https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-45489.htmlhttps://patchthecve.com/cve/CVE-2021-45489.htmlWed, 17 Jun 2026 04:13:29 +0000HIGH 7.5: In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.https://patchthecve.com/cve/CVE-2021-45488.htmlhttps://patchthecve.com/cve/CVE-2021-45488.htmlWed, 17 Jun 2026 04:13:29 +0000HIGH 7.5: In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.https://patchthecve.com/cve/CVE-2021-45487.htmlhttps://patchthecve.com/cve/CVE-2021-45487.htmlWed, 17 Jun 2026 04:13:29 +0000HIGH 7.5: In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.https://patchthecve.com/cve/CVE-2021-45484.htmlhttps://patchthecve.com/cve/CVE-2021-45484.htmlWed, 17 Jun 2026 04:13:29 +0000HIGH 7.5: In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.https://patchthecve.com/cve/CVE-2020-26139.htmlhttps://patchthecve.com/cve/CVE-2020-26139.htmlWed, 17 Jun 2026 03:07:39 +0000MEDIUM 5.3: An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients andhttps://patchthecve.com/cve/CVE-2012-5365.htmlhttps://patchthecve.com/cve/CVE-2012-5365.htmlTue, 16 Jun 2026 23:46:44 +0000HIGH 7.5: The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.https://patchthecve.com/cve/CVE-2012-5363.htmlhttps://patchthecve.com/cve/CVE-2012-5363.htmlTue, 16 Jun 2026 23:46:44 +0000HIGH 7.5: The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2011-2393.https://patchthecve.com/cve/CVE-2011-2480.htmlhttps://patchthecve.com/cve/CVE-2011-2480.htmlTue, 16 Jun 2026 23:31:25 +0000HIGH 7.5: Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the