Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.8ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityOct 16, 2026
- High8.8ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation VulnerabilityOct 16, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%Oct 15, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.3%Oct 15, 2026
- Medium4.3OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.2%Oct 15, 2026
- Medium5.9OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.3%Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.2%Oct 15, 2026
- High8.0OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.5%Oct 15, 2026
- Critical9.9OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.9%Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.7%Oct 15, 2026
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.EPSS 0.1%Oct 15, 2026
- High7.0The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.EPSS 0.1%Oct 15, 2026
- High7.0The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.EPSS 0.1%Oct 15, 2026
- Medium5.5When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.EPSS 0.1%Oct 15, 2026
- High8.2When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.EPSS 0.3%Oct 15, 2026
- UnknownThe IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.EPSS 0.2%Oct 15, 2026
- Medium6.5TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.EPSS 0.4%Oct 15, 2026
- UnknownSCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.EPSS 0.2%Oct 15, 2026
- Unknownrenameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.EPSS 0.2%Oct 15, 2026
- UnknownMultiple jail filesystem root escapesEPSS 0.2%Oct 15, 2026
- Unknownkqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.EPSS 0.1%Oct 15, 2026
- UnknownMemory safety bugs in kqueue copy-on-fork implementationEPSS 0.1%Oct 15, 2026
- UnknownWhen semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.EPSS 0.2%Oct 15, 2026
128 records · page 1 of 6
PreviousNext