CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,432 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,432 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product redhat:enterprise_linux_server_aus . Show all products
71 CVEs, showing 51 to 71 Previous Page 2 of 2 CVE Severity Title Published CVE-2019-10160 Critical 9.8 A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which s… Assigned by redhat
Jun 7, 2019 CVE-2019-10086 Healthcare
High 7.3 In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja… Assigned by apache
Aug 20, 2019 CVE-2019-11043 Known exploited
High 8.7 Underflow in PHP-FPM can lead to RCE Assigned by php
Oct 28, 2019 CVE-2019-5010 High 7.5 An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. Oct 31, 2019 CVE-2019-5544 Known exploited
Critical 9.8 OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. Assigned by vmware
Dec 6, 2019 CVE-2019-19906 High 7.5 cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. Assigned by mitre
Dec 19, 2019 CVE-2021-40438 Known exploited
Critical 9.0 mod_proxy SSRF Assigned by apache
Sep 16, 2021 CVE-2021-4034 Known exploited
High 7.8 A local privilege escalation vulnerability was found on polkit's pkexec utility. Assigned by redhat
Jan 28, 2022 CVE-2022-0492 Known exploited
High 7.8 A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Assigned by redhat
Mar 3, 2022 CVE-2022-0847 Known exploited
High 7.8 A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus… Assigned by redhat
Mar 7, 2022 CVE-2021-3733 Medium 6.5 There's a flaw in urllib's AbstractBasicAuthHandler class. Assigned by redhat
Mar 7, 2022 CVE-2019-8720 Known exploited
High 8.8 A vulnerability was found in WebKit. Assigned by redhat
Mar 6, 2023 CVE-2023-4813 Medium 5.9 Glibc: potential use-after-free in gaih_inet() Assigned by redhat
Sep 12, 2023 CVE-2023-4911 Known exploited
High 7.8 Glibc: buffer overflow in ld.so leading to privilege escalation Assigned by redhat
Oct 3, 2023 CVE-2023-6606 High 7.1 Kernel: out-of-bounds read vulnerability in smbcalcsize Assigned by redhat
Dec 8, 2023 CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos Assigned by redhat
Jul 1, 2024 CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents Assigned by redhat
Jan 14, 2025 CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Assigned by redhat
Jun 12, 2025 CVE-2025-13601 High 7.7 A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. Nov 26, 2025 CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing Assigned by redhat
Mar 19, 2026 CVE-2026-5201 High 7.5 A flaw was found in the gdk-pixbuf library. Mar 31, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
