CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
In the Linux kernel, the route4 classifier (net/sched: cls_route) has a use-after-free bug in its fastmap cache. The classifier stores raw filter pointers in a 16-slot cache, and a race between read and write operations can lead to use of freed memory, potentially causing system crashes or privilege escalation.
In the Linux kernel, the packet_snd() function (packet send path) has an inconsistency in reading dev->hard_header_len, which can lead to an out-of-bounds write during skb construction. The issue also affects packet_sendmsg_spkt().
In the Linux kernel, the fib6_rule_suppress() function (IPv6 routing) does not clear the res->rt6 pointer after dropping a route, which can lead to use of a freed rt6_info object and trigger rcuref_put_slowpath() during release.
A vulnerability was found in the Linux kernel's vhost subsystem. The vring metadata cache (vq->meta_iotlb[]) is not reset when the vring is reconfigured via VHOST_SET_VRING_ADDR or VHOST_SET_VRING_NUM while a device IOTLB is attached. This can lead to stale mappings being used, resulting in memory access outside the actually mapped region.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access and full remote code execution.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.