Product by Freebsd Project
Freebsd OS
69 known vulnerabilities in Freebsd OS (Freebsd Project), 0 of them actively exploited (CISA KEV).
Key figures
69
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-18798 | QUIC Server May Trigger Double Free When Processing INITIAL Packet | 7.5 | |
| High | CVE-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 7.5 | |
| High | CVE-2026-63076 | Invalid Pointer Dereference in CMP Server via Crafted protectionAlg | 7.5 | |
| High | CVE-2024-39894 | open source OpenSSH: security vulnerability | 7.5 | |
| High | CVE-2026-14457 | RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate | 7.5 | |
| High | CVE-2026-84782 | DTLS Retransmits Handshake Messages From a Stale Buffer Offset | 8.2 | |
| High | CVE-2026-63073 | Untrusted Sender DN Used as Format String in CMP Response Validation | 7.4 | |
| High | CVE-2026-63072 | Heap Buffer Overflow in CMS Key Unwrapping | 7.5 | |
| Critical | CVE-2026-58081 | Heap based buffer overflow in iconv(3) | 9.8 | |
| Critical | CVE-2026-58082 | Stack based buffer overflow in iconv(3) | 9.8 | |
| High | CVE-2026-58095 | ppp(8): incorrect length calculation in mp_Enddisc() | 8.8 | |
| High | CVE-2026-58096 | ppp(8): missing length validation in LcpDecodeConfig() | 8.8 | |
| High | CVE-2026-49427 | posixshm: largepage shared memory objects not explicitly wired | 8.8 | |
| Critical | CVE-2026-101306 | Multiple jail filesystem root escapes | 9.8 | |
| High | CVE-2026-54874 | Excessive Memory Use Buffering DTLS Records for a Future Epoch | 7.5 | |
| High | CVE-2026-49419 | Jail reference count underflow | 8.8 | |
| High | CVE-2026-49418 | Use-after-free in device pager page list | 8.8 | |
| Critical | CVE-2026-101307 | Remotely triggerable buffer overflow in tcp_rack | 9.1 | |
| High | CVE-2026-63075 | QUIC ACK-only Packet Retention Can Cause Memory Exhaustion | 7.5 | |
| High | CVE-2026-49420 | Buffer overflow in libalias RTSP handler | 8.8 | |
| High | CVE-2026-101305 | Multiple jail filesystem root escapes | 8.8 | |
| High | CVE-2025-5914 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | 7.8 | |
| High | CVE-2026-49415 | Local privilege escalation via execve(2) TOCTOU race | 8.8 | |
| Medium | CVE-2026-63074 | CMP Indefinite Cache Growth of ExtraCerts | 5.9 | |
| High | CVE-2026-58086 | ktrace(2) privilege incorrectly validated in jails | 8.1 |