CVE-2026-55455 - Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outb

CVE-2026-55454 - Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bund

CVE-2026-54759 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML sanitizer

CVE-2026-54158 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view (d

CVE-2026-54070 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME i

CVE-2026-54069 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel

CVE-2026-54068 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDyna

CVE-2026-54067 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, CSS snippet body cont

CVE-2026-54066 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-202

CVE-2026-53766 - Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live C

CVE-2026-53765 - Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live C

CVE-2026-52794 - Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Exp

CVE-2026-50551 - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan contains a sto

CVE-2026-50189 - Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith

CVE-2026-49979 - Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POS

CVE-2026-47110 - Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authentic

CVE-2026-47093 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-39897 - Cacti is an open source performance and fault management framework. Versions 1.2.30 and below contai

CVE-2026-39894 - Cacti is an open source performance and fault management framework. In versions 1.2.30 and below, th

CVE-2026-39893 - Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, th

CVE-2026-2050 - GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi

CVE-2026-10642 - The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl

CVE-2026-10043 - MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulner

CVE-2025-60468 - GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affecte

CVE-2026-7539 - A potential security vulnerability has been identified in the HP Accessory WMI Provider installer fo

CVE-2026-52816 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) saniti

CVE-2026-52815 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated informa

CVE-2026-52814 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is

CVE-2026-52813 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path

CVE-2026-52812 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addresse

CVE-2026-52811 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles check

CVE-2026-52810 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST …/gi

CVE-2026-52809 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated

CVE-2026-52808 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1

CVE-2026-52807 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, in new_form.tmpl, milestone names a

CVE-2026-52806 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to

CVE-2026-52805 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request Forgery (SSRF

CVE-2026-52804 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can

CVE-2026-52802 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, an open redirect vulnerability exis

CVE-2026-52801 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functional

CVE-2026-52800 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management

CVE-2026-52799 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, GET /attachments/:uuid returns the

CVE-2026-52798 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, although .ipynb previews are saniti

CVE-2026-52797 - Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder

CVE-2026-52796 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index patte

CVE-2026-52795 - Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, any authenticated user can wa

CVE-2026-50129 - Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.11, 4.4.18,

CVE-2026-50128 - Mastodon is a free, open-source social network server based on ActivityPub. From 4.3.0 until 4.5.11

CVE-2026-49278 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-49277 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-47733 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, t

CVE-2026-47267 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, the fix for CVE-2022-1285 prevents

CVE-2026-46423 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-45757 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-45689 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-45688 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-45687 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-45677 - Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8

CVE-2026-33543 - FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior ex

CVE-2026-33235 - AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificia

CVE-2026-32315 - motionEye (mEye) is an online interface for motion software, a video surveillance program with motio

CVE-2026-31978 - motionEye (mEye) is an online interface for motion software, which is a video surveillance program w

CVE-2026-25119 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, when ENABLE_REVERSE_PROXY_AUTHENTIC

CVE-2026-1840 - The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of

CVE-2026-13208 - A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomain

CVE-2026-13201 - A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function us

CVE-2026-11998 - A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies fo

CVE-2025-64719 - Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to cre

CVE-2026-55583 - Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.9.0, Twenty was

CVE-2026-48028 - Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17,

CVE-2026-47389 - Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17,

CVE-2026-46349 - Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17,

CVE-2026-46348 - Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17,

CVE-2026-27708 - FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior

CVE-2026-23879 - py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encr

CVE-2026-53950 - @tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the ActivityPub clien

CVE-2026-53949 - Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to fi

CVE-2026-53948 - Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, insufficient validation of t

CVE-2026-53947 - Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses f

CVE-2026-53946 - Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Gho

CVE-2026-53945 - Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for

CVE-2026-53944 - Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, when making an external reque

CVE-2026-53943 - Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared cach

CVE-2026-49980 - Rclone is a command-line program to sync files and directories to and from different cloud storage p

CVE-2026-49247 - Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog

CVE-2026-49246 - Jellyfin is an open source self hosted media server. Prior to 10.11.10, a specifically crafted MKV f

CVE-2026-49220 - Jellyfin is an open source self hosted media server. Prior to 10.11.9, a potential XSS attack exists

CVE-2026-48793 - Jellyfin is an open source self hosted media server. Prior to 10.11.10, a potential FFmpeg argument

CVE-2026-13038 - Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote atta

CVE-2026-13037 - Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attack

CVE-2026-13036 - Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execut

CVE-2026-13035 - Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacke

CVE-2026-13034 - Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote

CVE-2026-13033 - Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowe

CVE-2026-13032 - Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke

CVE-2026-13031 - Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execut

CVE-2026-13030 - Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attack

CVE-2026-13029 - Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker wh

CVE-2026-13028 - Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke

CVE-2026-13027 - Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to p

CVE-2026-13026 - Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remo

CVE-2026-13025 - Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromi

CVE-2026-13024 - Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 al

CVE-2026-13023 - Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had

CVE-2026-13022 - Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote a

CVE-2026-13021 - Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.1

CVE-2026-12760 - A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet ha

CVE-2025-60471 - A use-after-free in the gf_filter_pid_reconfigure_task_discard function (/filter_core/filter_pid.c)

CVE-2026-55611 - AnythingLLM is an application that turns pieces of content into context that any LLM can use as refe

CVE-2026-54699 - Warp is an agentic development environment. From 0.2024.03.12.08.02.stable_01 until 0.2026.05.06.15.

CVE-2026-54686 - Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.

CVE-2026-49851 - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerabl

CVE-2026-48789 - AnythingLLM is an application that turns pieces of content into context that any LLM can use as refe

CVE-2026-48732 - Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.

CVE-2026-48731 - Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.

CVE-2026-48725 - Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.

CVE-2026-48721 - Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.

CVE-2026-48720 - Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.

CVE-2026-48719 - Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.

CVE-2026-48704 - Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.

CVE-2026-48703 - Warp is an agentic development environment. From 0.2025.04.09.08.11.stable_00 until 0.2026.05.06.15.

CVE-2026-44022 - Docling simplifies document processing by parsing diverse formats and providing integrations with th

CVE-2026-44020 - Docling simplifies document processing by parsing diverse formats and providing integrations with th

CVE-2026-44017 - Docling simplifies document processing by parsing diverse formats and providing integrations with th

CVE-2026-44016 - Docling simplifies document processing by parsing diverse formats and providing integrations with th

CVE-2026-54906 - concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#re

CVE-2026-54905 - concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWri

CVE-2026-54904 - concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#

CVE-2026-54297 - Faraday is an HTTP client library abstraction layer that provides a common interface over many adapt

CVE-2026-53130 - In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject s_sys_blocksize

CVE-2026-53129 - In the Linux kernel, the following vulnerability has been resolved: fs/mbcache: cancel shrink work

CVE-2026-53128 - In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbd

CVE-2026-53127 - In the Linux kernel, the following vulnerability has been resolved: block: fix zones_cond memory le

CVE-2026-53126 - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix disk reference

CVE-2026-53125 - In the Linux kernel, the following vulnerability has been resolved: md: fix array_state=clear sysfs

CVE-2026-53124 - In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled fla

CVE-2026-53123 - In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiter

CVE-2026-53122 - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between ref

CVE-2026-53121 - In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in

CVE-2026-53120 - In the Linux kernel, the following vulnerability has been resolved: PCI: use generic driver_overrid

CVE-2026-53119 - In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic drive

CVE-2026-53118 - In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driver_overri

CVE-2026-53117 - In the Linux kernel, the following vulnerability has been resolved: s390/cio: use generic driver_ov

CVE-2026-53116 - In the Linux kernel, the following vulnerability has been resolved: s390/ap: use generic driver_ove

CVE-2026-53115 - In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: use generic driver

CVE-2026-53114 - In the Linux kernel, the following vulnerability has been resolved: perf/amd/ibs: Avoid calling per

CVE-2026-53113 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks

CVE-2026-53112 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possibl

CVE-2026-53111 - In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null poi

CVE-2026-53110 - In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog

CVE-2026-53109 - In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad p

CVE-2026-53108 - In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race wit

CVE-2026-53107 - In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs

CVE-2026-53106 - In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting loca

CVE-2026-53105 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NUL

CVE-2026-53104 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak des

CVE-2026-53103 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potenti

CVE-2026-53102 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak aft

CVE-2026-53101 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix potenti

CVE-2026-53100 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix deadlock in rem

CVE-2026-53099 - In the Linux kernel, the following vulnerability has been resolved: bpf: Switch CONFIG_CFI_CLANG to

CVE-2026-53098 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix use-aft

CVE-2026-53097 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-aft

CVE-2026-53096 - In the Linux kernel, the following vulnerability has been resolved: bpf: Use RCU-safe iteration in

CVE-2026-53095 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix abuse of kprobe_write_

CVE-2026-53094 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stale offload->prog po

CVE-2026-53093 - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error point

CVE-2026-53092 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta track

CVE-2026-53091 - In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdisc_pkt_

CVE-2026-53090 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure p

CVE-2026-53089 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in offl

CVE-2026-53088 - In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one i

CVE-2026-53087 - In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix leaking free

CVE-2026-53086 - In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing timeo

CVE-2026-53085 - In the Linux kernel, the following vulnerability has been resolved: bpf: fix mm lifecycle in open-c

CVE-2026-53084 - In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from t

CVE-2026-53083 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_ar

CVE-2026-53082 - In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix unini

CVE-2026-53081 - In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id co

CVE-2026-53080 - In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL der

CVE-2026-53079 - In the Linux kernel, the following vulnerability has been resolved: net_sched: fix skb memory leak

CVE-2026-53078 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src

CVE-2026-53077 - In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB

CVE-2026-53076 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value

CVE-2026-53075 - In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in t

CVE-2026-53074 - In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inp

CVE-2026-53073 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ldisc: Clear HCI

CVE-2026-53072 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix locking in hci_c

CVE-2026-53071 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing c

CVE-2026-53070 - In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling

CVE-2026-53069 - In the Linux kernel, the following vulnerability has been resolved: net, bpf: fix null-ptr-deref in

CVE-2026-53068 - In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflo

CVE-2026-53067 - In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-ep-msi: Fix

CVE-2026-53066 - In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: backend: fix error p

CVE-2026-53065 - In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmap_f

CVE-2026-53064 - In the Linux kernel, the following vulnerability has been resolved: dm cache: fix null-deref with c

CVE-2026-53063 - In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in pas

CVE-2026-53062 - In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missin

CVE-2026-53061 - In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping che

CVE-2026-53060 - In the Linux kernel, the following vulnerability has been resolved: dm cache metadata: fix memory l

CVE-2026-53059 - In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write

CVE-2026-53058 - In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cadence: cdns-mhdp8

CVE-2026-53057 - In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Add IOTINVAL after

CVE-2026-53056 - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: fix mismatch betwe

CVE-2026-53055 - In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - preven

CVE-2026-53054 - In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix VM_BIND UNMAP lock

CVE-2026-53053 - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to

CVE-2026-53052 - In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: topology: ch

CVE-2026-53051 - In the Linux kernel, the following vulnerability has been resolved: PCI: tegra194: Fix CBB timeout

CVE-2026-53050 - In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquot_scan_a

CVE-2026-53049 - In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log lock

CVE-2026-53048 - In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dere

CVE-2026-53047 - In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorre

CVE-2026-53046 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free from

CVE-2026-53045 - In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_c

CVE-2026-53044 - In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix incorrect A

CVE-2026-53043 - In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregio

CVE-2026-53042 - In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering

CVE-2026-53041 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling w

CVE-2026-53040 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate bg_bits during

CVE-2026-53039 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input

CVE-2026-53038 - In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securi

CVE-2026-53037 - In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hi

CVE-2026-53036 - In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in c

CVE-2026-53035 - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix iter

CVE-2026-53034 - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix null-

CVE-2026-53033 - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock f

CVE-2026-53032 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr

CVE-2026-53031 - In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_

CVE-2026-53030 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memor

CVE-2026-53029 - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent uninitialized

CVE-2026-53028 - In the Linux kernel, the following vulnerability has been resolved: usb: typec: Fix error pointer d

CVE-2026-53027 - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load

CVE-2026-53026 - In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extr

CVE-2026-53025 - In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-fre

CVE-2026-53024 - In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-fre

CVE-2026-53023 - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: terminate the cached

CVE-2026-53022 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman:

CVE-2026-53021 - In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer

CVE-2026-53020 - In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race conditio

CVE-2026-53019 - In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: ccu_mix: fix inv

CVE-2026-53018 - In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already upd

CVE-2026-53017 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by i

CVE-2026-53016 - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skc

CVE-2026-53015 - In the Linux kernel, the following vulnerability has been resolved: erofs: unify lcn as u64 for 32-

CVE-2026-53014 - In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wron

CVE-2026-53013 - In the Linux kernel, the following vulnerability has been resolved: macvlan: fix macvlan_get_size()

CVE-2026-53012 - In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referen

CVE-2026-53011 - In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-afte

CVE-2026-53010 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in sm