BaselineWatch
60809 CVEs · 136 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known60,809 New, 24 h1,482 Changed, 24 h1,644 In KEV136 Public exploit1,639 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2022-2327 7.8 high 0.00% netapp, linux, h300s_firmware, h500s_firmware, h700s_firmware io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859 14 Oct
CVE-2022-1882 7.8 high 0.00% linux, netapp, linux_kernel, h300s_firmware, h500s_firmware A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system. 14 Oct
CVE-2022-0500 7.8 high 0.00% linux, fedoraproject, linux_kernel, fedora, h300e_firmware A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system. 8 Oct
CVE-2022-47520 7.1 high 0.00% linux, debian, linux_kernel, debian_linux, h410c_firmware An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet. 14 Oct
CVE-2021-4090 7.1 high 0.00% linux, netapp, linux_kernel, h300s_firmware, h500s_firmware An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat. 14 Oct
CVE-2023-1838 7.1 high 0.00% linux, netapp, linux_kernel, h300s, h410c A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem. 8 Oct
CVE-2023-1077 7.0 high 0.00% linux, debian, linux_kernel, debian_linux, a700s_firmware In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption. 14 Oct
CVE-2022-36879 5.5 medium 0.00% linux, debian, linux_kernel, debian_linux, a700s_firmware An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. 14 Oct
CVE-2023-2898 4.7 medium 0.00% linux, debian, linux_kernel, debian_linux, h300s_firmware There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem. 14 Oct
CVE-2023-3212 4.4 medium 0.00% linux, fedoraproject, linux_kernel, fedora, enterprise_linux A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic. 14 Oct
CVE-2023-2269 4.4 medium 0.00% linux, fedoraproject, linux_kernel, fedora, debian_linux A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component. 8 Oct
CVE-2020-29374 3.6 low 0.00% linux, debian, linux_kernel, debian_linux, 500f_firmware An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58. 8 Oct

62 of 62 · Previous

Download these 62 as CSV · subscribe to this list.

EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.