In the Linux kernel, the following vulnerability has been resolved: gso: fix udp gso fraglist segmentation after pull f
In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 c
In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo o
In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blo
In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syz
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reserve space for inline xattr before attach
In the Linux kernel, the following vulnerability has been resolved: gfs2: fix double destroy_workqueue error When gfs2
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated cor
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_r
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: add missing locking in wedged_fi
In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow W
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to add interface to list twice w
In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash()
In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dump_mapping() accessing invalid
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't readahead the relocation inode on RST
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix array out-of-bound access in SoC
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid reading out of bounds when loadi
In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver
In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fix possible use after free in pxafb_
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] =====
In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per d
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 d
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf()
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Fix the KASAN report slab-out-o
In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_
In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_exten
In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off by one issue in alloc_flex_gd() Wesl
In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix UAF around queue destruction We curren
In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserr_io to avoid warning
In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability
In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when cop
In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping clean
In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processin
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thr
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is co
Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the j
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to
OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthentica
In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix off by one in get_rpi()
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps Lonial fo
In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method O
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomic_file in f2fs ioctl interf
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: set the cipher for secured NDP
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 149,356 CVE records rated HIGH in our database. Of these, 381 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started