Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8wifi: mac80211: defer link RX stats percpu free to RCUEPSS 0.2%Aug 10, 2026
- High8.8Bluetooth: hci_sync: extend conn_hash lookup critical sectionsEPSS 0.2%Aug 10, 2026
- Unknowndrm/dp/mst: fix buffer overflows in sideband chunk accumulationEPSS 0.2%Aug 10, 2026
- High7.8drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()EPSS 0.2%Aug 10, 2026
- High7.8drm/amd/display: set new_stream to NULL after releaseEPSS 0.1%Aug 10, 2026
- High7.8ALSA: seq: close a re-opened queue timer in the destructorEPSS 0.2%Aug 10, 2026
- Critical9.8openvswitch: fix GSO userspace truncation underflowEPSS 0.6%Aug 10, 2026
- High7.8pppoe: reload header pointer after dev_hard_header()EPSS 0.3%Aug 10, 2026
- High8.8drm/amdgpu/vce: fix integer overflow in image sizeEPSS 0.1%Aug 10, 2026
- High8.0Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceledEPSS 0.3%Aug 10, 2026
- High8.1Red Hat Security Advisory: nodejs:22 security updateAug 10, 2026
- High7.6A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio.EPSS 0.4%Aug 10, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- High7.8xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()EPSS 0.1%Aug 5, 2026
- High7.1NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionEPSS 0.1%Aug 3, 2026
- Unknownbpf: Support for hardening against JIT sprayingEPSS 0.2%Jul 25, 2026
- Critical9.8smb: client: fix double-free in SMB2_ioctl() replayEPSS 0.5%Jul 25, 2026
- High8.2OmniFaces is a utility library for Faces.EPSS 0.3%Jul 24, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026
- UnknownCGA-wmwm-gv4v-h9jfJul 24, 2026
- High8.1Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement updateJul 23, 2026
- High8.6The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.EPSS 0.2%Jul 22, 2026
- High7.5A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage.EPSS 0.5%Jul 22, 2026
- High7.5An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ proceEPSS 0.4%Jul 22, 2026
- Medium6.8BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.EPSS 0.3%Jul 22, 2026