Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

HIGH Severity CVEs

CVSS 7.0 – 8.9

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

143,102
Total
363
Known Exploited
Showing 73,421 of 143,102 total · Page 107/1469
7.8
CVE-2026-64469

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_thread_release() When a

7.8
CVE-2026-64468

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_free_transaction() In bi

8.8
CVE-2026-64467

In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 stride when cleaning up the

7.8
CVE-2026-64463

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port wi

7.0
CVE-2026-64460

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read erro

7.7
CVE-2026-64456

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at co

7.1
CVE-2026-64452

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path

7.8
CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: bound slave read/write to the ke

8.2
CVE-2026-64448

In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc[0] exemption to r

7.8
CVE-2026-64447

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after

8.8
CVE-2026-64445

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OO

8.1
CVE-2026-64444

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE

8.1
CVE-2026-64443

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in update_beacon_i

8.1
CVE-2026-64442

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in is

8.8
CVE-2026-64441

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie

8.1
CVE-2026-64440

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_handle

8.8
CVE-2026-64438

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf_d

8.8
CVE-2026-64437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock o

7.1
CVE-2026-64436

In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp stat

8.2
CVE-2026-64435

In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb_queue_len() readers on

8.8
CVE-2026-64434

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix UAF in channel timeout by hol

7.8
CVE-2026-64432

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in log

7.8
CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling post_write_mst_fixup() for inva

7.5
CVE-2026-64430

In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardi

7.8
CVE-2026-64423

In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table

7.1
CVE-2026-64422

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and M

7.0
CVE-2026-64420

In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe s

7.8
CVE-2026-64418

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with

7.5
CVE-2026-64414

In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports

7.0
CVE-2026-64413

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko

7.1
CVE-2026-64412

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-term

7.1
CVE-2026-64411

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before fi

8.8
CVE-2026-64408

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev

8.0
CVE-2026-64406

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_accept_dequeue() bt_accep

7.1
CVE-2026-64403

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before rea

7.8
CVE-2026-64402

In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sync_

7.8
CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registratio

8.6
CVE-2026-64400

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting

8.1
CVE-2026-64398

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTL_SET_ZERO_DA

8.8
CVE-2026-64396

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct file_lock in SMB2_LOCK def

7.5
CVE-2026-64395

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate ext

8.8
CVE-2026-64394

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SE

8.8
CVE-2026-64390

In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range loc

8.2
CVE-2026-64389

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating ses

7.8
CVE-2026-64388

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensi

8.8
CVE-2026-64382

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay

8.2
CVE-2026-64380

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix

7.1
CVE-2026-64379

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in

7.8
CVE-2026-64378

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount

7.8
CVE-2026-64375

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_

Frequently Asked Questions

What does HIGH severity mean for CVEs?

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

How many high severity CVEs exist?

There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize high severity vulnerabilities?

HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.

Detect HIGH Vulnerabilities

CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.

Get Started