In the Linux kernel, the following vulnerability has been resolved: highmem: fix checks in __kmap_local_sched_{in,out}
In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpol_new leak in shared_policy_re
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: traverse devices under chunk_mutex in
In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidate_range_start/
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICR_CTLR.RWP polling It turns
In the Linux kernel, the following vulnerability has been resolved: gpio: Restrict usage of GPIO chip irq members befor
In the Linux kernel, the following vulnerability has been resolved: drm/panel: ili9341: fix optional regulator handling
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix unregistering of framebuffers without de
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix by adding FPU protection for d
In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO
In the Linux kernel, the following vulnerability has been resolved: powerpc: Fix virt_addr_valid() for 64-bit Book3E &
In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part Af
In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unma
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altr_tse_pcs function wh
In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereference in smc_pnet_f
In the Linux kernel, the following vulnerability has been resolved: block: null_blk: end timed out poll request When p
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmal
In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Fix out-of-bounds accesses in RX
In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix platform-device leak in
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix panic when growing a memfd_secret
In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling dev_set_n
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpu_metrics_table memor
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix some memory leaks in an error handlin
In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlie
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpu_metrics_table memor
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtio_
In the Linux kernel, the following vulnerability has been resolved: media: venus: vdec: fixed possible memory leak issu
In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix path_list memory leak Clang
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_us
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kca
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of
In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf->pagecount Syzbot has repor
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a memory leak in 'host1x_remove()'
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E
In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right b
In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc
In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: free before error exiting Fix leak
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: cirrusfb: check pixclock to avoid div
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix deadlock in concurrent rename whiteout a
In the Linux kernel, the following vulnerability has been resolved: powerpc/set_memory: Avoid spinlock recursion in cha
In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer derefer
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if t
HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lea
Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php.
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via n
Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via
Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via n
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cro
Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclos
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure v
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 169,588 CVE records rated MEDIUM in our database. Of these, 103 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started