CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- cakephp debug kitDebugKit: MailPreview contains unsafe reflection4.3 Medium
- senaite senaite.coreSENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.core9.8 Critical
- jihong88 suneditorSunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embed8.5 High
- google langfunEval Injection in google/langfun via default lf.query protocol9.2 Critical
openwisp-ipamPyPIOpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses5.3 Medium- linuxblock: stop the timeout timer when releasing a never added disk9.8 Critical
- linuxmptcp: reclaim forward-allocated memory on RX path errors7.5 High
- linuxmptcp: avoid combining some incoming suboptions9.8 Critical
- linuxmptcp: options: reset DSS fields in case of unexpected size9.8 Critical
- linuxmptcp: fastopen: only mark MPTFO subflows with SYN data9.4 Critical
- linuxs390/qeth: validate user buffer length in SNMP and ARP query ioctls8.4 High
- linuxASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses7.8 High
- linuxdrm/shmem_helper: Check VMA boundaries for PMD mappings7.8 High
- linuxASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeoutNo score
- linuxfbdev: bound mode sysfs output to the sysfs buffer7.8 High
- linuxfbdev: clear fb_info->mode before deleting a videomode7.8 High
- linuxfbdev: core: Fix pointer desynchronization in fb_io_read()7.3 High
- linuxdrm/panthor: skip zero-sized firmware sectionsNo score
- linuxdrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 High
- linuxInput: cs40l50-vibra - validate custom data from user space7.8 High
- linuxInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packet8.4 High
- linuxInput: iforce - validate input packet lengths5.2 Medium
- linuxInput: byd - synchronize timer deletion before freeing private data7.8 High
- linuxpowerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak8.8 High
- linuxInput: synaptics-rmi4 - zero report size on F54 work error7.8 High
- linuxInput: synaptics-rmi4 - bound the F54 report size to the allocated buffer7.8 High
- linuxInput: synaptics-rmi4 - block s_input when F54 queue is busy7.8 High
- linuxInput: synaptics-rmi4 - propagate F54 worker errors to V4L2 queueNo score
- linuxInput: hynitron_cstxxx - validate touch count and finger IDs5.2 Medium
- linuxcrypto: qce - fix error path in devm_qce_register_algs7.8 High
- linuxgve: fix NULL dereference due to missing ptp adjfineNo score
- linuxgpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbindNo score
- linuxgpio: ml-ioh: use raw_spinlock_t for the register lock5.7 Medium
- linuxlibceph: fix multiple unsafe decodes in decode_locker()9.8 Critical
- linuxopenrisc: signal: do not restore privileged SR bits on sigreturn7.8 High
- linuxInput: sur40 - fix input device registration ordering7.8 High
- linuxlibceph: Avoid using invalid osd indices from primary_temp9.8 Critical
- linuxlibceph: fix OOB read in decode_watchers() via missing bounds check9.8 Critical
- linuxmmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition7.8 High
- linuxs390/vfio_ccw: Free all memory if cp_init() fails7.1 High
- linuxs390/vfio_ccw: Limit the number of channel program segments9.3 Critical
- linuxs390/vfio_ccw: Cancel existing workqueues8.8 High
- linuxs390/vfio_ccw: Ensure index for read/write regions are within range8.8 High
- linuxs390/vfio_ccw: Ensure first IDAW remains constant9.3 Critical
- linuxs390/vfio_ccw: Fix out of bounds check on CCW array7.9 High
- linuxs390/vfio_ccw: Move cp cleanup out of not operational8.2 High
- linuxs390/vfio_ccw: Selectively expand io_mutex8.8 High
- linuxs390/vfio_ccw: Implement a crw lock8.8 High
- linuxs390/zcrypt: Improve CCA CPRB length and overflow checks7.8 High
- linuxs390/zcrypt: Improve EP11 CPRB length and overflow checks7.8 High
- Show moreLoading…