● Live advisory feed

Security Advisory Fusion for CSIRTs, SOCs & Defenders

Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.

Daily Briefings IntelFusions

Advisories tracked

20,973

Known exploited

1,782

Sources online

Last sync

6H AGO

9,410 records · page 60 / 189 · nvd firehose hidden — show all

CVE-2026-64244: drivers/base/memory: set mem->altmap after successful device registration

mediumCVSS 5.5CVE-2026-64244 msrc2026-07-14

CVE-2026-64455: USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

highCVSS 7.8CVE-2026-64455 msrc2026-07-14

CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay

highCVSS 7.8CVE-2026-64382 msrc2026-07-14

CVE-2026-66034: libssh2 Heap Out-of-Bounds Read via publickey subsystem

highCVSS 7.5CVE-2026-66034 msrc2026-07-14

CVE-2026-13937: Chromium: CVE-2026-13937 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13937 msrc2026-07-14

CVE-2026-64469: binder: fix UAF in binder_thread_release()

highCVSS 7.1CVE-2026-64469 msrc2026-07-14

CVE-2026-64399: ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE

highCVSS 7.1CVE-2026-64399 msrc2026-07-14

CVE-2026-64387: smb: client: fix query directory replay double-free

mediumCVSS 5.5CVE-2026-64387 msrc2026-07-14

CVE-2026-64412: netfilter: ebtables: module names must be null-terminated

mediumCVSS 5.5CVE-2026-64412 msrc2026-07-14

CVE-2026-64390: ksmbd: track the connection owning a byte-range lock

mediumCVSS 5.5CVE-2026-64390 msrc2026-07-14

CVE-2026-13952: Chromium: CVE-2026-13952 Inappropriate implementation in PerformanceAPIs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13952 msrc2026-07-14

CVE-2026-64514: userfaultfd: gate must_wait writability check on pte_present()

highCVSS 7.1CVE-2026-64514 msrc2026-07-14

CVE-2026-64401: smb: client: resolve SWN tcon from live registrations

highCVSS 7.1CVE-2026-64401 msrc2026-07-14

CVE-2026-49808: Windows Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-49808 msrc2026-07-14

CVE-2026-50325: Win32k Elevation of Privilege Vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

highCVSS 7CVE-2026-50325 msrc2026-07-14

CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs

highCVSS 7.1CVE-2026-53354 msrc2026-07-14

CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

highCVSS 7.8CVE-2026-64192 msrc2026-07-14

CVE-2026-13968: Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13968 msrc2026-07-14

CVE-2026-15125: Chromium: CVE-2026-15125 Inappropriate implementation in Forms

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-15125 msrc2026-07-14

CVE-2026-54891: Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

unknownCVE-2026-54891 msrc2026-07-14

CVE-2026-40469: Heap buffer overflow in gawk

unknownCVE-2026-40469 msrc2026-07-14

CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

mediumCVSS 4CVE-2026-13221 msrc2026-07-14

CVE-2026-15043: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text

criticalCVSS 9.8CVE-2026-15043 msrc2026-07-14

CVE-2026-54171: Excon: redact additional sensitive/risky headers when following redirects

mediumCVSS 6.5CVE-2026-54171 msrc2026-07-14

CVE-2026-50397: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

highCVSS 7CVE-2026-50397 msrc2026-07-14

CVE-2026-63793: ntfs: serialize volume label accesses

highCVSS 7.5CVE-2026-63793 msrc2026-07-14

CVE-2026-53377: drm/msm: always recover the gpu

mediumCVSS 5.5CVE-2026-53377 msrc2026-07-14

CVE-2026-53368: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage

highCVSS 7.1CVE-2026-53368 msrc2026-07-14

CVE-2026-41106: Microsoft 365 Copilot Elevation of Privilege Vulnerability

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

criticalCVSS 9.3CVE-2026-41106 msrc2026-07-14

CVE-2026-63798: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove

mediumCVSS 5.5CVE-2026-63798 msrc2026-07-14

CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref

mediumCVSS 6.3CVE-2026-64434 msrc2026-07-14

CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device

mediumCVSS 5.5CVE-2026-64038 msrc2026-07-14

CVE-2026-15116: Chromium: CVE-2026-15116 Use after free in Actor

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-15116 msrc2026-07-14

CVE-2026-14037: Chromium: CVE-2026-14037 Insufficient policy enforcement in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14037 msrc2026-07-14

CVE-2026-64036: cgroup/rstat: validate cpu before css_rstat_cpu() access

mediumCVSS 5.5CVE-2026-64036 msrc2026-07-14

CVE-2026-14414: Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14414 msrc2026-07-14

CVE-2026-64138: ksmbd: validate SID in parent security descriptor during ACL inheritance

criticalCVSS 9.8CVE-2026-64138 msrc2026-07-14

CVE-2026-63958: usb: typec: ucsi: validate connector number in ucsi_connector_change()

criticalCVSS 9.8CVE-2026-63958 msrc2026-07-14

CVE-2026-26199: Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

unknownCVE-2026-26199 msrc2026-07-14

CVE-2026-64187: xfs: fail recovery on a committed log item with no regions

mediumCVSS 5.5CVE-2026-64187 msrc2026-07-14

CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure

mediumCVSS 6.7CVE-2026-53397 msrc2026-07-14

CVE-2026-14401: Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14401 msrc2026-07-14