CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,375 CVEs published, 350 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,375
Show in the list
Critical, last 7 days
350
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

843 CVEs, showing 451 to 500PreviousPage 10 of 17Next
CVESeverityTitlePublished
CVE-2026-15370High 7.3A flaw was found in libssh.Jul 21, 2026
CVE-2026-59842Medium 5.3A flaw was found in libssh.Jul 21, 2026
CVE-2026-59843Medium 6.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59844Medium 6.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59845Medium 5.9A flaw was found in libssh.Jul 21, 2026
CVE-2026-59846Low 3.9A flaw was found in libssh.Jul 21, 2026
CVE-2026-59847High 7.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59848Medium 5.3A flaw was found in libssh.Jul 21, 2026
CVE-2026-59849High 7.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59850High 7.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59851High 8.8A flaw was found in libssh.Jul 21, 2026
CVE-2026-12548Medium 4.2A heap out-of-bounds read flaw was found in libsoup.Jul 21, 2026
CVE-2026-16517Low 2.9Libarchive: libarchive: signed integer overflow in archive_write_zip_header
Assigned by redhat
Jul 21, 2026
CVE-2026-16473Medium 4.3Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame
Assigned by redhat
Jul 22, 2026
CVE-2026-16560Medium 5.3389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn
Assigned by redhat
Jul 22, 2026
CVE-2026-16615Medium 6.8Librest: weak random number generation in pkce implementation
Assigned by redhat
Jul 22, 2026
CVE-2026-6390Medium 6.8Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.
Assigned by redhat
Jul 23, 2026
CVE-2026-64611High 7.5Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()
Assigned by redhat
Jul 23, 2026
CVE-2026-16768Medium 5.3Gdk-pixbuf: out-of-bounds read in ico parser
Assigned by redhat
Jul 23, 2026
CVE-2026-12353Medium 5.3Rhcs: memory leak during https connection leads to denial of service
Assigned by redhat
Jul 23, 2026
CVE-2026-16730Medium 5.5Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup
Assigned by redhat
Jul 24, 2026
CVE-2026-16743Medium 5.5Accountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed users
Assigned by redhat
Jul 24, 2026
CVE-2026-17039Low 3.1Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path
Assigned by redhat
Jul 24, 2026
CVE-2026-66339Medium 6.5Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
Assigned by redhat
Jul 24, 2026
CVE-2026-66338Medium 5.4Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()
Assigned by redhat
Jul 24, 2026
CVE-2026-66337Medium 6.5Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
Assigned by redhat
Jul 24, 2026
CVE-2026-15003Medium 5.6Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
Assigned by redhat
Jul 27, 2026
CVE-2026-66758High 7.8Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images
Assigned by redhat
Jul 27, 2026
CVE-2026-66757Medium 5.5Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images
Assigned by redhat
Jul 27, 2026
CVE-2026-66759High 7.1Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images
Assigned by redhat
Jul 27, 2026
CVE-2026-17072Low 3.3Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers
Assigned by redhat
Jul 28, 2026
CVE-2026-18047Medium 6.5Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash
Assigned by redhat
Jul 28, 2026
CVE-2026-16313High 7.6Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
Assigned by redhat
Jul 28, 2026
CVE-2026-18107High 7.8Criu: criu: container escape via rseq critical section hijack during checkpoint/restore
Assigned by redhat
Jul 28, 2026
CVE-2026-18220High 7.8Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing
Assigned by redhat
Jul 29, 2026
CVE-2026-16524High 7.8Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection
Assigned by redhat
Jul 30, 2026
CVE-2026-16526High 8.8Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
Assigned by redhat
Jul 30, 2026
CVE-2026-16527High 7.3Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
Assigned by redhat
Jul 30, 2026
CVE-2026-16529High 7.5Pcp: pcp: denial of service due to signed integer overflow
Assigned by redhat
Jul 30, 2026
CVE-2026-16530Medium 6.5Pcp: pcp: remote denial of service and information leakage
Assigned by redhat
Jul 30, 2026
CVE-2026-16531Medium 5.3Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet
Assigned by redhat
Jul 30, 2026
CVE-2026-18369Medium 5.8Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects
Assigned by redhat
Jul 30, 2026
CVE-2026-58218Medium 5.3Samba: dns signing dos via tkey name cache exhaustion
Assigned by redhat
Jul 30, 2026
CVE-2026-58222High 8.8Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
Assigned by redhat
Jul 30, 2026
CVE-2026-58216Medium 5.3Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash
Assigned by redhat
Jul 30, 2026
CVE-2026-68562Medium 6.2Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tampering
Assigned by redhat
Jul 30, 2026
CVE-2026-68563Medium 5.5Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions
Assigned by redhat
Jul 30, 2026
CVE-2026-18157High 7.8Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
Assigned by redhat
Jul 31, 2026
CVE-2026-15722High 7.5389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
Assigned by redhat
Jul 31, 2026
CVE-2026-11770High 7.5389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
Assigned by redhat
Jul 31, 2026
PreviousPage 10 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.