In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in __xfrm_policy_check() T
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2 fix problems with __nfs42_ssc_open A desti
In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix metadata dst->dev xmit null point
In the Linux kernel, the following vulnerability has been resolved: ice: xsk: prohibit usage of non-balanced queue id
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_R
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tproxy: restrict to prerouting hook
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix possible memory leak in btrfs_get_dev_ar
In the Linux kernel, the following vulnerability has been resolved: bootmem: remove the vmemmap pages from kmemleak in
In the Linux kernel, the following vulnerability has been resolved: loop: Check for overflow while configuring loop Th
In the Linux kernel, the following vulnerability has been resolved: mm/mprotect: only reference swap pfn page if type m
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmd_ioctl_dm_op(
In the Linux kernel, the following vulnerability has been resolved: md: call __md_stop_writes in md_stop From the link
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_e
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in ste
In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set the DMA mask for the udmabuf device (v
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The e
In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix memory leak in hidraw_release() F
In the Linux kernel, the following vulnerability has been resolved: fbdev: fb_pm2fb: Avoid potential divide by zero err
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix broken touch
In the Linux kernel, the following vulnerability has been resolved: skmsg: Fix wrong last sg check in sk_msg_recvmsg()
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix a potential gpu_metrics_table memor
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit. While r
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_microcode interface
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_xxxx interfaces for
In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Fix incorrect assignment of signe
In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference in remove if xHC
In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix null pointer dereference Asus chrome
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath cre
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix netdevice reference leaks in attach_
In the Linux kernel, the following vulnerability has been resolved: kcm: fix strp_init() order and cleanup strp_init()
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Fix RTAS MSR[HV] handling for Cell T
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - wake up after clearing IFORCE_XMIT_
In the Linux kernel, the following vulnerability has been resolved: iio: light: cm3605: Fix an error handling path in c
In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix memory leak in firmware upload
In the Linux kernel, the following vulnerability has been resolved: binder: fix alloc->vma_vm_mm null-ptr dereference
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix obscure lockdep violation for udc_
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if
In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: add sanity check for gsm->receive in gs
In the Linux kernel, the following vulnerability has been resolved: cifs: fix small mempool leak in SMB2_negotiate() I
In the Linux kernel, the following vulnerability has been resolved: media: mceusb: Use new usb_control_msg_*() routines
In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Autom
The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ paramete
In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in nd_label_data
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblock_phys_alloc
In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: Add NULL check in sma1307_setting_lo
In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is
In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUG_ON by blocking retries on fai
In the Linux kernel, the following vulnerability has been resolved: dm: fix unconditional IO throttle caused by REQ_PRE
In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix access outside of user given buffe
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid c
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started