Technology · Freebsd
FreeBSD vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 89 vulnerabilities in FreeBSD: 0 in the last 7 days and 41 in the last 90 days, 7 of them critical and 0 exploited in the wild. The most recent, CVE-2026-58100, was published on 15 October 2026. 10 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0.
- Last 7 days
- 0
- Last 90 days
- 41
- Critical, all time
- 7
- Exploited in the wild
- 0
About FreeBSD
A high-performance access switch supporting multigigabit Ethernet and cloud-based management.
Latest FreeBSD vulnerabilities
- CVE-2026-58100: FreeBSD kqueue out-of-bounds read in fork copyinfoEPSS 0.1%
- CVE-2026-58099: FreeBSD kernel kqueue memory safety bugs in copy-on-forkinfoEPSS 0.1%
- CVE-2026-58098: FreeBSD kernel heap out-of-bounds access in semop(2)highCVSS 8.4EPSS 0.2%
- CVE-2026-101308: FreeBSD sound(4) use-after-free in buffer resize TOCTOU racemediumCVSS 5.5EPSS 0.1%
- CVE-2026-101307: FreeBSD RACK stack buffer overflow in tcp_rackcriticalCVSS 9.1EPSS 0.3%
- CVE-2026-101306: FreeBSD jail filesystem root escape via SCM_RIGHTScriticalCVSS 9.8EPSS 0.2%
- CVE-2026-101305: FreeBSD jail filesystem root escape via renameat(2)highCVSS 8.8EPSS 0.2%
- CVE-2026-101304: FreeBSD jail fdescfs filesystem root escape via FD_RESOLVE_BENEATH bypasshighCVSS 7.1EPSS 0.2%
- CVE-2026-101303: FreeBSD IPv6 UDP sendto jail loopback restriction bypasshighCVSS 7.5EPSS 0.2%
- CVE-2026-101302: FreeBSD kernel TLS off-by-one NULL pointer dereferencemediumCVSS 6.5EPSS 0.4%
- CVE-2026-58097: FreeBSD ppp buffer overflow in mp_SetEnddisc()highCVSS 7.8EPSS 0.2%
- CVE-2026-58096: FreeBSD ppp out-of-bounds write in LcpDecodeConfighighCVSS 8.8EPSS 0.6%
- CVE-2026-58095: FreeBSD ppp buffer overflow in endpoint discriminator handlinghighCVSS 8.8EPSS 0.6%
- CVE-2026-58094: FreeBSD POSIX shared memory race condition privilege escalationhighCVSS 7.8EPSS 0.1%
- CVE-2026-58093: FreeBSD kernel use-after-free via tty ioctl race conditionhighCVSS 7EPSS 0.1%
- CVE-2026-58092: FreeBSD kernel credential primary group ID incorrect in mac_do transitionhighCVSS 8.1EPSS 0.4%
- CVE-2026-58091: FreeBSD sound driver use-after-free in SNDCTL_DSP_SYNCSTART ioctlhighCVSS 7.8EPSS 0.1%
- CVE-2026-58090: FreeBSD unix socket use-after-free privilege escalationhighCVSS 7.8EPSS 0.1%
- CVE-2026-58089: FreeBSD hwpmc privilege escalation in setuid exechighCVSS 7.8EPSS 0.1%
- CVE-2026-58088: The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program…highCVSS 7.4EPSS 0.1%
- CVE-2026-58087: The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock…highCVSS 7.8EPSS 0.2%
- CVE-2026-58086: As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user…highCVSS 8.1EPSS 0.4%
- CVE-2026-58085: After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the…highCVSS 7.5EPSS 0.3%
- CVE-2026-58084: To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the…mediumCVSS 5.5EPSS 0.1%
- CVE-2026-58083: While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the…highCVSS 8.4EPSS 0.2%
Most severe FreeBSD vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-1999-0323: FreeBSD and NetBSD file integrity bypass in mmap functioncriticalCVSS 10
- CVE-1999-0046: Multiple Vendors rlogin buffer overflow via TERM environment variablecriticalCVSS 10
- CVE-2026-58082: The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some…criticalCVSS 9.8EPSS 0.5%
- CVE-2026-58081: Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied…criticalCVSS 9.8EPSS 0.5%
- CVE-2026-101306: FreeBSD jail filesystem root escape via SCM_RIGHTScriticalCVSS 9.8EPSS 0.2%
- CVE-1999-0299: FreeBSD lpd buffer overflow via long DNS hostnamescriticalCVSS 9.3
- CVE-2026-101307: FreeBSD RACK stack buffer overflow in tcp_rackcriticalCVSS 9.1EPSS 0.3%
- CVE-2026-58096: FreeBSD ppp out-of-bounds write in LcpDecodeConfighighCVSS 8.8EPSS 0.6%
- CVE-2026-58095: FreeBSD ppp buffer overflow in endpoint discriminator handlinghighCVSS 8.8EPSS 0.6%
- CVE-2026-49427: Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an…highCVSS 8.8EPSS 0.5%
Vulnerabilities per week
10 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 22 | 2 | |
| 24 Aug 2026 | 9 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 10 | 2 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many FreeBSD vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/freebsd)<a href="https://junglewise.ai/threats/technologies/freebsd"><img src="https://junglewise.ai/threats/technologies/freebsd/badge.svg" alt="FreeBSD vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/freebsd.json, and this page as text at https://junglewise.ai/threats/technologies/freebsd.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "FreeBSD vulnerabilities", https://junglewise.ai/threats/technologies/freebsd, 12 November 2026.