Operating systems: vulnerabilities and fixes

Windows, Linux, macOS, Android and iOS vulnerabilities and the updates that fix them. 867 CVEs tracked.

Operating systems has 867 tracked vulnerabilities, 95 critical and 13 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 605. Most recent: 2026-10-23. Highest priority: CVE-2015-3306 (score 100/100).

• CVE-2015-3306 CRITICAL 10.0 EXPLOITED MITIGATE MITIGATE ProFTPD Improper Access Control Vulnerability
• CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2015-5477 HIGH 7.5 EXPLOITED UPGRADE MITIGATE ISC BIND Data Processing Errors Vulnerability
• CVE-2026-65400 CRITICAL 9.8 EXPLOITED UPGRADE Apple macOS Improper Authentication Vulnerability
• CVE-2022-0995 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2026-85880 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-96951 HIGH 8.8 EXPLOITED MITIGATE UPGRADE Microsoft Windows Command Injection Vulnerability
• CVE-2026-86950 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Apple Multiple Products Out-of-Bounds Write Vulnerability
• CVE-2025-39964 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Race Condition Vulnerability
• CVE-2026-53266 HIGH 8.8 EXPLOITED UPGRADE Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2026-53362 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Unspecified Vulnerability
• CVE-2026-58704 HIGH 8.8 EXPLOITED MITIGATE Google Pixel Improper Authorization Vulnerability
• CVE-2026-59124 CRITICAL 9.8 UPGRADE Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized at
• CVE-2026-81963 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Link Following Vulnerability
• CVE-2026-47429 CRITICAL 9.8 UPGRADE Vitest is a testing framework powered by Vite
• CVE-2019-15598 CRITICAL 9.8 UPGRADE A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able t
• CVE-2023-4050 HIGH 7.5 UPGRADE MITIGATE In some cases, an untrusted input stream was copied to a stack buffer without checking its size
• CVE-2023-2828 HIGH 7.5 UPGRADE MITIGATE Every `named` instance configured to run as a recursive resolver maintains a cache database holding the respon
• CVE-2026-62873 CRITICAL 9.8 MITIGATE Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker
• CVE-2023-29531 CRITICAL 9.8 UPGRADE UPGRADE An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption an
• CVE-2026-50289 HIGH 8.8 UPGRADE systeminformation is a System and OS information library for node.js
• CVE-2026-59864 CRITICAL 9.3 Kiota is an OpenAPI based HTTP Client code generator
• CVE-2026-63808 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in ex
• CVE-2023-22795 HIGH 7.5 UPGRADE MITIGATE A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-M
• CVE-2023-28319 HIGH 7.5 UPGRADE UPGRADE A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH ser
• CVE-2023-2911 HIGH 7.5 UPGRADE MITIGATE If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes
• CVE-2023-29542 CRITICAL 9.8 UPGRADE UPGRADE A newline in a filename could have been used to bypass the file extension security mechanisms that replace mal
• CVE-2026-64439 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead impl
• CVE-2023-27530 HIGH 7.5 UPGRADE MITIGATE A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME
• CVE-2026-43682 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-64695 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-64696 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-65590 CRITICAL 9.8 UPGRADE n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in
• CVE-2023-27535 MEDIUM 5.9 UPGRADE MITIGATE An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can r
• CVE-2023-27536 MEDIUM 5.9 UPGRADE MITIGATE An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse p
• CVE-2023-28321 MEDIUM 5.9 UPGRADE MITIGATE An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wil
• CVE-2026-20272 CRITICAL 9.8 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-28982 CRITICAL 9.8 UPGRADE A race condition was addressed with improved locking
• CVE-2026-39873 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-43694 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-43710 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-43748 CRITICAL 9.8 UPGRADE An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2026-43757 CRITICAL 9.8 UPGRADE An out-of-bounds read was addressed with improved bounds checking
• CVE-2026-43764 CRITICAL 9.8 UPGRADE An integer overflow was addressed with improved input validation
• CVE-2026-43773 CRITICAL 9.8 UPGRADE An out-of-bounds read was addressed with improved bounds checking
• CVE-2026-43793 CRITICAL 9.8 UPGRADE An issue existed in the handling of environment variables
• CVE-2026-43802 CRITICAL 9.8 UPGRADE An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2026-43809 CRITICAL 9.8 UPGRADE An out-of-bounds read was addressed with improved bounds checking
• CVE-2026-64694 CRITICAL 9.8 UPGRADE An integer overflow was addressed with improved input validation
• CVE-2026-64698 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-64703 CRITICAL 9.8 UPGRADE A use after free issue was addressed with improved memory management
• CVE-2026-64731 CRITICAL 9.8 UPGRADE A path handling issue was addressed with improved validation
• CVE-2026-64738 CRITICAL 9.8 UPGRADE A permissions issue was addressed with additional restrictions
• CVE-2026-28911 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-43750 CRITICAL 9.8 UPGRADE A buffer overflow was addressed with improved bounds checking
• CVE-2026-43779 CRITICAL 9.8 UPGRADE A logic issue was addressed with improved restrictions
• CVE-2026-63830 CRITICAL 9.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG tr
• CVE-2022-43552 MEDIUM 5.9 UPGRADE UPGRADE A use after free vulnerability exists in curl <7.87.0
• CVE-2023-23916 MEDIUM 6.5 UPGRADE MITIGATE An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "ch
• CVE-2023-28320 MEDIUM 5.9 UPGRADE UPGRADE A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backend
• CVE-2026-28316 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to pri
• CVE-2026-49481 CRITICAL 9.6 UpSnap is a wake on lan web app
• CVE-2026-56196 HIGH 8.8 UPGRADE Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
• CVE-2026-64691 CRITICAL 9.8 UPGRADE A buffer overflow was addressed with improved size validation
• CVE-2026-73414 CRITICAL 9.2 Shescape is a simple shell escape library for JavaScript
• CVE-2026-56197 HIGH 8.8 UPGRADE Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center al
• CVE-2026-59133 HIGH 8.8 UPGRADE Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized
• CVE-2026-64697 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-64704 CRITICAL 9.8 UPGRADE A type confusion issue was addressed with improved memory handling
• CVE-2026-65768 HIGH 8.8 UPGRADE Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android
• CVE-2026-0163 CRITICAL 9.8 MITIGATE In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free
• CVE-2026-45799 HIGH 7.5 UPGRADE Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java
• CVE-2026-49179 HIGH 8.8 UPGRADE UPGRADE Improper neutralization of special elements used in a command ('command injection') in Windows Active Director
• CVE-2026-53412 CRITICAL 9.8 UPGRADE UPGRADE Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SD
• CVE-2026-62785 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized atta
• CVE-2026-62795 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to exec
• CVE-2026-63093 HIGH 8.8 UPGRADE Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to ach
• CVE-2026-64702 CRITICAL 9.8 UPGRADE An access issue was addressed with additional sandbox restrictions
• CVE-2023-37202 HIGH 8.8 UPGRADE UPGRADE Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be s
• CVE-2023-37211 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12
• CVE-2026-114357 CRITICAL 9.3 Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS6
• CVE-2026-67599 HIGH 7.2 ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticat
• CVE-2026-113263 CRITICAL 9.6 UPGRADE Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to pote
• CVE-2026-14371 HIGH 8.8 The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gate
• CVE-2026-43715 HIGH 8.8 UPGRADE UPGRADE A use-after-free issue was addressed with improved memory management
• CVE-2026-65767 HIGH 8.8 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for An
• CVE-2026-69326 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
• CVE-2026-69521 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network
• CVE-2026-96222 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke
• CVE-2023-25734 HIGH 8.1 UPGRADE UPGRADE After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a r
• CVE-2026-20263 HIGH 8.6 MITIGATE A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow
• CVE-2026-43760 HIGH 8.6 UPGRADE An access issue was addressed with improved access restrictions
• CVE-2026-56169 HIGH 8.1 UPGRADE Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a net
• CVE-2026-58617 HIGH 8.1 UPGRADE Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges
• CVE-2026-64312 HIGH 7.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non
• CVE-2026-70386 HIGH 8.5 Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authori
• CVE-2026-98490 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper U
• CVE-2026-98548 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a
• CVE-2026-98959 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xa
• CVE-2026-99078 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer relea
• CVE-2026-99079 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer relea
• CVE-2023-32214 HIGH 7.5 UPGRADE UPGRADE Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note:
• CVE-2026-18907 HIGH 7.5 Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write
• CVE-2026-28302 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to pri
• CVE-2026-28304 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arb
• CVE-2026-28305 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to rem
• CVE-2026-28308 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to rem
• CVE-2026-58529 HIGH 7.1 UPGRADE Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose i
• CVE-2026-58595 HIGH 8.1 UPGRADE Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized atta
• CVE-2026-65802 HIGH 7.4 UPGRADE External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclos
• CVE-2026-98432 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an
• CVE-2026-113092 HIGH 8.8 UPGRADE Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to
• CVE-2026-113099 HIGH 8.8 UPGRADE Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote at
• CVE-2026-114355 HIGH 8.6 OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9
• CVE-2026-15788 HIGH 7.5 UPGRADE BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS di
• CVE-2026-20268 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20269 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20270 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20271 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20273 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-49004 MEDIUM 6.5 The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection
• CVE-2026-69363 HIGH 8.0 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over
• CVE-2026-83862 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac
• CVE-2023-28322 LOW 3.7 UPGRADE MITIGATE An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might err
• CVE-2023-29536 HIGH 8.8 UPGRADE UPGRADE An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled me
• CVE-2023-29539 HIGH 8.8 UPGRADE UPGRADE When handling the filename directive in the Content-Disposition header, the filename would be truncated if the
• CVE-2023-29550 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
• CVE-2023-37207 MEDIUM 6.5 UPGRADE UPGRADE A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external
• CVE-2026-113252 CRITICAL 9.6 UPGRADE Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote atta
• CVE-2026-113283 CRITICAL 9.6 UPGRADE Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote
• CVE-2026-17545 HIGH 7.5 UPGRADE On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, C
• CVE-2026-17676 CRITICAL 9.6 UPGRADE Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta
• CVE-2026-17691 CRITICAL 9.6 UPGRADE Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to p
• CVE-2026-20267 CRITICAL 9.0 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-28312 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by a privilege escalation vulnerability
• CVE-2026-28314 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account ta
• CVE-2026-28321 CRITICAL 9.1 UPGRADE SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read an
• CVE-2026-43777 HIGH 7.5 UPGRADE This issue was addressed with improved input validation
• CVE-2026-56623 HIGH 7.1 UPGRADE Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for clien
• CVE-2026-69733 HIGH 7.8 UPGRADE UPGRADE Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
• CVE-2026-76036 CRITICAL 9.6 UPGRADE Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to ex
• CVE-2026-85790 MEDIUM 5.9 UPGRADE UPGRADE Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
• CVE-2023-25747 HIGH 7.5 UPGRADE A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API b
• CVE-2023-4049 MEDIUM 5.9 UPGRADE MITIGATE Race conditions in reference counting code were found through code inspection
• CVE-2026-113169 CRITICAL 9.6 UPGRADE Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote att
• CVE-2026-113171 CRITICAL 9.6 UPGRADE Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker t
• CVE-2026-16881 HIGH 8.7 A code injection vulnerability exists in the LINE Android app prior to version 26.7.2
• CVE-2026-59117 HIGH 7.5 MITIGATE Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a netw
• CVE-2026-64313 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli m
• CVE-2026-113163 HIGH 8.8 UPGRADE Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to exe

FAQ

How do I fix Operating systems vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Operating systems being exploited right now?

Yes: 13 Operating systems CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Operating systems CVE should I patch first?

CVE-2015-3306 currently ranks highest (100/100): ProFTPD Improper Access Control Vulnerability.

Software in this group

People search for: windows, linux, ubuntu, android, ios, kernel.

← Back to latest CVEs