CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,380 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,380
Show in the list
Critical, last 7 days
347
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

845 CVEs, showing 551 to 600PreviousPage 12 of 17Next
CVESeverityTitlePublished
CVE-2026-19654High 7.5Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
Assigned by redhat
Aug 12, 2026
CVE-2026-18726Medium 6.5Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing
Assigned by redhat
Aug 12, 2026
CVE-2026-18727Medium 6.5Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing
Assigned by redhat
Aug 12, 2026
CVE-2026-18728Medium 6.5Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing
Assigned by redhat
Aug 13, 2026
CVE-2026-73585Medium 6.3Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
Assigned by redhat
Aug 13, 2026
CVE-2026-73583Medium 6.6Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr
Assigned by redhat
Aug 13, 2026
CVE-2026-73584Medium 6.3Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling
Assigned by redhat
Aug 13, 2026
CVE-2026-19730Medium 4.2Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives
Assigned by redhat
Aug 13, 2026
CVE-2026-19617Medium 5.5Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
Assigned by redhat
Aug 14, 2026
CVE-2026-58224Medium 6.5Samba: ctdb fails to do integrity checking of received packets
Assigned by redhat
Aug 14, 2026
CVE-2026-19879Medium 5.3Io.undertow/undertow: undertow: http response header integrity issue due to character truncation
Assigned by redhat
Aug 14, 2026
CVE-2026-13002Medium 4.4Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing
Assigned by redhat
Aug 14, 2026
CVE-2026-75032Medium 6.3Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder
Assigned by redhat
Aug 18, 2026
CVE-2026-75900Medium 6.1Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch
Assigned by redhat
Aug 19, 2026
CVE-2026-76235High 7.5Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html
Assigned by redhat
Aug 19, 2026
CVE-2026-43961High 7.8Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
Assigned by redhat
Aug 19, 2026
CVE-2026-77014Medium 5.3Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
Assigned by redhat
Aug 20, 2026
CVE-2026-18917High 7.8Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow
Assigned by redhat
Aug 20, 2026
CVE-2026-73197High 7.5Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read
Assigned by redhat
Aug 20, 2026
CVE-2026-73196Medium 4.3Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
Assigned by redhat
Aug 20, 2026
CVE-2026-13097High 8.7Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
Assigned by redhat
Aug 20, 2026
CVE-2026-73198High 7.5Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read
Assigned by redhat
Aug 20, 2026
CVE-2026-11861Critical 9.6Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
Assigned by redhat
Aug 20, 2026
CVE-2026-73199Medium 6.5Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value
Assigned by redhat
Aug 20, 2026
CVE-2026-78323Medium 6.5Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates
Assigned by redhat
Aug 24, 2026
CVE-2026-78376High 8.8Webkitgtk: use-after-free of jscvalue function parameters
Assigned by redhat
Aug 24, 2026
CVE-2026-78367High 7.0Rpm: rpmbuild gettarspec() crafted tar member name → macro injection
Assigned by redhat
Aug 24, 2026
CVE-2026-19685High 7.1Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)
Assigned by redhat
Aug 24, 2026
CVE-2026-78465High 7.0Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit
Assigned by redhat
Aug 24, 2026
CVE-2026-78475Medium 6.1Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader
Assigned by redhat
Aug 24, 2026
CVE-2026-78322Medium 6.5File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers
Assigned by redhat
Aug 25, 2026
CVE-2026-78701Medium 6.5389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos
Assigned by redhat
Aug 25, 2026
CVE-2026-79655High 7.8Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write
Assigned by redhat
Aug 25, 2026
CVE-2026-79992High 7.8Emacs: emacs: command injection via crafted filenames in tramp
Assigned by redhat
Aug 25, 2026
CVE-2026-77680Medium 5.3Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix
Assigned by redhat
Aug 25, 2026
CVE-2026-80101Medium 4.4Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
Assigned by redhat
Aug 25, 2026
CVE-2026-80186High 7.6Bluez: stack overflow in name2utf8 causes dos and potential code execution
Assigned by redhat
Aug 25, 2026
CVE-2026-80185Medium 5.7Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root
Assigned by redhat
Aug 25, 2026
CVE-2026-79902Medium 5.5Gimp: stack vla size underflow denial of service in seattle
Assigned by redhat
Aug 26, 2026
CVE-2026-78002High 7.5Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
Assigned by redhat
Aug 27, 2026
CVE-2026-5680High 7.5Undertow-core: undertow: denial of service via websocket permessage-deflate processing
Assigned by redhat
Aug 27, 2026
CVE-2026-81893Medium 4.7Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery
Assigned by redhat
Aug 27, 2026
CVE-2026-80179Medium 5.9Jwcrypto: jwcrypto: denial of service via malformed jwe tokens
Assigned by redhat
Aug 27, 2026
CVE-2026-82324Medium 6.1Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
Assigned by redhat
Aug 28, 2026
CVE-2026-82327Medium 5.5Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data
Assigned by redhat
Aug 28, 2026
CVE-2026-82328Medium 6.1Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count
Assigned by redhat
Aug 28, 2026
CVE-2026-82330Medium 6.1Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
Assigned by redhat
Aug 28, 2026
CVE-2026-82343Medium 6.1Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
Assigned by redhat
Aug 28, 2026
CVE-2026-81624High 7.5Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite
Assigned by redhat
Aug 31, 2026
CVE-2026-17615High 7.5Resteasy-core: resteasy sourceprovider remote unauthenticated file read
Assigned by redhat
Aug 31, 2026
PreviousPage 12 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.