Latest vulnerabilities
Newest first, late arrivals on top. Also a feed.
-
3.7
-
2.7
-
6.5
-
4.1
-
3.8
-
3.8
-
7.1
-
6.8
-
5.3
-
7.5
-
4.3
-
6.4
-
3.7
-
3.7
-
7.8CVE-2026-87041 Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memorymaintainer advisory
-
8.8EPSS 15.6% chance of exploitation in 30 days, percentile 96%
-
8.3CVE-2026-87040 Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and writemaintainer advisory
-
7.7
-
7.2
-
7.8CVE-2026-87039 I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to driversmaintainer advisory
-
7.0CVE-2026-87038 Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user modemaintainer advisory
-
5.9GHSA-2gqc-mwv3-66rp Autobahn|Python: WebSocket handshake parser splits headers on non-CRLF bytes, forging a proxy-injected identity headerpypi unreviewed · maintainers only
-
5.4
-
8.4
-
7.5
-
4.7
-
5.3
-
7.5
-
5.3
-
10.0