Read the docs

The NetBSD Foundation

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

The NetBSD Foundation records in CISA KEV

No The NetBSD Foundation vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-41653 CVE-2026-57842 · GHSA-gq6w-h4cf-wpff

NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen

Priority LOW 33

NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00135 Published 2026-09-11 Fixed in 9.5 CWE-415
TI-2026-38948 CVE-2026-53996 · GHSA-2q5f-pw9r-2w7m

NetBSD hdaudio(4) Driver Privilege Bypass Use-After-Free via HDAUDIO_FGRP_SETCONFIG ioctl

Priority LOW 33

NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00128 Published 2026-08-12 No fix listed CWE-862
TI-2026-41654 CVE-2026-57843 · GHSA-p59p-jjhh-5885

NetBSD mm_open() PK_KMEM Flag Kernel Pointer Information Disclosure

Priority LOW 29

NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening world-accessible devices such as /dev/null…

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00145 Published 2026-09-11 Fixed in 9.5 CWE-732
Open these records in search →