Vulnerabilities
Fixed vulnerabilities
FreeBSD advisories whose fix is already in the FreeBSD snapshot that FreeSense builds from, and FreeSense bugs and issues that are closed.
Version
82 entries
EntryComponentStatusVersionsDate
Security reportfreesense#199Security audit 2026-10-17: captive portal file write, CSRF bypass, XML-RPC exec privilegeOpens on GitHubfreesenseClosedNot tied to a versionSecurity reportfreesense#194Security audit: CSRF gap on GET state change, legacy MD5 passwords, unsafe unserialize defaultsOpens on GitHubfreesenseClosedNot tied to a versionFreeBSD advisorySA-26:69.udpIPv6 UDP sendto(2) bypasses jail loopback restrictionCVE-2026-101303udpOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:68.opensslOut-of-bounds read in OpenSSL DTLS retransmissionCVE-2026-84782opensslOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:67.ktlsRemote DoS via receive-side kernel TLSCVE-2026-101302ktlsOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:66.jailMultiple jail filesystem root escapesCVE-2026-101304, CVE-2026-101305, CVE-2026-101306jailOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:65.kqueueMemory safety bugs in kqueue copy-on-fork implementationCVE-2026-58099, CVE-2026-58100kqueueOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:64.sysvsemHeap out-of-bounds access in semop(2)CVE-2026-58098sysvsemOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:63.posixshmTOCTOU race in POSIX shared memory large page configurationCVE-2026-58094posixshmOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:62.ttyKernel use-after-free via tty ioctlsCVE-2026-58093ttyOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:61.opensslMultiple vulnerabilities in OpenSSLCVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076opensslOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:60.pppMultiple vulnerabilities in ppp(8)CVE-2026-58095, CVE-2026-58096, CVE-2026-58097pppOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:59.mac_doUnauthorized credential switchingCVE-2026-58092mac_doOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:58.soundKernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctlCVE-2026-58091soundOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:57.unixUse-after-free in unix SOCK_STREAM message handlingCVE-2026-58090unixOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:56.hwpmchwpmc fails to detach PMCs during exec credential transitionsCVE-2026-58089hwpmcOpenauto1.0!Open1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:55.elfRace condition in ELF core dump segment countingCVE-2026-58088elfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:54.sysvsemHeap out-of-bounds access in semctl(2)CVE-2026-58087sysvsemFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:53.ktracektrace(2) privilege incorrectly validated in jailsCVE-2026-58086ktraceFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:52.if_wgMissing MAC validation in wg(4) packet decryptionCVE-2026-58085if_wgFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:51.ktimerKernel stack disclosure via timer_settime(2)CVE-2026-58084ktimerFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:50.kqueueUse-after-free in kqueue copy-on-forkCVE-2026-58083kqueueFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:49.iconvMultiple vulnerabilities in iconv(3)CVE-2026-58081, CVE-2026-58082iconvFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:48.compat32Kernel stack disclosure in 32-bit compatibility supportCVE-2026-49425kernel compat32Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:47.linuxKernel stack disclosure in Linux compatibility layerCVE-2026-49424linux(4)Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:46.ktlsRemote DOS via uninitialized memory access in KTLS receiveCVE-2026-49423ktlsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:45.auditIncorrect audit records for ptrace(2) syscall requestsCVE-2026-49426auditFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:44.posixshmMultiple vulnerabilities in POSIX largepage objectsCVE-2026-49427, CVE-2026-49428posixshmFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:43.tcpUse-after-free in TCP RACK stack option handlerCVE-2026-49422tcpFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:42.unlinkatunlinkat(2) ignores AT_RESOLVE_BENEATH flagCVE-2026-49421unlinkatFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:41.libaliasBuffer overflow in libalias RTSP handlerCVE-2026-49420libaliasFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:40.zfsMultiple vulnerabilities in OpenZFSCVE-2026-49429, CVE-2026-49430, CVE-2026-49431openzfsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:39.execveLocal privilege escalation via execve(2) TOCTOU raceCVE-2026-49415execveFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:38.jailJail reference count underflowCVE-2026-49419jailFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:37.vmUse-after-free in device pager page listCVE-2026-49418vmFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:36.ldnsInsufficient response validation in the ldns stub resolverCVE-2026-10846ldnsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:35.opensslMultiple vulnerabilities in OpenSSLCVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447opensslFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:34.vtInteger overflow in vt(4) CONS_HISTORY ioctlCVE-2026-49416vtFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:33.unboundMultiple vulnerabilities in unboundCVE-2026-32792, CVE-2026-33278, CVE-2026-40622, CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-42944, CVE-2026-42959, CVE-2026-42960, CVE-2026-44390, CVE-2026-44608unboundFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:32.elfASLR bypass for setuid executables via procctl(2)CVE-2026-49414kernelFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:31.arm64Arm CPU errata may bypass page table permission changesCVE-2025-10263arm64Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:30.linuxFlaw in Linuxulator execution of setugid binariesCVE-2026-49413linuxFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:29.ip6_multicastUse-after-free bug in the IPV6_MSFILTER socket option handlerCVE-2026-49412ip6_multicastFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:28.capsicumsigqueue(2) missing capability mode restrictionCVE-2026-45259capsicumFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:27.soundMultiple vulnerabilities in the sound(4) mmap pathCVE-2026-45258, CVE-2026-49417soundFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:26.ktlsArbitrary file overwrite via the KTLS receive pathCVE-2026-45257ktlsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:25.thrMissing permission check in thr_kill2(2)CVE-2026-45256thrFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:24.cap_netIncorrect libcap_net limitation list manipulationCVE-2026-45254libcap_netFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:23.bsdinstallRemote code execution via installer Wi-Fi access point scansCVE-2026-45255bsdinstallFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:22.libcasperselect(2) file descriptor set overflow causes stack overflowCVE-2026-39461libcasperFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:21.ptraceMissing validation in ptrace(PT_SC_REMOTE)CVE-2026-45253ptraceFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:20.fusefsHeap overflow in FUSE_LISTXATTRCVE-2026-45252fusefsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:19.fileKernel use-after-free via file descriptor syscallsCVE-2026-45251fileFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:18.setcredStack buffer overflow via setcred(2)CVE-2026-45250setcredFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:17.libnvHeap overflow in libnvCVE-2026-35547libnvFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:16.libnvStack overflow via select() file descriptor set overflowCVE-2026-39457libnvFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:15.dhclientRemotely triggerable out-of-bounds heap write in dhclientCVE-2026-42512dhclientFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:14.pfpf can overflow the stack parsing crafted SCTP packetsCVE-2026-7164pfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:13.execLocal privilege escalation via execve()CVE-2026-7270execve(2)Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:12.dhclientRemote code execution via malicious DHCP optionsCVE-2026-42511dhclientFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:11.amd64Missing large page handling in pmap_pkru_update_range()CVE-2026-6386amd64Fixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:10.ttyKernel use-after-free bug in the TIOCNOTTY handlerCVE-2026-5398ttyFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:08.rpcsec_gssRemote code execution via RPCSEC_GSS packet validationCVE-2026-4747rpcsec_gssFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:07.nvmfRemote denial of service via null pointer dereferenceCVE-2026-4652nvmfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:06.tcpTCP: remotely exploitable DoS vector (mbuf leak)CVE-2026-4247tcpFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:09.pfpf silently ignores certain rulesCVE-2026-4748pfFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:05.routeLocal DoS and possible privilege escalation via routing socketsCVE-2026-3038routeFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:04.jailJail chroot escape via fd exchange with a different jailCVE-2025-15576jailFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:02.jailJail escape by a privileged user via nullfsCVE-2025-15547jailFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-26:01.opensslMultiple vulnerabilities in OpenSSLCVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796opensslFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:12.rtsoldRemote code execution via ND6 Router AdvertisementsCVE-2025-14558rtsoldFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:11.ipfwipfw denial of serviceCVE-2025-14769ipfwFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:10.unboundCache poison in local-unbound serviceCVE-2025-11411unboundFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:09.netinetSO_REUSEPORT_LB breaks connect(2) for UDP socketsCVE-2025-24934netinetFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:08.opensslMultiple vulnerabilities in OpenSSLCVE-2025-9230, CVE-2025-9231, CVE-2025-9232opensslFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:07.libarchiveInteger overflow in libarchive leading to double freeCVE-2025-5914libarchiveFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:06.xzUse-after-free in multi-threaded xz decoderCVE-2025-31115xzFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:05.opensshMultiple vulnerabilities in OpenSSHCVE-2025-26465, CVE-2025-26466opensshFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:04.ktraceUninitialized kernel memory disclosure via ktrace(2)CVE-2025-0662ktraceFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:03.etcupdateUnprivileged access to system filesCVE-2025-0374etcupdateFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:02.fsBuffer overflow in some filesystems via NFSCVE-2025-0373fsFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedFreeBSD advisorySA-25:01.opensshOpenSSH Keystroke Obfuscation BypassCVE-2024-39894opensshFixedauto1.0✓Fixed1.1✓Fixed1.2✓FixedNothing matches these filters.