CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:rhel_tus. Show all products

117 CVEs, showing 51 to 100PreviousPage 2 of 3Next
CVESeverityTitlePublished
CVE-2026-43329High 7.8netfilter: flowtable: strictly check for maximum number of actions
Assigned by Linux
May 8, 2026
CVE-2026-46333High 7.1ptrace: slightly saner 'get_dumpable()' logic
Assigned by Linux
May 15, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-43503High 8.8net: skbuff: propagate shared-frag marker through frag-transfer helpers
Assigned by Linux
May 23, 2026
CVE-2026-46300High 7.8net: skbuff: preserve shared-frag marker during coalescing
Assigned by Linux
May 23, 2026
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Assigned by redhat
May 26, 2026
CVE-2026-5260High 8.2Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Assigned by redhat
May 26, 2026
CVE-2026-42012High 7.1Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Assigned by redhat
May 26, 2026
CVE-2026-42013High 8.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Assigned by redhat
May 26, 2026
CVE-2026-42015Medium 5.3Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
Assigned by redhat
May 26, 2026
CVE-2026-3012High 8.0Samba: group policy certificate enrollment uses http:// without validation
Assigned by redhat
May 27, 2026
CVE-2026-2340Medium 6.5Samba: vfs_worm does not block directory modification
Assigned by redhat
May 27, 2026
CVE-2026-45852High 7.8RDMA/rxe: Fix double free in rxe_srq_from_init
Assigned by Linux
May 27, 2026
CVE-2026-45984High 7.8gfs2: Fix use-after-free in iomap inline data write path
Assigned by Linux
May 27, 2026
CVE-2026-1933High 7.1Samba: missing access check on reparse point operations
Assigned by redhat
May 27, 2026
CVE-2026-46054High 7.1selinux: fix overlayfs mmap() and mprotect() access checks
Assigned by Linux
May 27, 2026
CVE-2026-46090High 7.8ALSA: aloop: Fix peer runtime UAF during format-change stop
Assigned by Linux
May 27, 2026
CVE-2026-4408Critical 9.0Samba: remote code execution in samr
Assigned by redhat
May 28, 2026
CVE-2026-46116High 7.8xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
Assigned by Linux
May 28, 2026
CVE-2026-46125High 8.8wifi: mac80211: remove station if connection prep fails
Assigned by Linux
May 28, 2026
CVE-2026-46181High 7.8RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Assigned by Linux
May 28, 2026
CVE-2026-46227High 7.8sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Assigned by Linux
May 28, 2026
CVE-2026-46243High 7.1smb: client: reject userspace cifs.spnego descriptions
Assigned by Linux
Jun 1, 2026
CVE-2026-11788Medium 5.9389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
Assigned by redhat
Jun 9, 2026
CVE-2026-11837High 7.3Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown
Assigned by redhat
Jun 10, 2026
CVE-2026-6893High 7.5Dracut: dracut: root code execution via dhcp options command injection
Assigned by redhat
Jun 10, 2026
CVE-2026-42014Medium 6.6Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
Assigned by redhat
Jun 16, 2026
CVE-2026-46331High 7.8net/sched: fix pedit partial COW leading to page cache corruption
Assigned by Linux
Jun 16, 2026
CVE-2026-56208High 7.6Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Assigned by redhat
Jun 19, 2026
CVE-2026-52923High 7.8ipc: limit next_id allocation to the valid ID range
Assigned by Linux
Jun 24, 2026
CVE-2026-53006Critical 9.8ipv6: fix possible UAF in icmpv6_rcv()
Assigned by Linux
Jun 24, 2026
CVE-2026-53016High 7.8crypto: ccp - copy IV using skcipher ivsize
Assigned by Linux
Jun 24, 2026
CVE-2026-12912High 7.3Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
Assigned by redhat
Jun 29, 2026
CVE-2026-58010Medium 6.5Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Assigned by redhat
Jun 30, 2026
CVE-2026-58011Medium 6.5Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Assigned by redhat
Jun 30, 2026
CVE-2026-58012Medium 6.5Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Assigned by redhat
Jun 30, 2026
CVE-2026-58013Medium 6.5Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Assigned by redhat
Jun 30, 2026
CVE-2026-58014High 7.3Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Assigned by redhat
Jun 30, 2026
CVE-2026-58015Medium 5.9Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Assigned by redhat
Jun 30, 2026
CVE-2026-58016High 7.5Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Assigned by redhat
Jun 30, 2026
CVE-2026-14474High 8.8Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
Assigned by redhat
Jul 7, 2026
CVE-2026-14476High 8.0Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
Assigned by redhat
Jul 7, 2026
CVE-2026-15588Medium 5.3Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Assigned by redhat
Jul 20, 2026
CVE-2026-16313High 7.6Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
Assigned by redhat
Jul 28, 2026
CVE-2026-16524High 7.8Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection
Assigned by redhat
Jul 30, 2026
CVE-2026-15722High 7.5389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
Assigned by redhat
Jul 31, 2026
CVE-2026-11770High 7.5389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
Assigned by redhat
Jul 31, 2026
CVE-2026-18649High 7.5Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders
Assigned by redhat
Aug 6, 2026
CVE-2026-15816High 7.5Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
Assigned by redhat
Aug 7, 2026
CVE-2026-19387High 7.6Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
Assigned by redhat
Aug 10, 2026
PreviousPage 2 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.