By year
99
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited Linux flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2026-46300 Linux Kernel Missing Initialization of a VariableExploited since Oct 28, 2026 · CVSS 7.8
- CVE-2025-39964 Linux Kernel Race ConditionExploited since Sep 18, 2026 · CVSS 7.8
- CVE-2026-53266 Linux Kernel Out-of-Bounds WriteExploited since Sep 18, 2026 · CVSS 8.8
- CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional ConditionsExploited since Sep 18, 2026 · CVSS 9.8
- CVE-2026-53362 Linux Kernel UnspecifiedExploited since Aug 27, 2026 · CVSS 7.8
- CVE-2022-0995 Linux Kernel Out-of-Bounds WriteExploited since Aug 26, 2026 · CVSS 7.8
- CVE-2022-0492 Linux Kernel Improper AuthenticationExploited since Jun 2, 2026 · CVSS 7.8
- CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between SpheresExploited since May 1, 2026 · CVSS 7.8
- CVE-2018-14634 Linux Kernel Integer OverflowExploited since Jan 26, 2026 · CVSS 7.8
- CVE-2021-22555 Linux Kernel Heap Out-of-Bounds WriteExploited since Oct 6, 2025 · CVSS 8.3
- CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race ConditionExploited since Sep 4, 2025 · CVSS 7.8
- CVE-2023-0386 Linux Kernel Improper Ownership ManagementExploited since Jun 17, 2025 · CVSS 7.8
- CVE-2024-53150 Linux Kernel Out-of-Bounds ReadExploited since Apr 9, 2025 · CVSS 7.1
- CVE-2024-53197 Linux Kernel Out-of-Bounds AccessExploited since Apr 9, 2025 · CVSS 7.8
- CVE-2024-50302 Linux Kernel Use of Uninitialized ResourceExploited since Mar 4, 2025 · CVSS 5.5
- CVE-2024-53104 Linux Kernel Out-of-Bounds WriteExploited since Feb 5, 2025 · CVSS 7.8
- CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability Exploited since Sep 9, 2024 · ransomware · CVSS 7.8
- CVE-2022-0185 Linux Kernel Heap-Based Buffer OverflowExploited since Aug 21, 2024 · CVSS 8.4
- CVE-2022-2586 Linux Kernel Use-After-FreeExploited since Jun 26, 2024 · CVSS 5.3
- CVE-2024-1086 Linux Kernel Use-After-FreeExploited since May 30, 2024 · ransomware · CVSS 7.8
- CVE-2010-3904 Linux Kernel Improper Input ValidationExploited since May 12, 2023 · CVSS 7.8
- CVE-2014-0196 Linux Kernel Race ConditionExploited since May 12, 2023 · CVSS 5.5
- CVE-2023-0266 Linux Kernel Use-After-FreeExploited since Mar 30, 2023 · CVSS 7.9
- CVE-2021-3493 Linux Kernel Privilege EscalationExploited since Oct 20, 2022 · CVSS 8.8
- CVE-2013-6282 Linux Kernel Improper Input ValidationExploited since Sep 15, 2022 · CVSS 8.8
- CVE-2013-2596 Linux Kernel Integer OverflowExploited since Sep 15, 2022 · CVSS 7.8
- CVE-2013-2094 Linux Kernel Privilege EscalationExploited since Sep 15, 2022 · CVSS 8.4
- CVE-2014-3153 Linux Kernel Privilege EscalationExploited since May 25, 2022 · CVSS 7.8
- CVE-2022-0847 Linux Kernel Privilege EscalationExploited since Apr 25, 2022 · CVSS 7.8
- CVE-2021-22600 Linux Kernel Privilege EscalationExploited since Apr 11, 2022 · CVSS 6.6
- CVE-2016-5195 Linux Kernel Race ConditionExploited since Mar 3, 2022 · CVSS 7
- CVE-2019-13272 Linux Kernel Improper Privilege ManagementExploited since Dec 10, 2021 · CVSS 7.8
Latest high and critical flaws
- CVE-2026-99083 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5_authenticate() In krb5_authenticate(), out_lenHigh 8.8 · Oct 23, 2026
- CVE-2026-99082 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cacheHigh 8.8 · Oct 23, 2026
- CVE-2026-99081 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small packets Stefan Fleischmann reported IntelHigh 7.5 · Oct 23, 2026
- CVE-2026-99079 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on refill retry When an XDP redirect to an AF_Critical 9.8 · Oct 23, 2026
- CVE-2026-99078 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF_XDP on a stridinCritical 9.8 · Oct 23, 2026
- CVE-2026-99077 In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation NeeHigh 7.4 · Oct 23, 2026
- CVE-2026-99064 In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso_v4_skbuff_delattr() removes High 8.1 · Oct 23, 2026
- CVE-2026-99059 In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads beHigh 7.7 · Oct 23, 2026
- CVE-2026-99056 In the Linux kernel, the following vulnerability has been resolved: strparser: make sure __strp_recv isn't running before tearing down the parser The comment High 7.8 · Oct 23, 2026
- CVE-2026-99054 In the Linux kernel, the following vulnerability has been resolved: tipc: destroy topsrv workqueues before closing connections tipc_topsrv_stop() closed subscHigh 7.8 · Oct 23, 2026
- CVE-2026-99053 In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name tipc_node_find_by_name() returns a nodeHigh 7.8 · Oct 23, 2026
- CVE-2026-99051 In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverity_info __fsverity_get_info() calls rhashtHigh 7.8 · Oct 23, 2026
- CVE-2026-99050 In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpio_mpsse_irq_enable() arms the polHigh 7.8 · Oct 23, 2026
- CVE-2026-99046 In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completioHigh 7.5 · Oct 23, 2026
- CVE-2026-99042 In the Linux kernel, the following vulnerability has been resolved: io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 io_connect_bpf_populHigh 8.4 · Oct 23, 2026
- CVE-2026-99032 In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smc_getname smc_getname() dereferences smc->clcsock wHigh 7.8 · Oct 23, 2026
- CVE-2026-99030 In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() When skb_copy_and_csum_biHigh 7.5 · Oct 23, 2026
- CVE-2026-99018 In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIG_SHADOW_CALHigh 7.8 · Oct 23, 2026
- CVE-2026-99017 In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE errata_probe_ghostwriteHigh 7 · Oct 23, 2026
- CVE-2026-99016 In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the atomic access access_ok() checks untagged_High 7.8 · Oct 23, 2026
- CVE-2026-99014 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix command skb lifetime during scan setup During PA sync scan setup,High 7.8 · Oct 23, 2026
- CVE-2026-99013 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Reject concurrent BIS listener setup iso_sock_listen() drops the socket loHigh 7.8 · Oct 23, 2026
- CVE-2026-99012 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent connect calls iso_sock_connect() checks the socket stHigh 7.8 · Oct 23, 2026
- CVE-2026-99011 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() sco_recv_scodata() High 7.1 · Oct 23, 2026
- CVE-2026-99006 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec array boundary It is possible for eb_relocate_parsHigh 7.8 · Oct 23, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.