Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Critical
- linuxsmb: client: reject a tree connect response whose byte count is too small9.1 Critical
- linuxsmb: client: restore the data_offset bound in is_valid_oplock_break()9.1 Critical
- linuxeventfs: Initialize ei->children and ei->list in init_ei()9.8 Critical
- linuxntfs: bound the free-cluster bitmap scan to the volume9.8 Critical
- linuxntfs: reject invalid empty mapping pairs9.8 Critical
- linuxntfs: reject invalid MFT LCNs from boot sector9.8 Critical
- linuxntfs: validate non-resident attribute offsets9.8 Critical
- linuxntfs: verify run length exceeding volume boundary9.8 Critical
- linuxmd/raid10: fix still_degraded being inverted in raid10_sync_request()9.8 Critical
- linuxmpls: reload header after pskb_may_pull()9.8 Critical
- linuxSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Critical
- linuxSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Critical
- linuxSUNRPC: close backchannel before destroying callback service9.8 Critical
- linuxSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Critical
- linuxSUNRPC: harden gss_unwrap_resp_priv length checks9.8 Critical
- linuxSUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 Critical
- linuxSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Critical
- linuxSUNRPC: wait for in-flight client TLS handshake callback9.8 Critical
- linuxsvcrdma: Fix offset arithmetic in read_chunk_range9.8 Critical
- linuxsvcrdma: Fix pcl_for_each_segment for empty chunks9.1 Critical
- linuxsvcrdma: Reject inline replies that overflow the pull-up buffer9.8 Critical
- linuxsvcrdma: Validate Read chunk positions before reconstruction9.8 Critical
- linuxocfs2: bound namelen in dlm_migrate_request_handler9.8 Critical
- linuxocfs2: validate lengths in dlm_mig_lockres_handler9.8 Critical
- linuxocfs2: validate directory-index entry counts when reading metadata9.8 Critical
- linuxlockd: pin next file across nlm_inspect_file lock-drop9.8 Critical
- linuxnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone9.8 Critical
- linuxsctp: stop processing a packet once its association is deleted9.8 Critical
- linuxsctp: drop a chunk if its transport was removed9.8 Critical
- linuxiommu/vt-d: Force requesting ACS when tboot is enabled9.3 Critical
- linuxxdp: fix zero-copy frame layout9.8 Critical
- linuxnet/smc: bound the peer rkey counts in SMC-Rv2 LLC messages9.8 Critical
- linuxnet/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()9.8 Critical
- linuxnet/smc: stop killed, freed and out_of_sync sharing a byte9.8 Critical
- linuxseg6: reset IP6CB after IPv6 decapsulation9.8 Critical
- linuxcrypto: iaa - unmap dst before software fallback on decompress9.1 Critical
- linuxksmbd: fix use-after-free in oplock break notification9.8 Critical
- getsimplecms, getsimplecms-ce +1 moreGetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw9.8 Critical
- themerex addonsWordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability9.8 Critical
- wpeverest everest formsWordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability9.8 Critical
- apache opennlpApache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns10.0 Critical
- spipSPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection9.3 Critical
- spipSPIP < 4.4.18 Missing Authorization via ecrire/action/9.3 Critical
- devolutions serverLaci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation9.2 Critical
- schneider electric modicon m580, modicon m580 safety +1 moreCWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could...9.2 Critical
- wavlink wn535m1, wavlink technology wn535m3 +1 moreWAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server9.3 Critical
- st engineering idirect 3315-series terminals, 9-series terminals, evolution iq‑series terminals +2 moreST Engineering iDirect iQ-Series Terminals Missing Authorization9.4 Critical
- mistralai mistral-vibeAn arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace...10.0 Critical
- mistralai mistral-vibeAn arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command...10.0 Critical
- Show moreLoading…