CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 6 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-64388	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Ex	82d ago
CVE-2026-64378	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_u	82d ago
CVE-2026-64375	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_up	82d ago
CVE-2026-64372	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double fr	82d ago
CVE-2026-64367	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to p	82d ago
CVE-2026-64365	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at dr	82d ago
CVE-2026-64363	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key_up_timer	82d ago
CVE-2026-64362	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to	82d ago
CVE-2026-64361	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in check_and_cor	82d ago
CVE-2026-64354	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before	82d ago
CVE-2026-64352	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access from sleepable BPF p	82d ago
CVE-2026-64348	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI	82d ago
CVE-2026-64346	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadget	82d ago
CVE-2026-64344	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect	82d ago
CVE-2026-64343	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect r	82d ago
CVE-2026-64342	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconne	82d ago
CVE-2026-64341	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconne	82d ago
CVE-2026-64340	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disco	82d ago
CVE-2026-64333	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer	82d ago
CVE-2026-64330	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_	82d ago
CVE-2026-64329	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of u	82d ago
CVE-2026-64324	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the p	82d ago
CVE-2026-64322	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry	82d ago
CVE-2026-64311	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused lo	82d ago
CVE-2026-64305	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations	82d ago
CVE-2026-64304	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengt	82d ago
CVE-2026-64300	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_rang	82d ago
CVE-2026-64296	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir	82d ago
CVE-2026-64293	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hd	82d ago
CVE-2026-64279	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Ada	82d ago
CVE-2026-64277	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap t	82d ago
CVE-2026-64276	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap t	82d ago
CVE-2026-64274	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported cont	82d ago
CVE-2026-64273	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported forc	82d ago
CVE-2026-64272	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S	82d ago
CVE-2026-64271	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ev	82d ago
CVE-2026-64270	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device pac	82d ago
CVE-2026-64266	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fu	82d ago
CVE-2026-64265	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse	82d ago
CVE-2026-64261	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring	82d ago
CVE-2026-64260	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set	82d ago
CVE-2026-64259	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only	82d ago
CVE-2025-71408	7.8	—	—	—	nltk / nltk	NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocat	82d ago
CVE-2026-64251	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_deb	83d ago
CVE-2026-64249	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regi	83d ago
CVE-2026-64246	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-af	83d ago
CVE-2026-64245	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_m	83d ago
CVE-2026-64242	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe	83d ago
CVE-2026-64239	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in	83d ago
CVE-2026-64226	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn	83d ago
CVE-2026-64225	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_spe	83d ago
CVE-2026-64224	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_	83d ago
CVE-2026-64221	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA set	83d ago
CVE-2026-64218	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backb	83d ago
CVE-2026-64217	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user	83d ago
CVE-2026-49745	7.8	—	—	—	imaginationtech / ddk	Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger	83d ago
CVE-2026-49744	7.8	—	—	—	imaginationtech / ddk	Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger	83d ago
CVE-2026-49743	7.8	—	—	—	imaginationtech / ddk	Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifeti	83d ago
CVE-2026-14172	7.8	—	—	—	—	Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment wi	83d ago
CVE-2026-38764	7.8	—	—	—	—	An issue in Unistal Systems Pvt.	83d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker