FreeBSD

Products

Exploited and recent CVEs

• CVE-2026-101311 High 7.0 Multiple vulnerabilities in bhyve device models 0.1%
• CVE-2026-101310 High 7.0 Multiple vulnerabilities in bhyve device models 0.1%
• CVE-2026-101309 High 7.0 Multiple vulnerabilities in bhyve device models 0.1%
• CVE-2026-101308 Medium 5.5 TOCTOU race between sound(4) buffer resizing and mmap <0.1%
• CVE-2026-101307 High 8.2 Remotely triggerable buffer overflow in tcp_rack 0.3%
• CVE-2026-101303 High 7.5 IPv6 UDP sendto(2) bypasses jail loopback restriction 0.2%
• CVE-2026-101302 Medium 6.5 Remote DoS via receive-side kernel TLS 0.2%
• CVE-2026-101306 Critical 9.8 Multiple jail filesystem root escapes 0.3%
• CVE-2026-101305 High 8.8 Multiple jail filesystem root escapes 0.2%
• CVE-2026-101304 High 7.1 Multiple jail filesystem root escapes 0.1%
• CVE-2026-58100 High 7.0 Memory safety bugs in kqueue copy-on-fork implementation 0.1%
• CVE-2026-58099 High 7.0 Memory safety bugs in kqueue copy-on-fork implementation 0.1%
• CVE-2026-58098 High 8.4 Heap out-of-bounds access in semop(2) 0.1%
• CVE-2026-58094 High 7.8 TOCTOU race in POSIX shared memory large page configuration 0.1%
• CVE-2026-58093 High 7.0 Kernel use-after-free via tty ioctls <0.1%
• CVE-2026-58097 High 7.8 ppp(8): missing length validation in mp_SetEnddisc() 0.2%
• CVE-2026-58096 High 8.8 ppp(8): missing length validation in LcpDecodeConfig() 0.6%
• CVE-2026-58095 High 8.8 ppp(8): incorrect length calculation in mp_Enddisc() 0.6%
• CVE-2026-58092 High 8.1 Unauthorized credential switching 0.4%
• CVE-2026-58091 High 7.8 Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl 0.2%
• CVE-2026-58090 High 7.8 Use-after-free in unix SOCK_STREAM message handling 0.2%
• CVE-2026-58089 High 7.8 hwpmc fails to detach PMCs during exec credential transitions 0.1%
• CVE-2026-58088 High 7.4 Race condition in ELF core dump segment counting 0.1%
• CVE-2026-58087 High 7.8 Heap out-of-bounds access in semctl(2) 0.2%
• CVE-2026-58086 High 8.1 ktrace(2) privilege incorrectly validated in jails 0.4%
• CVE-2026-58085 High 7.5 Missing MAC validation in wg(4) packet decryption 0.3%
• CVE-2026-58084 Medium 5.5 Kernel stack disclosure via timer_settime(2) 0.1%
• CVE-2026-58083 High 8.4 Use-after-free in kqueue copy-on-fork 0.2%
• CVE-2026-58082 Critical 9.8 Stack based buffer overflow in iconv(3) 0.5%
• CVE-2026-58081 Critical 9.8 Heap based buffer overflow in iconv(3) 0.5%