Known vulnerabilities in FreeBSD

Software: FreeBSD
Software CPE: cpe:2.3:o:freebsd_foundation:freebsd:*:*:*:*:*:*:*:*
Total vulnerabilities: 404
Public exploits: 36
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FreeBSD FreeBSD is affected by 404 known vulnerabilities: 2 critical, 70 high, 164 medium, 168 low Critical High Medium Low

Vulnerabilities (404)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145750 - Improper Access Control
CVE-2026-58089
CWE-284 Low
No
No
- 26.08.2026 SB2026082637
#VU145749 - Use After Free
CVE-2026-58090
CWE-416 Low
No
No
- 26.08.2026 SB2026082638
#VU145748 - Use After Free
CVE-2026-58091
CWE-416 Low
No
No
- 26.08.2026 SB2026082639
#VU145747 - Improper Privilege Management
CVE-2026-58092
CWE-269 Low
No
No
- 26.08.2026 SB2026082640
#VU145745 - Out-of-bounds write
CVE-2026-58096
CWE-787 High
No
No
- 26.08.2026 SB2026082641
#VU145746 - Heap-based Buffer Overflow
CVE-2026-58097
CWE-122 Low
No
No
- 26.08.2026 SB2026082641
#VU145744 - Heap-based Buffer Overflow
CVE-2026-58095
CWE-122 High
No
No
- 26.08.2026 SB2026082641
#VU145743 - Use After Free
CVE-2026-58093
CWE-416 Low
No
No
- 26.08.2026 SB2026082642
#VU145742 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-58094
CWE-367 Low
No
No
- 26.08.2026 SB2026082643
#VU145416 - Double Free
CVE-2026-18798
CWE-415 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 1 more
#VU145417 - Out-of-bounds write
CVE-2026-63072
CWE-787 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 2 more
#VU145418 - NULL Pointer Dereference
CVE-2026-63076
CWE-476 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 1 more
#VU145419 - NULL Pointer Dereference
CVE-2026-14457
CWE-476 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 1 more
#VU145420 - Asymmetric Resource Consumption (Amplification)
CVE-2026-54874
CWE-405 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 2 more
#VU145421 - Use of Externally-Controlled Format String
CVE-2026-63073
CWE-134 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 1 more
#VU145422 - Allocation of Resources Without Limits or Throttling
CVE-2026-63074
CWE-770 Low
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 1 more
#VU145423 - Allocation of Resources Without Limits or Throttling
CVE-2026-63075
CWE-770 Low
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 1 more
#VU140493 - Use After Free
CVE-2026-58083
CWE-416 Low
No
No
- 29.07.2026 SB2026073055
#VU140492 - Use of Uninitialized Variable
CVE-2026-58084
CWE-457 Low
No
No
- 29.07.2026 SB2026073055
#VU140491 - Insufficient Verification of Data Authenticity
CVE-2026-58085
CWE-345 Medium
No
No
- 29.07.2026 SB2026073055


Showing elements 1 - 20 out of 404