Known vulnerabilities in FreeBSD - page 6

Software: FreeBSD
Software CPE: cpe:2.3:o:freebsd_foundation:freebsd:*:*:*:*:*:*:*:*
Total vulnerabilities: 404
Public exploits: 36
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FreeBSD FreeBSD is affected by 404 known vulnerabilities: 2 critical, 70 high, 164 medium, 168 low Critical High Medium Low

Vulnerabilities (404)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126825 - Always-Incorrect Control Flow Implementation
CVE-2026-6386
CWE-670 Low
No
No
- 22.04.2026 SB20260422182
#VU126824 - Use After Free
CVE-2026-5398
CWE-416 Low
No
No
- 22.04.2026 SB20260422182
#VU124683 - Improper Resource Shutdown or Release
CVE-2026-4247
CWE-404 Medium
No
No
- 30.03.2026 SB2026033033
#VU124682 - NULL Pointer Dereference
CVE-2026-4652
CWE-476 Medium
No
No
- 30.03.2026 SB2026033033
#VU124681 - Stack-based buffer overflow
CVE-2026-4747
CWE-121 High
No
No
- 30.03.2026 SB2026033033
#VU124680 - Improper input validation
CVE-2026-4748
CWE-20 Medium
No
No
- 30.03.2026 SB2026033033
#VU123247 - Permissions, Privileges, and Access Controls
CVE-2025-15576
CWE-264 Low
No
No
- 25.02.2026 SB2026022529
#VU123246 - Memory corruption
CVE-2026-3038
CWE-119 Low
No
No
- 25.02.2026 SB2026022529
#VU122566 - Missing release of memory after effective lifetime
CVE-2026-2261
CWE-401 Medium
No
No
- 10.02.2026 SB2026021076
#VU122086 - Type confusion
CVE-2026-22796
CWE-843 Medium
No
No
- 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 51 more
#VU122085 - NULL Pointer Dereference
CVE-2026-22795
CWE-476 Medium
No
No
- 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 48 more
#VU122084 - NULL Pointer Dereference
CVE-2025-69421
CWE-476 Medium
No
No
- 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 50 more
#VU120165 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-14558
CWE-78 High
Available
Exploited
- 17.12.2025 SB2025121716
#VU120164 - NULL Pointer Dereference
CVE-2025-14769
CWE-476 Medium
No
No
- 17.12.2025 SB2025121715
#VU117538 - State Issues
CVE-2025-24934
CWE-371 Medium
No
No
- 23.10.2025 SB2025102304
#VU117534 - Insufficient Verification of Data Authenticity
CVE-2025-11411
CWE-345 Medium
No
No
- 22.10.2025 SB20251022156
SB20251024118
SB20251024119
and 21 more
#VU116215 - Out-of-bounds read
CVE-2025-9232
CWE-125 Medium
No
No
- 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 13 more
#VU116214 - Covert Timing Channel
CVE-2025-9231
CWE-385 Low
No
No
- 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU116213 - Out-of-bounds write
CVE-2025-9230
CWE-787 Medium
No
No
- 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU111143 - Double Free
CVE-2025-5914
CWE-415 High
No
No
- 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 51 more


Showing elements 101 - 120 out of 404