In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refc
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brc
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_mds_auth_match() We
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfs_fiemap(
In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix resetting of tracepoints If a
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Add NULL check in winwing_init_led()
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configu
In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of th
In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining L
In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot atte
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is val
In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2cap
In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc() in eventlog/acpi.c The fo
In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle a symlink read error correctly Patch
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: smc: Handle missing SCM device
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtv_mux_sto
In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_r
In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible B
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix possible crash when setting up bs
In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle errors that nilfs_prepare_chunk() ma
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump()
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was
In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsock
In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With
In the Linux kernel, the following vulnerability has been resolved: mptcp: handle fastopen disconnect correctly Syzbot
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent reg-wait speculations With *ENTE
In the Linux kernel, the following vulnerability has been resolved: ptr_ring: do not block hard interrupts in ptr_ring_
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmaster_
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: unregister wiphy only if it has bee
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: chan: fix soft lockup in rtw89_entity_
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: check for NULL in btrtl_setup_rea
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer derefe
In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft l
In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address chan
In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary co
SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient
There is a SQL injection issue in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to ove
A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local
A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as r
A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack
MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain te
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 169,588 CVE records rated MEDIUM in our database. Of these, 103 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started