News stories · 30d
21
Advisories · 30d
0
Added to KEV · 90d
5
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-18 | CVE-2025-39964 | Kernel | Linux Kernel Race Condition Vulnerability | |
| 2026-09-18 | CVE-2026-53266 | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | |
| 2026-09-18 | CVE-2025-39682 | Kernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | |
| 2026-08-27 | CVE-2026-53362 | Kernel | Linux Kernel Unspecified Vulnerability | |
| 2026-08-26 | CVE-2022-0995 | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | |
| 2026-06-02 | CVE-2022-0492 | Kernel | Linux Kernel Improper Authentication Vulnerability | |
| 2026-05-01 | CVE-2026-31431 | Kernel | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | |
| 2026-01-26 | CVE-2018-14634 | Kernel | Linux Kernel Integer Overflow Vulnerability | |
| 2025-10-06 | CVE-2021-22555 | Kernel | Linux Kernel Heap Out-of-Bounds Write Vulnerability | |
| 2025-09-29 | CVE-2025-32463 | Sudo | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | |
| 2025-09-04 | CVE-2025-38352 | Kernel | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | |
| 2025-06-17 | CVE-2023-0386 | Kernel | Linux Kernel Improper Ownership Management Vulnerability | |
| 2025-04-09 | CVE-2024-53150 | Kernel | Linux Kernel Out-of-Bounds Read Vulnerability | |
| 2025-04-09 | CVE-2024-53197 | Kernel | Linux Kernel Out-of-Bounds Access Vulnerability | |
| 2025-03-04 | CVE-2024-50302 | Kernel | Linux Kernel Use of Uninitialized Resource Vulnerability | |
| 2025-02-05 | CVE-2024-53104 | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | |
| 2024-09-09 | CVE-2017-1000253 | Kernel | Linux Kernel PIE Stack Buffer Corruption Vulnerability | Known |
| 2024-08-21 | CVE-2022-0185 | Kernel | Linux Kernel Heap-Based Buffer Overflow Vulnerability | |
| 2024-06-26 | CVE-2022-2586 | Kernel | Linux Kernel Use-After-Free Vulnerability | |
| 2024-05-30 | CVE-2024-1086 | Kernel | Linux Kernel Use-After-Free Vulnerability | Known |
| 2023-05-12 | CVE-2014-0196 | Kernel | Linux Kernel Race Condition Vulnerability | |
| 2023-05-12 | CVE-2010-3904 | Kernel | Linux Kernel Improper Input Validation Vulnerability | |
| 2023-03-30 | CVE-2023-0266 | Kernel | Linux Kernel Use-After-Free Vulnerability | |
| 2022-10-20 | CVE-2021-3493 | Kernel | Linux Kernel Privilege Escalation Vulnerability | |
| 2022-09-15 | CVE-2013-6282 | Kernel | Linux Kernel Improper Input Validation Vulnerability |
CVEs in the news
Timeline (last 30 days)
- Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords — Cybersecurity News, 2026-10-16
- Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts — Cybersecurity News, 2026-10-16
- Linus Torvalds Reveals Claude Code Wrote Linux Kernel Patches and Test Programs — Cybersecurity News, 2026-10-16
- AI-Powered Espionage Campaign Targets Government Linux Infrastructure — Unit 42, 2026-10-15
- Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory — The Hacker News +3 sources, 2026-10-15
- Fake Arch Linux packages push malware with root privileges — BleepingComputer +1 sources, 2026-10-15
- PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape — Cybersecurity News, 2026-10-14
- AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host — The Hacker News +1 sources, 2026-10-14
- Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access — The Hacker News, 2026-10-09
- OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing — Help Net Security, 2026-10-07
- Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan — The Hacker News, 2026-10-06
- New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic — Infosecurity Magazine, 2026-10-05
- Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws — SecurityWeek, 2026-10-05
- ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure — FortiGuard Labs +1 sources, 2026-10-05
- Malicious Linux Implants Mimic Asian Mail Security Products — Dark Reading, 2026-10-02
- New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses — The Hacker News, 2026-09-29
- New Spectre v2 attack variant leaks Linux root password hash in minutes — BleepingComputer, 2026-09-29
- No MDM for Linux? A 68-line Elastic workflow keeps every endpoint's config current — Elastic Security Labs, 2026-09-29
- CISA BOD 26-04 Timelines for Three Linux Kernel CVEs — Qualys Threat Research, 2026-09-27
- Decades-old file security flaws found in Android, Linux, macOS, and Windows — The Register, 2026-09-24
- CISA BOD 26-04 Timelines for Three Linux Kernel CVEs — Qualys Threat Research +1 sources, 2026-09-23