CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- freerdpFreeRDP has a heap-use-after-free in create_irp_thread6.8 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreFreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call5.6 Medium
- freerdpFreeRDP has a heap-buffer-overflow in drive_process_irp_read6.8 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreFreeRDP has a heap-buffer-overflow in ndr_read_uint8Array6.8 Medium
- freerdpFreeRDP has a heap-buffer-overflow in audin_process_formats6.8 Medium
- freerdpFreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl->primary)6.9 Medium
- shopwareShopware Improper Control of Generation of Code in Twig rendered views7.2 High
- ekoopmans html2pdf.jshtml2pdf.js has a cross-site scripting vulnerability8.7 High
- neoteroi blacksheepBlackSheep ClientSession is vulnerable to CRLF injection6.3 Medium
- anysphere cursorCursor has a Terminal Tool Allowlist Bypass via Environment Variables7.2 High
- aliasvaultAliasVault is Missing Origin Validation in Android Passkey Credential Provider6.1 Medium
- weblateWeblate leaks information via screenshots2.3 Low
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface7.2 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface5.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorUnauthenticated Bypass Allows Multi-Factor Authentication Circumvention9.8 Critical
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface7.2 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface7.2 High
- tinyosTinyOS <= 2.1.2 Global Buffer Overflow in printfUART5.1 Medium
- linux, linux kernel +1 moremptcp: ensure context reset on disconnect()5.5 Medium
- linux, linux kernel +1 moreclk: samsung: exynos-clkout: Assign .num before accessing .hws7.8 High
- linux, linux kernel +1 morecpuset: fix warning when disabling remote partition5.5 Medium
- linux, linux kernel +1 moredrm/tilcdc: Fix removal actions in case of failed probe5.5 Medium
- linuxmedia: mediatek: vcodec: Use spinlock for context list protection lock5.7 Medium
- linux, linux kernel +1 morekernel/kexec: fix IMA when allocation happens in CMA area5.5 Medium
- linux, linux kernel +1 moredrm/msm/dpu: Add missing NULL pointer check for pingpong interface5.5 Medium
- linux, linux kernel +1 moreocteontx2-pf: fix "UBSAN: shift-out-of-bounds error"7.8 High
- linux, linux kernel +1 moremedia: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()7.1 High
- linux, linux kernel +1 moremd/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt()5.5 Medium
- linux, linux kernel +1 moremm/page_alloc: change all pageblocks migrate type on coalescing5.5 Medium
- linux, linux kernel +1 moreRDMA/irdma: avoid invalid read in irdma_net_event7.1 High
- linux, linux kernel +1 moresmc91x: fix broken irq-context in PREEMPT_RT7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: seqiv - Do not use req->iv after crypto_aead_encrypt7.5 High
- linux, linux kernel +1 moredrm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer7.8 High
- linux, linux kernel +1 moreLoongArch: BPF: Sign extend kfunc call arguments5.5 Medium
- linux, linux kernel +1 moreerspan: Initialize options_len before referencing options.7.5 High
- linux, linux kernel +1 morewifi: mac80211: Discard Beacon frames to non-broadcast address7.1 High
- linux, linux kernel +1 moremptcp: avoid deadlock on fallback while reinjecting7.5 High
- linux, linux kernel +1 moretracing: Do not register unsupported perf events5.5 Medium
- linux, linux kernel +1 moredrm/msm/a6xx: move preempt_prepare_postamble after error check5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: fix string copying in parse_apply_sb_mount_options()7.8 High
- linux, linux kernel +1 moreiommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED7.8 High
- linux, linux kernel +1 moreparisc: Do not reprogram affinitiy on ASP chip5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreSUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf7.5 High
- linux, linux kernel +1 morepowerpc/kexec: Enable SMT before waking offline CPUs5.5 Medium
- linux, linux kernel +1 moreACPICA: Avoid walking the Namespace if start_node is NULL5.5 Medium
- linux, linux kernel +1 moreblock: Remove queue freezing from several sysfs store callbacks5.5 Medium
- linux, linux kernel +1 morelibceph: make decode_pool() more resilient against corrupted osdmaps9.1 Critical
- linux, linux kernel +1 moreum: init cpu_tasks[] earlier5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevia_wdt: fix critical boot hang due to unnamed resource allocation5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - zero initialize memory allocated via sock_kmalloc5.5 Medium
- Show moreLoading…