FR
Product
FreeBSD
595
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 168Medium 83Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15879 | 7.4 | May 13 | In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +8 more |
| CVE-2019-14899 | 7.4 | Dec 11 | A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is… Affected: All versions, or not specified |
| CVE-2020-7461 | 7.3 | Mar 26 | In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +19 more |
| CVE-2025-14558 | 7.2 | Mar 9 | Remote code execution via ND6 Router Advertisements Affected: 15.0-RELEASE before p1; 14.3-RELEASE before p7; 13.5-RELEASE before p8 |
| CVE-2026-101304 | 7.1 | Oct 15 | Multiple jail filesystem root escapes Affected: 15.1-RELEASE before p4; 15.0-RELEASE before p14; 14.5-RELEASE before p1; 14.4-RELEASE before p10 |
| CVE-2026-49421 | 7.1 | Aug 19 | unlinkat(2) ignores AT_RESOLVE_BENEATH flag Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-49413 | 7.1 | Jun 27 | Flaw in Linuxulator execution of setugid binaries Affected: 15.0-RELEASE before p10; 14.4-RELEASE before p6; 14.3-RELEASE before p15 |
| CVE-2023-5369 | 7.1 | Oct 4 | copy_file_range insufficient capability rights check Affected: 13.2-RELEASE before p4 |
| CVE-2018-6924 | 7.1 | Sep 12 | In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF… Affected: 10.4; 11.2; 11.0 before 11.1 |
| CVE-2026-101311 | 7.0 | Oct 15 | Multiple vulnerabilities in bhyve device models Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-101310 | 7.0 | Oct 15 | Multiple vulnerabilities in bhyve device models Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-101309 | 7.0 | Oct 15 | Multiple vulnerabilities in bhyve device models Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-58100 | 7.0 | Oct 15 | Memory safety bugs in kqueue copy-on-fork implementation Affected: 15.1-RELEASE before p4 |
| CVE-2026-58099 | 7.0 | Oct 15 | Memory safety bugs in kqueue copy-on-fork implementation Affected: 15.1-RELEASE before p4 |
| CVE-2026-58093 | 7.0 | Aug 26 | Kernel use-after-free via tty ioctls Affected: 15.1-RELEASE before p3; 15.0-RELEASE before p13; 14.4-RELEASE before p9 |
| CVE-2026-49417 | 7.0 | Jun 27 | Multiple vulnerabilities in the sound(4) mmap path Affected: 15.0-RELEASE before p10; 14.4-RELEASE before p6; 14.3-RELEASE before p15 |
| CVE-2020-7460 | 7.0 | Aug 6 | In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, the sendmsg system call in the… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +15 more |
| CVE-2008-5162 | 7.0 | Nov 26 | The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for… Affected: 6.4 before 7.0; 6.3; 6.3; 6.3; 6.3; 6.3; +24 more |
The 500 most important CVEs for this product (exploited first, then by severity)