zephyrproject zephyr vulnerabilities and fixes
Exploited and high-severity zephyrproject zephyr vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-85035Use-after-free via dynamically allocated message queue retained by the CAN RX filterFix availablezephyrproject zephyr
2 min read - 7.5CVE-2026-19741OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)Fix availablezephyrproject zephyr
2 min read - 8.8CVE-2026-79982Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet sizeRCEFix availablezephyrproject zephyr
2 min read - 7.8CVE-2026-79979Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical framesFix availablezephyrproject zephyr
2 min read - 8.2CVE-2026-79977WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in ZephyrFix availablezephyrproject zephyr
2 min read