# FreeBSD. Every CVE that names FreeBSD among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Stack buffer overflow via setcred(2)](https://agentprime.io/advisories/CVE-2026-45250.md) `CVE-2026-45250` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 21 May 2026 · Tags: Memory corruption - [Heap overflow in libnv](https://agentprime.io/advisories/CVE-2026-35547.md) `CVE-2026-35547` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption, CWE-130 - [Stack overflow via select() file descriptor set overflow](https://agentprime.io/advisories/CVE-2026-39457.md) `CVE-2026-39457` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption - [Remotely triggerable out-of-bounds heap write in dhclient](https://agentprime.io/advisories/CVE-2026-42512.md) `CVE-2026-42512` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption - [pf can overflow the stack parsing crafted SCTP packets](https://agentprime.io/advisories/CVE-2026-7164.md) `CVE-2026-7164` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 30 Apr 2026 · Tags: Denial of service, CWE-791 - [Local privilege escalation via execve()](https://agentprime.io/advisories/CVE-2026-7270.md) `CVE-2026-7270` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-783 - [Remote code execution via malicious DHCP options](https://agentprime.io/advisories/CVE-2026-42511.md) `CVE-2026-42511` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-149 - [Missing large page handling in pmap_pkru_update_range()](https://agentprime.io/advisories/CVE-2026-6386.md) `CVE-2026-6386` · CVE record: FreeBSD FreeBSD · CVSS 6.2 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Privilege escalation, Broken access control - [Kernel use-after-free bug in the TIOCNOTTY handler](https://agentprime.io/advisories/CVE-2026-5398.md) `CVE-2026-5398` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [pf silently ignores certain rules](https://agentprime.io/advisories/CVE-2026-4748.md) `CVE-2026-4748` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-480, CWE-754, CWE-1023 - [Remote code execution via RPCSEC_GSS packet validation](https://agentprime.io/advisories/CVE-2026-4747.md) `CVE-2026-4747` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Remote denial of service via null pointer dereference](https://agentprime.io/advisories/CVE-2026-4652.md) `CVE-2026-4652` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [TCP: remotely exploitable DoS vector (mbuf leak)](https://agentprime.io/advisories/CVE-2026-4247.md) `CVE-2026-4247` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service - [Local DoS and possible privilege escalation via routing sockets](https://agentprime.io/advisories/CVE-2026-3038.md) `CVE-2026-3038` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 9 Mar 2026 · Tags: Memory corruption - [blocklistd(8) socket leak](https://agentprime.io/advisories/CVE-2026-2261.md) `CVE-2026-2261` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 9 Mar 2026 · Tags: Denial of service - [Jail chroot escape via fd exchange with a different jail](https://agentprime.io/advisories/CVE-2025-15576.md) `CVE-2025-15576` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 9 Mar 2026 · Tags: Privilege escalation, CWE-488, CWE-790 - [Jail escape by a privileged user via nullfs](https://agentprime.io/advisories/CVE-2025-15547.md) `CVE-2025-15547` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 9 Mar 2026 · Tags: Privilege escalation - [ipfw denial of service](https://agentprime.io/advisories/CVE-2025-14769.md) `CVE-2025-14769` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 9 Mar 2026 · Tags: Memory corruption - [Remote code execution via ND6 Router Advertisements](https://agentprime.io/advisories/CVE-2025-14558.md) `CVE-2025-14558` · CVE record: FreeBSD FreeBSD · CVSS 7.2 High · Not analysed yet · Published 9 Mar 2026 · Tags: CWE-20 - [SO_REUSEPORT_LB breaks connect(2) for UDP sockets](https://agentprime.io/advisories/CVE-2025-24934.md) `CVE-2025-24934` · CVE record: FreeBSD FreeBSD · CVSS 5.4 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: CWE-488 - [Uninitialized kernel memory disclosure via ktrace(2)](https://agentprime.io/advisories/CVE-2025-0662.md) `CVE-2025-0662` · CVE record: FreeBSD FreeBSD · CVSS 4.9 Medium · Not analysed yet · Published 30 Jan 2025 · Tags: Memory corruption - [Unprivileged access to system files](https://agentprime.io/advisories/CVE-2025-0374.md) `CVE-2025-0374` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 30 Jan 2025 · Tags: Broken access control - [Buffer overflow in some filesystems via NFS](https://agentprime.io/advisories/CVE-2025-0373.md) `CVE-2025-0373` · CVE record: FreeBSD FreeBSD · CVSS 6.0 Medium · Not analysed yet · Published 30 Jan 2025 · Tags: Memory corruption - [Unbounded allocation in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-45289.md) `CVE-2024-45289` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-665 - [Unbounded allocation in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-39281.md) `CVE-2024-39281` · CVE record: FreeBSD FreeBSD · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-20 - [bhyve(8) NVMe driver to guest-induced infinite loops.](https://agentprime.io/advisories/CVE-2024-51566.md) `CVE-2024-51566` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1285 - [bhyve(8) hda driver buffer over-read](https://agentprime.io/advisories/CVE-2024-51565.md) `CVE-2024-51565` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption - [bhyve(8) infinite loop in the hda audio driver](https://agentprime.io/advisories/CVE-2024-51564.md) `CVE-2024-51564` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1285 - [bhyve(8) virtio_vq_recordon time-of-check to time-of-use race](https://agentprime.io/advisories/CVE-2024-51563.md) `CVE-2024-51563` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Race condition - [bhyve(8) nvme_opc_get_log_page buffer over-read](https://agentprime.io/advisories/CVE-2024-51562.md) `CVE-2024-51562` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption - [bhyve(8) out-of-bounds read access via XHCI emulation](https://agentprime.io/advisories/CVE-2024-41721.md) `CVE-2024-41721` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 20 Sept 2024 · Tags: Memory corruption - [umtx Kernel panic or Use-After-Free](https://agentprime.io/advisories/CVE-2024-43102.md) `CVE-2024-43102` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-911 - [bhyve(8) privileged guest escape via USB controller](https://agentprime.io/advisories/CVE-2024-32668.md) `CVE-2024-32668` · CVE record: FreeBSD FreeBSD · CVSS 8.2 High · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-193 - [Multiple issues in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-45063.md) `CVE-2024-45063` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption - [Multiple issues in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-43110.md) `CVE-2024-43110` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption - [Multiple issues in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-42416.md) `CVE-2024-42416` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-790, CWE-823 - [Multiple issues in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-8178.md) `CVE-2024-8178` · CVE record: FreeBSD FreeBSD · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-909 - [bhyve(8) privileged guest escape via TPM device passthrough](https://agentprime.io/advisories/CVE-2024-41928.md) `CVE-2024-41928` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-1285 - [Multiple vulnerabilities in libnv](https://agentprime.io/advisories/CVE-2024-45288.md) `CVE-2024-45288` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-170 - [Multiple vulnerabilities in libnv](https://agentprime.io/advisories/CVE-2024-45287.md) `CVE-2024-45287` · CVE record: FreeBSD FreeBSD · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption - [OpenSSH pre-authentication async signal safety issue](https://agentprime.io/advisories/CVE-2024-7589.md) `CVE-2024-7589` · CVE record: FreeBSD FreeBSD · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2024 · Tags: CWE-364 - [NFS client accepts file names containing path separators](https://agentprime.io/advisories/CVE-2024-6759.md) `CVE-2024-6759` · CVE record: FreeBSD FreeBSD · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2024 · Tags: Path traversal - [ktrace(2) fails to detach when executing a setuid binary](https://agentprime.io/advisories/CVE-2024-6760.md) `CVE-2024-6760` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2024 · Tags: Broken access control - [pf incorrectly matches different ICMPv6 states in the state table](https://agentprime.io/advisories/CVE-2024-6640.md) `CVE-2024-6640` · CVE record: FreeBSD FreeBSD · CVSS 6.3 Medium · Not analysed yet · Published 11 Aug 2024 · Tags: Broken access control - [Stack overflow in ping(8)](https://agentprime.io/advisories/CVE-2022-23093.md) `CVE-2022-23093` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Missing bounds check in 9p message handling](https://agentprime.io/advisories/CVE-2022-23092.md) `CVE-2022-23092` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Memory disclosure by stale virtual memory mapping](https://agentprime.io/advisories/CVE-2022-23091.md) `CVE-2022-23091` · CVE record: FreeBSD FreeBSD · CVSS 4.0 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Denial of service - [AIO credential reference count leak](https://agentprime.io/advisories/CVE-2022-23090.md) `CVE-2022-23090` · CVE record: FreeBSD FreeBSD · CVSS 7.7 High · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Out of bound read in elf_note_prpsinfo()](https://agentprime.io/advisories/CVE-2022-23089.md) `CVE-2022-23089` · CVE record: FreeBSD FreeBSD · CVSS 4.7 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [802.11 heap buffer overflow](https://agentprime.io/advisories/CVE-2022-23088.md) `CVE-2022-23088` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2024 · Tags: Code injection - [Bhyve e82545 device emulation out-of-bounds write](https://agentprime.io/advisories/CVE-2022-23087.md) `CVE-2022-23087` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [mpr/mps/mpt driver ioctl heap out-of-bounds write](https://agentprime.io/advisories/CVE-2022-23086.md) `CVE-2022-23086` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Potential jail escape vulnerabilities in netmap](https://agentprime.io/advisories/CVE-2022-23085.md) `CVE-2022-23085` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2024 · Tags: Memory corruption - [Potential jail escape vulnerabilities in netmap](https://agentprime.io/advisories/CVE-2022-23084.md) `CVE-2022-23084` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 15 Feb 2024 · Tags: Race condition - [jail(2) information leak](https://agentprime.io/advisories/CVE-2024-25941.md) `CVE-2024-25941` · CVE record: FreeBSD FreeBSD · CVSS 3.3 Low · Not analysed yet · Published 15 Feb 2024 - [bhyveload(8) host file access](https://agentprime.io/advisories/CVE-2024-25940.md) `CVE-2024-25940` · CVE record: FreeBSD FreeBSD · CVSS 6.3 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: Information disclosure - [NFS client data corruption and kernel memory disclosure](https://agentprime.io/advisories/CVE-2023-6660.md) `CVE-2023-6660` · CVE record: FreeBSD FreeBSD · No CVSS score · Not analysed yet · Published 13 Dec 2023 - [TCP spoofing vulnerability in pf(4)](https://agentprime.io/advisories/CVE-2023-6534.md) `CVE-2023-6534` · CVE record: FreeBSD FreeBSD · No CVSS score · Not analysed yet · Published 13 Dec 2023 - [Incorrect libcap_net limitation list manipulation](https://agentprime.io/advisories/CVE-2023-5978.md) `CVE-2023-5978` · CVE record: FreeBSD FreeBSD · No CVSS score · Not analysed yet · Published 8 Nov 2023 · Tags: Privilege escalation - [libc stdio buffer overflow](https://agentprime.io/advisories/CVE-2023-5941.md) `CVE-2023-5941` · CVE record: FreeBSD FreeBSD · No CVSS score · Not analysed yet · Published 8 Nov 2023 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .