Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

FreeBSD — Vulnerabilities & Security Advisories 216

All 216 CVE vulnerabilities found in FreeBSD, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of Common Weakness Enumeration (CWE) vulnerabilities associated with the FreeBSD operating system, categorized by the FreeBSD vendor. It collects data regarding security flaws, including buffer overflows, input validation errors, and race conditions, covering a historical time range that extends from the initial releases of the operating system up to recent advisories. By utilizing this resource, users can effectively track vendor-specific security advisories issued by the FreeBSD project, gain a deeper understanding of prevalent weakness classes that impact this specific Unix-like environment, and investigate the detailed vulnerability history of individual FreeBSD releases or components. The content is structured to facilitate quick reference for security analysts, system administrators, and developers who need to assess the risk profile of their FreeBSD deployments. Information is sourced from official security advisories and recognized vulnerability databases to ensure accuracy and relevance. This centralized view eliminates the need to search through multiple disparate sources for FreeBSD-related security information. It supports informed decision-making regarding patching strategies, system hardening, and upgrade paths by presenting a clear picture of known issues. The page is regularly updated to reflect new disclosures and changes in the status of existing weaknesses, ensuring that the information remains current and actionable for maintaining secure FreeBSD infrastructures.

Vendor: FreeBSD, NetBSD

CVE ID Title CVSS Severity Published
CVE-2026-101311 Multiple vulnerabilities in bhyve device models CWE-362 - - 2026-10-15
CVE-2026-101310 Multiple vulnerabilities in bhyve device models CWE-126 - - 2026-10-15
CVE-2026-101309 Multiple vulnerabilities in bhyve device models CWE-362 - - 2026-10-15
CVE-2026-101308 TOCTOU race between sound(4) buffer resizing and mmap CWE-367 - - 2026-10-15
CVE-2026-101307 Remotely triggerable buffer overflow in tcp_rack CWE-122 - - 2026-10-15
CVE-2026-101303 IPv6 UDP sendto(2) bypasses jail loopback restriction CWE-941 - - 2026-10-15
CVE-2026-101302 Remote DoS via receive-side kernel TLS CWE-193 - - 2026-10-15
CVE-2026-101306 Multiple jail filesystem root escapes CWE-273 - - 2026-10-15
CVE-2026-101305 Multiple jail filesystem root escapes CWE-273 - - 2026-10-15
CVE-2026-101304 Multiple jail filesystem root escapes CWE-273 - - 2026-10-15
CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation CWE-362 - - 2026-10-15
CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation CWE-362 - - 2026-10-15
CVE-2026-58098 Heap out-of-bounds access in semop(2) CWE-787 - - 2026-10-15
CVE-2026-58094 TOCTOU race in POSIX shared memory large page configuration CWE-367 - - 2026-08-26
CVE-2026-58093 Kernel use-after-free via tty ioctls CWE-362 - - 2026-08-26
CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc() CWE-130 - - 2026-08-26
CVE-2026-58096 ppp(8): missing length validation in LcpDecodeConfig() CWE-130 - - 2026-08-26
CVE-2026-58095 ppp(8): incorrect length calculation in mp_Enddisc() CWE-122 - - 2026-08-26
CVE-2026-58092 Unauthorized credential switching CWE-288 - - 2026-08-26
CVE-2026-58091 Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl CWE-416 - - 2026-08-26
CVE-2026-58090 Use-after-free in unix SOCK_STREAM message handling CWE-416 - - 2026-08-26
CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions CWE-273 - - 2026-08-26
CVE-2026-58088 Race condition in ELF core dump segment counting CWE-362 - - 2026-08-19
CVE-2026-58087 Heap out-of-bounds access in semctl(2) CWE-191 - - 2026-08-19
CVE-2026-58086 ktrace(2) privilege incorrectly validated in jails CWE-273 - - 2026-08-19
CVE-2026-58085 Missing MAC validation in wg(4) packet decryption CWE-347 - - 2026-08-19
CVE-2026-58084 Kernel stack disclosure via timer_settime(2) CWE-908 - - 2026-08-19
CVE-2026-58083 Use-after-free in kqueue copy-on-fork CWE-416 - - 2026-08-19
CVE-2026-58082 Stack based buffer overflow in iconv(3) CWE-121 - - 2026-08-19
CVE-2026-58081 Heap based buffer overflow in iconv(3) CWE-122 - - 2026-08-19

All 216 known CVE vulnerabilities affecting FreeBSD with full Chinese analysis, references, and POCs where available.