CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,370 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,370
Show in the list
Critical, last 7 days
344
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

849 CVEs, showing 651 to 700PreviousPage 14 of 17Next
CVESeverityTitlePublished
CVE-2026-84042High 7.8Crun: crun: rootful krun with passt executes container payload as host root
Assigned by redhat
Sep 10, 2026
CVE-2026-88264Medium 5.6Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
Assigned by redhat
Sep 10, 2026
CVE-2026-88265Medium 5.6Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown
Assigned by redhat
Sep 10, 2026
CVE-2026-84828
Healthcare
Medium 6.5Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
Assigned by redhat
Sep 10, 2026
CVE-2026-88859Medium 6.3Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction
Assigned by redhat
Sep 10, 2026
CVE-2026-88924High 7.0Gvfs: gvfs-admin socket ownership race permits local root
Assigned by redhat
Sep 10, 2026
CVE-2026-88914Medium 4.4Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser
Assigned by redhat
Sep 11, 2026
CVE-2026-77159Medium 5.5Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink
Assigned by redhat
Sep 11, 2026
CVE-2026-18495Medium 6.1Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
Assigned by redhat
Sep 11, 2026
CVE-2026-89329Medium 6.2Device-mapper-multipath: local denial of service via blocking ipc send operations
Assigned by redhat
Sep 11, 2026
CVE-2026-90948High 7.8Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions
Assigned by redhat
Sep 14, 2026
CVE-2026-90949High 7.8Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch
Assigned by redhat
Sep 14, 2026
CVE-2026-90947High 7.8Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file
Assigned by redhat
Sep 14, 2026
CVE-2026-90463Medium 4.0Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)
Assigned by redhat
Sep 14, 2026
CVE-2026-90994Medium 4.0Sssd: sssd: denial of service via malformed pam v1 requests
Assigned by redhat
Sep 14, 2026
CVE-2026-90995Medium 5.5Sssd: sssd: local denial of service due to null pointer dereference in pam responder
Assigned by redhat
Sep 14, 2026
CVE-2026-90996Medium 4.0Sssd: sssd: denial of service in nss responder via crafted zero-length requests
Assigned by redhat
Sep 14, 2026
CVE-2026-19816High 7.1PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
Assigned by fedora
Sep 14, 2026
CVE-2026-75092High 7.3Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins
Assigned by redhat
Sep 15, 2026
CVE-2026-91786Medium 6.1Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size
Assigned by redhat
Sep 15, 2026
CVE-2026-91926Low 3.7Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge
Assigned by redhat
Sep 15, 2026
CVE-2026-85013High 7.3Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
Assigned by redhat
Sep 15, 2026
CVE-2026-79705Medium 4.5Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers
Assigned by redhat
Sep 15, 2026
CVE-2026-79699Medium 4.4Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory
Assigned by redhat
Sep 15, 2026
CVE-2026-85234High 7.5Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine
Assigned by redhat
Sep 15, 2026
CVE-2026-92248High 7.8Gimp: integer overflow when generating a thumbnail preview for a psd file
Assigned by redhat
Sep 15, 2026
CVE-2025-11395Medium 5.5Podman: arbitrary file write when importing oci archive
Assigned by redhat
Sep 15, 2026
CVE-2026-92091Medium 5.9Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array
Assigned by redhat
Sep 16, 2026
CVE-2026-42784High 7.4Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
Assigned by redhat
Sep 16, 2026
CVE-2026-86320High 7.8Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)
Assigned by redhat
Sep 17, 2026
CVE-2026-92925High 7.1Redis: redis: out-of-bounds read via crafted cluster bus packets
Assigned by redhat
Sep 17, 2026
CVE-2026-76781Medium 5.5Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute
Assigned by redhat
Sep 17, 2026
CVE-2026-89059High 7.5Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
Assigned by redhat
Sep 18, 2026
CVE-2026-89058High 7.4Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
Assigned by redhat
Sep 18, 2026
CVE-2026-81627High 8.2Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
Assigned by redhat
Sep 18, 2026
CVE-2026-93653Medium 5.5Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)
Assigned by redhat
Sep 18, 2026
CVE-2026-93676Low 3.2Xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks
Assigned by redhat
Sep 18, 2026
CVE-2026-91149High 7.5Cockpit: cockpit: denial of service via unbounded connection thread spawning
Assigned by redhat
Sep 18, 2026
CVE-2026-91147Medium 5.9Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash
Assigned by redhat
Sep 18, 2026
CVE-2026-91142Low 3.6Cockpit: cockpit: unauthorized modification of login records via integer overflow
Assigned by redhat
Sep 18, 2026
CVE-2026-92745Medium 5.0Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
Assigned by redhat
Sep 18, 2026
CVE-2026-92747Medium 5.0Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list
Assigned by redhat
Sep 18, 2026
CVE-2026-92768Medium 5.5Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments
Assigned by redhat
Sep 18, 2026
CVE-2026-91205Medium 6.0Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race
Assigned by redhat
Sep 18, 2026
CVE-2026-91203Medium 6.0Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition
Assigned by redhat
Sep 18, 2026
CVE-2026-91202Medium 6.1Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste
Assigned by redhat
Sep 18, 2026
CVE-2026-92574High 8.8Cri-o: cri-o checkpoint restore bypasses destination security context
Assigned by redhat
Sep 21, 2026
CVE-2026-80110High 8.1Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint
Assigned by redhat
Sep 21, 2026
CVE-2026-94184Medium 5.3Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
Assigned by redhat
Sep 21, 2026
CVE-2026-92382Medium 4.1Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write
Assigned by redhat
Sep 21, 2026
PreviousPage 14 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.