# FreeBSD. Every CVE that names FreeBSD among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Multiple vulnerabilities in bhyve device models](https://agentprime.io/advisories/CVE-2026-101311.md) `CVE-2026-101311` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [Multiple vulnerabilities in bhyve device models](https://agentprime.io/advisories/CVE-2026-101310.md) `CVE-2026-101310` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Memory corruption, CWE-126 - [Multiple vulnerabilities in bhyve device models](https://agentprime.io/advisories/CVE-2026-101309.md) `CVE-2026-101309` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [TOCTOU race between sound(4) buffer resizing and mmap](https://agentprime.io/advisories/CVE-2026-101308.md) `CVE-2026-101308` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [Remotely triggerable buffer overflow in tcp_rack](https://agentprime.io/advisories/CVE-2026-101307.md) `CVE-2026-101307` · CVE record: FreeBSD FreeBSD · CVSS 8.2 High · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption - [IPv6 UDP sendto(2) bypasses jail loopback restriction](https://agentprime.io/advisories/CVE-2026-101303.md) `CVE-2026-101303` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-941 - [Remote DoS via receive-side kernel TLS](https://agentprime.io/advisories/CVE-2026-101302.md) `CVE-2026-101302` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption, CWE-193 - [Multiple jail filesystem root escapes](https://agentprime.io/advisories/CVE-2026-101306.md) `CVE-2026-101306` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-273, CWE-281 - [Multiple jail filesystem root escapes](https://agentprime.io/advisories/CVE-2026-101305.md) `CVE-2026-101305` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-273 - [Multiple jail filesystem root escapes](https://agentprime.io/advisories/CVE-2026-101304.md) `CVE-2026-101304` · CVE record: FreeBSD FreeBSD · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-273 - [Memory safety bugs in kqueue copy-on-fork implementation](https://agentprime.io/advisories/CVE-2026-58100.md) `CVE-2026-58100` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption, Race condition - [Memory safety bugs in kqueue copy-on-fork implementation](https://agentprime.io/advisories/CVE-2026-58099.md) `CVE-2026-58099` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Memory corruption - [Heap out-of-bounds access in semop(2)](https://agentprime.io/advisories/CVE-2026-58098.md) `CVE-2026-58098` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption - [TOCTOU race in POSIX shared memory large page configuration](https://agentprime.io/advisories/CVE-2026-58094.md) `CVE-2026-58094` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Race condition - [Kernel use-after-free via tty ioctls](https://agentprime.io/advisories/CVE-2026-58093.md) `CVE-2026-58093` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 26 Aug 2026 · Tags: Race condition, Memory corruption - [ppp(8): missing length validation in mp_SetEnddisc()](https://agentprime.io/advisories/CVE-2026-58097.md) `CVE-2026-58097` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption, CWE-130 - [ppp(8): missing length validation in LcpDecodeConfig()](https://agentprime.io/advisories/CVE-2026-58096.md) `CVE-2026-58096` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption, CWE-130 - [ppp(8): incorrect length calculation in mp_Enddisc()](https://agentprime.io/advisories/CVE-2026-58095.md) `CVE-2026-58095` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption - [Unauthorized credential switching](https://agentprime.io/advisories/CVE-2026-58092.md) `CVE-2026-58092` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass - [Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl](https://agentprime.io/advisories/CVE-2026-58091.md) `CVE-2026-58091` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption - [Use-after-free in unix SOCK_STREAM message handling](https://agentprime.io/advisories/CVE-2026-58090.md) `CVE-2026-58090` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption - [hwpmc fails to detach PMCs during exec credential transitions](https://agentprime.io/advisories/CVE-2026-58089.md) `CVE-2026-58089` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-273 - [Race condition in ELF core dump segment counting](https://agentprime.io/advisories/CVE-2026-58088.md) `CVE-2026-58088` · CVE record: FreeBSD FreeBSD · CVSS 7.4 High · Not analysed yet · Published 19 Aug 2026 · Tags: Race condition, Memory corruption - [Heap out-of-bounds access in semctl(2)](https://agentprime.io/advisories/CVE-2026-58087.md) `CVE-2026-58087` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [ktrace(2) privilege incorrectly validated in jails](https://agentprime.io/advisories/CVE-2026-58086.md) `CVE-2026-58086` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-273 - [Missing MAC validation in wg(4) packet decryption](https://agentprime.io/advisories/CVE-2026-58085.md) `CVE-2026-58085` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS - [Kernel stack disclosure via timer_settime(2)](https://agentprime.io/advisories/CVE-2026-58084.md) `CVE-2026-58084` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Use-after-free in kqueue copy-on-fork](https://agentprime.io/advisories/CVE-2026-58083.md) `CVE-2026-58083` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Stack based buffer overflow in iconv(3)](https://agentprime.io/advisories/CVE-2026-58082.md) `CVE-2026-58082` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Heap based buffer overflow in iconv(3)](https://agentprime.io/advisories/CVE-2026-58081.md) `CVE-2026-58081` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Kernel stack disclosure in 32-bit compatibility support](https://agentprime.io/advisories/CVE-2026-49425.md) `CVE-2026-49425` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Kernel stack disclosure in Linux compatibility layer](https://agentprime.io/advisories/CVE-2026-49424.md) `CVE-2026-49424` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Remote DOS via uninitialized memory access in KTLS receive](https://agentprime.io/advisories/CVE-2026-49423.md) `CVE-2026-49423` · CVE record: FreeBSD FreeBSD · CVSS 3.3 Low · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Incorrect audit records for ptrace(2) syscall requests](https://agentprime.io/advisories/CVE-2026-49426.md) `CVE-2026-49426` · CVE record: FreeBSD FreeBSD · CVSS 3.3 Low · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-223, CWE-224 - [posixshm: system calls can incorrectly free memory of largepage objects](https://agentprime.io/advisories/CVE-2026-49428.md) `CVE-2026-49428` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [posixshm: largepage shared memory objects not explicitly wired](https://agentprime.io/advisories/CVE-2026-49427.md) `CVE-2026-49427` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-826 - [Use-after-free in TCP RACK stack option handler](https://agentprime.io/advisories/CVE-2026-49422.md) `CVE-2026-49422` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [unlinkat(2) ignores AT_RESOLVE_BENEATH flag](https://agentprime.io/advisories/CVE-2026-49421.md) `CVE-2026-49421` · CVE record: FreeBSD FreeBSD · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-273 - [Buffer overflow in libalias RTSP handler](https://agentprime.io/advisories/CVE-2026-49420.md) `CVE-2026-49420` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Incorrect user validation in ZFS_IOC_SET_PROP ioctl](https://agentprime.io/advisories/CVE-2026-49431.md) `CVE-2026-49431` · CVE record: FreeBSD FreeBSD · CVSS 3.3 Low · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl](https://agentprime.io/advisories/CVE-2026-49430.md) `CVE-2026-49430` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl](https://agentprime.io/advisories/CVE-2026-49429.md) `CVE-2026-49429` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Local privilege escalation via execve(2) TOCTOU race](https://agentprime.io/advisories/CVE-2026-49415.md) `CVE-2026-49415` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Race condition - [Jail reference count underflow](https://agentprime.io/advisories/CVE-2026-49419.md) `CVE-2026-49419` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-911 - [Use-after-free in device pager page list](https://agentprime.io/advisories/CVE-2026-49418.md) `CVE-2026-49418` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption - [Integer overflow in vt(4) CONS_HISTORY ioctl](https://agentprime.io/advisories/CVE-2026-49416.md) `CVE-2026-49416` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 27 Jun 2026 · Tags: Memory corruption - [ASLR bypass for setuid executables via procctl(2)](https://agentprime.io/advisories/CVE-2026-49414.md) `CVE-2026-49414` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 27 Jun 2026 · Tags: CWE-179 - [Flaw in Linuxulator execution of setugid binaries](https://agentprime.io/advisories/CVE-2026-49413.md) `CVE-2026-49413` · CVE record: FreeBSD FreeBSD · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2026 · Tags: Privilege escalation - [Use-after-free bug in the IPV6_MSFILTER socket option handler](https://agentprime.io/advisories/CVE-2026-49412.md) `CVE-2026-49412` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 27 Jun 2026 · Tags: Memory corruption - [sigqueue(2) missing capability mode restriction](https://agentprime.io/advisories/CVE-2026-45259.md) `CVE-2026-45259` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 27 Jun 2026 · Tags: Privilege escalation - [Multiple vulnerabilities in the sound(4) mmap path](https://agentprime.io/advisories/CVE-2026-45258.md) `CVE-2026-45258` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 27 Jun 2026 · Tags: Memory corruption, CWE-681 - [Multiple vulnerabilities in the sound(4) mmap path](https://agentprime.io/advisories/CVE-2026-49417.md) `CVE-2026-49417` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 27 Jun 2026 · Tags: Memory corruption - [Arbitrary file overwrite via the KTLS receive path](https://agentprime.io/advisories/CVE-2026-45257.md) `CVE-2026-45257` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-123 - [Missing permission check in thr_kill2(2)](https://agentprime.io/advisories/CVE-2026-45256.md) `CVE-2026-45256` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation - [Incorrect libcap_net limitation list manipulation](https://agentprime.io/advisories/CVE-2026-45254.md) `CVE-2026-45254` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 21 May 2026 · Tags: Privilege escalation - [Remote code execution via installer Wi-Fi access point scans](https://agentprime.io/advisories/CVE-2026-45255.md) `CVE-2026-45255` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Command injection - [select(2) file descriptor set overflow causes stack overflow](https://agentprime.io/advisories/CVE-2026-39461.md) `CVE-2026-39461` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 21 May 2026 · Tags: Memory corruption - [Missing validation in ptrace(PT_SC_REMOTE)](https://agentprime.io/advisories/CVE-2026-45253.md) `CVE-2026-45253` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 21 May 2026 · Tags: Memory corruption - [Heap overflow in FUSE_LISTXATTR](https://agentprime.io/advisories/CVE-2026-45252.md) `CVE-2026-45252` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 21 May 2026 · Tags: Memory corruption - [Kernel use-after-free via file descriptor syscalls](https://agentprime.io/advisories/CVE-2026-45251.md) `CVE-2026-45251` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 21 May 2026 · Tags: Memory corruption Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .