Known Vulnerabilities for products from FreeBSD
Listed below are 20 of the newest known vulnerabilities associated with the vendor "FreeBSD".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110453 json | Not Provided | 2026-10-14 | 2026-10-19 | |
| CVE-2026-105429 json | Not Provided | 2026-10-14 | 2026-10-16 | |
| CVE-2026-101308 json | When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then ... | Not Provided | 2026-10-15 | 2026-10-19 |
| CVE-2026-101307 json | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the c... | Not Provided | 2026-10-15 | 2026-10-20 |
| CVE-2026-101306 json | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could cl... | Not Provided | 2026-10-15 | 2026-10-20 |
| CVE-2026-101305 json | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relativ... | Not Provided | 2026-10-15 | 2026-10-20 |
| CVE-2026-101304 json | When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit F... | Not Provided | 2026-10-15 | 2026-10-20 |
| CVE-2026-101303 json | The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to t... | Not Provided | 2026-10-15 | 2026-10-20 |
| CVE-2026-101302 json | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding... | Not Provided | 2026-10-15 | 2026-10-20 |
| CVE-2026-71490 json | Not Provided | 2026-10-15 | 2026-10-15 | |
| CVE-2026-63442 json | Not Provided | 2026-10-15 | 2026-10-16 | |
| CVE-2026-58395 json | Not Provided | 2026-10-15 | 2026-10-15 | |
| CVE-2026-58394 json | Not Provided | 2026-10-15 | 2026-10-15 | |
| CVE-2026-58393 json | Not Provided | 2026-10-15 | 2026-10-15 | |
| CVE-2026-58392 json | Not Provided | 2026-10-15 | 2026-10-15 | |
| CVE-2026-58391 json | Not Provided | 2026-10-15 | 2026-10-20 | |
| CVE-2026-58390 json | Not Provided | 2026-10-15 | 2026-10-20 | |
| CVE-2026-58100 json | kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a boun... | Not Provided | 2026-10-15 | 2026-10-19 |
| CVE-2026-58099 json | When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally t... | Not Provided | 2026-10-15 | 2026-10-19 |
| CVE-2026-58098 json | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the ... | Not Provided | 2026-10-15 | 2026-10-19 |
Known software with vulnerabilities from FreeBSD
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Freebsd | Aide | - |
| Application | Freebsd | Cvsweb | 2.0.4 |
| Application | Freebsd | Fetch | - |
| Operating System | Freebsd | Freebsd | - |
| Application | Freebsd | Freebsd | 10.0 |
| Application | Freebsd | Heimdal | - |
| Application | Freebsd | Ja-xklock | - |
| Application | Freebsd | Libarchive | - |
| Application | Freebsd | Name Server Daemon | - |
| Application | Freebsd | Slashem-tty | - |