD unre

CVE-2026-93154 - In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to

CVE-2026-93153 - In the Linux kernel, the following vulnerability has been resolved: RDMA/bng_re: return a timeout w

CVE-2026-93152 - In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release

CVE-2026-93151 - In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resour

CVE-2026-93150 - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Make nr_deadline

CVE-2026-93149 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: avoid NUL

CVE-2026-93148 - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject MEM_ALLOC BTF acces

CVE-2026-93147 - In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Replace ly instructio

CVE-2026-93146 - In the Linux kernel, the following vulnerability has been resolved: time/namespace: Validate nanose

CVE-2026-93145 - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gdsc: tear down per-

CVE-2026-93144 - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untr

CVE-2026-93143 - In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pm_ru

CVE-2026-93142 - In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/rcar: Fix error

CVE-2026-93141 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: r8a66597: avoid do

CVE-2026-93140 - In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptoda

CVE-2026-93139 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: Fix hung_queue_

CVE-2026-93138 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race

CVE-2026-93137 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mm_s

CVE-2026-93136 - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Fix device refcou

CVE-2026-93135 - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject programs with inlin

CVE-2026-93134 - In the Linux kernel, the following vulnerability has been resolved: printk: Fix possible console us

CVE-2026-93133 - In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Check acpi_get_ha

CVE-2026-93132 - In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Fix riscv_acpi_ad

CVE-2026-93131 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-privacy: Fix

CVE-2026-93130 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fi

CVE-2026-93129 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fi

CVE-2026-93128 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LE

CVE-2026-93127 - In the Linux kernel, the following vulnerability has been resolved: bpf: Drop scalar id on sign-ext

CVE-2026-93126 - In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_q6v5_adsp: Fix

CVE-2026-93125 - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject rdonly/rdwr_buf_siz

CVE-2026-93124 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fa

CVE-2026-93123 - In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: do not advan

CVE-2026-93122 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uac: validate rate

CVE-2026-93121 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix fence cl

CVE-2026-93120 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: fix out-

CVE-2026-93119 - In the Linux kernel, the following vulnerability has been resolved: usb: ljca: bound bank_num in lj

CVE-2026-93118 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: check

CVE-2026-93117 - In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs co

CVE-2026-93116 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix res

CVE-2026-93115 - In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: C

CVE-2026-93114 - In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify:

CVE-2026-93113 - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: unre

CVE-2026-93112 - In the Linux kernel, the following vulnerability has been resolved: bpf: Require a BPF cpumask for

CVE-2026-93111 - In the Linux kernel, the following vulnerability has been resolved: bpf: Mark tracing_multi trampol

CVE-2026-93110 - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Wait for RCU callbac

CVE-2026-93109 - In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks

CVE-2026-93108 - In the Linux kernel, the following vulnerability has been resolved: RDMA/ipoib: Drain RCU callbacks

CVE-2026-93107 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Avoid reprocessing th

CVE-2026-93106 - In the Linux kernel, the following vulnerability has been resolved: crash_dump: release keyring ref

CVE-2026-93105 - In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag

CVE-2026-93104 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after por

CVE-2026-93103 - In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Preserve unit 0 on a

CVE-2026-93102 - In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late

CVE-2026-93101 - In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Unregister s

CVE-2026-93100 - In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-f

CVE-2026-93099 - In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker

CVE-2026-93098 - In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: fix deadlock in e

CVE-2026-93097 - In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Break poison list loo

CVE-2026-93096 - In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-p

CVE-2026-93095 - In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record

CVE-2026-93094 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dp_link_peer

CVE-2026-93093 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Publish cha

CVE-2026-93092 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unregister

CVE-2026-93091 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Quiesce not

CVE-2026-93090 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Clean up ch

CVE-2026-93089 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Free transp

CVE-2026-93086 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Avoid IDR u

CVE-2026-93085 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Reject out

CVE-2026-93084 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Drop handle

CVE-2026-93083 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind TX r

CVE-2026-93082 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind P2A

CVE-2026-93081 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix SCMI de

CVE-2026-93080 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix transpo

CVE-2026-93079 - In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Get Featur

CVE-2026-93078 - In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Set Featur

CVE-2026-93077 - In the Linux kernel, the following vulnerability has been resolved: cxl/features: Clamp Get Feature