Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.EPSS 0.1%Oct 15, 2026
- High7.0The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.EPSS 0.1%Oct 15, 2026
- High7.0The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.EPSS 0.1%Oct 15, 2026
- Medium5.5When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.EPSS 0.1%Oct 15, 2026
- High8.2When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.EPSS 0.3%Oct 15, 2026
- UnknownThe IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.EPSS 0.2%Oct 15, 2026
- Medium6.5TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.EPSS 0.4%Oct 15, 2026
- UnknownSCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.EPSS 0.2%Oct 15, 2026
- Unknownrenameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.EPSS 0.2%Oct 15, 2026
- UnknownMultiple jail filesystem root escapesEPSS 0.2%Oct 15, 2026
- Unknownkqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.EPSS 0.1%Oct 15, 2026
- UnknownMemory safety bugs in kqueue copy-on-fork implementationEPSS 0.1%Oct 15, 2026
- UnknownWhen semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.EPSS 0.2%Oct 15, 2026
- Medium4.6NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR re…EPSS 0.3%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.EPSS 0.7%May 20, 2026
- Medium5.7NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.EPSS 0.3%May 20, 2026
- High8.7NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.EPSS 0.7%May 20, 2026
- High8.7NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/o…EPSS 0.8%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does…EPSS 0.4%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance.EPSS 0.7%May 20, 2026
- Medium6.6NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options.EPSS 0.8%May 20, 2026
- Medium6.6NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain windo…EPSS 0.1%May 20, 2026
- Critical9.1NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execut…EPSS 1.1%May 20, 2026
- Medium4.6NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt').EPSS 0.4%May 20, 2026
- UnknownCVE-2026-9076 is named by FreeBSD Security.Unknown date
83 records · page 1 of 4
PreviousNext