About this page
Every CVE mentioned in the news ThreatFeed reads, with its severity, how likely it is to be exploited (EPSS), whether it is on CISA's Known Exploited Vulnerabilities list, and any public exploit code in Metasploit or ExploitDB. Use it to find the vulnerabilities being exploited or talked about now: search by CVE or keyword, and narrow by time window, severity or source. Each CVE has an AI action plan: patch now, mitigate or watch.
🚨 Exploitation Status
within the current filter · click a card to jump to it
📊 CVE Severity Distribution
last 30 days
🐞 Results
1 CVEs in the last 30 days
CVE-2026-46300
HIGH
CVSS: 7.8
EPSS: 16.1%
VulnCheck KEV
Weaponized
Metasploit
ExploitDB
CWE-787
CWE-456
CWE-123
T1203
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @from to @to. If @from
has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same
externally-owned or page-cache-backed frags, but the shared-frag marker
is currently lost.
That breaks the invariant relied on by later in-place writers. In
particular, ESP input checks skb_has_shared_frag() before deciding
whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP
receive coalescing has moved shared frags into an unmarked skb, ESP can
see skb_has_shared_frag() as false and decrypt in place over page-cache
backed frags.
Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged
frags. The tailroom copy path does not need the marker because it copies
bytes into @to's linear data rather than transferring frag descriptors.
Published: 2026-05-23
Mentioned in 1 article(s):