CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 11:18 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-98898 New | LI Linux Linux | – | Oct 23 | drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized |
| CVE-2026-98897 New | LI Linux Linux | – | Oct 23 | ksmbd: don't hold ci->m_lock while waiting for a lease break ack |
| CVE-2026-112904 New | VV Vvveb givanz | 8.7 | Oct 23 | Vvveb: Path Traversal in nextRestore() and nextBackup() |
| CVE-2026-98896 New | LI Linux Linux | – | Oct 23 | thunderbolt: Keep the domain reference while processing hotplug |
| CVE-2026-98895 New | LI Linux Linux | 7.0 | Oct 23 | net/mlx5: HWS, Handle destroying table that has a miss table |
| CVE-2026-98894 New | LI Linux Linux | – | Oct 23 | drm/amd/ras: reset CPER ring on corrupt entry size |
| CVE-2026-98893 New | LI Linux Linux | – | Oct 23 | firmware: arm_scmi: Validate SENSOR_UPDATE payload size |
| CVE-2026-98892 New | LI Linux Linux | – | Oct 23 | firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size |
| CVE-2026-98891 New | LI Linux Linux | – | Oct 23 | wifi: mac80211: validate deauth frame length before reason access |
| CVE-2026-98890 New | LI Linux Linux | – | Oct 23 | wifi: libertas: reject short monitor TX frames |
| CVE-2026-98889 New | LI Linux Linux | 7.8 | Oct 23 | wifi: iwlwifi: mvm: fix sched scan IE sizing |
| CVE-2026-98888 New | LI Linux Linux | – | Oct 23 | arm64: kprobes: Allow reentering kprobes while single-stepping |
| CVE-2026-98887 New | LI Linux Linux | – | Oct 23 | wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO |
| CVE-2026-98886 New | LI Linux Linux | – | Oct 23 | drm/gma500: return errors from Oaktrail HDMI I2C reads |
| CVE-2026-98885 New | LI Linux Linux | – | Oct 23 | ima: return error early if file xattr cannot be changed |
| CVE-2026-98884 New | LI Linux Linux | – | Oct 23 | mmc: core: Add validation for host-provided max_segs |
| CVE-2026-98883 New | LI Linux Linux | – | Oct 23 | serial: 8250_port: recognize UPIO_AU |
| CVE-2026-98882 New | LI Linux Linux | – | Oct 23 | media: chips-media: wave5: Add range checks for dec_output_info |
| CVE-2026-98881 New | LI Linux Linux | – | Oct 23 | net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() |
| CVE-2026-98880 New | LI Linux Linux | – | Oct 23 | ntfs3: handle set_blocksize failures |
| CVE-2026-98879 New | LI Linux Linux | – | Oct 23 | isofs: handle set_blocksize failures |
| CVE-2026-98878 New | LI Linux Linux | – | Oct 23 | irqchip/gic-v5: Immediately exec priority drop following activate |
| CVE-2026-98877 New | LI Linux Linux | – | Oct 23 | irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed |
| CVE-2026-98876 New | LI Linux Linux | – | Oct 23 | host1x: bus: Fix missing ops null check in error teardown |
| CVE-2026-98875 New | LI Linux Linux | – | Oct 23 | drm/nouveau/gsp: add SEC2 to GA100 chip table |
| CVE-2026-98874 New | LI Linux Linux | – | Oct 23 | wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect |
| CVE-2026-98873 New | LI Linux Linux | – | Oct 23 | netfilter: nf_conntrack_expect: zero at allocation time |
| CVE-2026-98872 New | LI Linux Linux | – | Oct 23 | freevxfs: don't BUG() on unknown typed-extent type |
| CVE-2026-98871 New | LI Linux Linux | – | Oct 23 | crypto: ccp - Fix possible deadlock in SEV init failure path |
| CVE-2026-98870 New | LI Linux Linux | 8.8 | Oct 23 | ksmbd: remove stale channels from all sessions on teardown |
| CVE-2026-115727 New | AG AgenticSeek Fosowl | 8.1 | Oct 23 | AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server |
| CVE-2026-115726 New | AI aider Aider-AI | 7.8 | Oct 23 | Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings |
| CVE-2026-115725 New | CH chatwoot chatwoot | 4.2 | Oct 23 | Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_id |
| CVE-2026-115724 New | VF VLC for Android VideoLAN | 2.9 | Oct 23 | VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider |
| CVE-2026-115723 New | SN snap7 davenardella | 7.4 | Oct 23 | Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletion |
| CVE-2026-115722 New | RP rply diegonehab | 6.1 | Oct 23 | RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header |