CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,498 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,498
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

825 CVEs, showing 151 to 200PreviousPage 4 of 17Next
CVESeverityTitlePublished
CVE-2025-1118Medium 4.4Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled
Assigned by redhat
Feb 19, 2025
CVE-2025-0624High 7.6Grub2: net: out-of-bounds write in grub_net_search_config_file()
Assigned by redhat
Feb 19, 2025
CVE-2025-26466Medium 5.9Openssh: denial-of-service in openssh
Assigned by redhat
Feb 28, 2025
CVE-2024-8176High 7.5Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Assigned by redhat
Mar 14, 2025
CVE-2025-3360Low 3.7Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().
Assigned by redhat
Apr 7, 2025
CVE-2025-4373Medium 4.8Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
Assigned by redhat
May 6, 2025
CVE-2025-5222High 7.0Icu: stack buffer overflow in the srbroot::addtag function
Assigned by redhat
May 27, 2025
CVE-2025-5278Medium 4.4Coreutils: heap buffer under-read in gnu coreutils sort via key specification
Assigned by redhat
May 27, 2025
CVE-2025-4598Medium 4.7Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
Assigned by redhat
May 30, 2025
CVE-2025-5914High 7.8Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Assigned by redhat
Jun 9, 2025
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2025-49796Critical 9.1Libxml: type confusion leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-49795High 7.5Libxml: null pointer dereference leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025
CVE-2025-49794Critical 9.1Libxml: heap use after free (uaf) leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-6032High 8.3Podman: podman missing tls verification
Assigned by redhat
Jun 24, 2025
CVE-2025-32463
Known exploited
Critical 9.3Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Assigned by mitre
Jun 30, 2025
CVE-2025-5987High 8.1Libssh: invalid return code for chacha20 poly1305 with openssl backend
Assigned by redhat
Jul 7, 2025
CVE-2025-32988Medium 6.5Gnutls: vulnerability in gnutls othername san export
Assigned by redhat
Jul 10, 2025
CVE-2025-32989Medium 5.3Gnutls: vulnerability in gnutls sct extension parsing
Assigned by redhat
Jul 10, 2025
CVE-2025-7425High 7.8Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Assigned by redhat
Jul 10, 2025
CVE-2025-7424High 7.5Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes
Assigned by redhat
Jul 10, 2025
CVE-2025-6395Medium 6.5Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
Assigned by redhat
Jul 10, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-9784High 7.5Undertow: undertow madeyoureset http/2 ddos vulnerability
Assigned by redhat
Sep 2, 2025
CVE-2025-9566High 8.1Podman: podman kube play command may overwrite host files
Assigned by redhat
Sep 5, 2025
CVE-2025-4953High 7.4Podman: build context bind mount
Assigned by redhat
Sep 16, 2025
CVE-2025-11234High 7.5Qemu-kvm: vnc websocket handshake use-after-free
Assigned by redhat
Oct 3, 2025
CVE-2025-62231High 7.3A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.Oct 30, 2025
CVE-2025-62230High 7.3A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.Oct 30, 2025
CVE-2025-61662High 7.8Grub2: missing unregister call for gettext command may lead to use-after-free
Assigned by redhat
Nov 18, 2025
CVE-2025-13947High 7.4Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
Assigned by redhat
Dec 3, 2025
CVE-2025-14104Medium 6.1Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
Assigned by redhat
Dec 5, 2025
CVE-2025-14087Medium 5.6Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Assigned by redhat
Dec 10, 2025
CVE-2025-14512Medium 6.5Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Assigned by redhat
Dec 11, 2025
CVE-2025-12543Critical 9.6Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
Assigned by redhat
Jan 7, 2026
CVE-2026-0989Low 3.7A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled.Jan 15, 2026
CVE-2026-0990Medium 5.9A flaw was found in libxml2, an XML parsing library.Jan 15, 2026
CVE-2026-0992Low 2.9A flaw was found in the libxml2 library.Jan 15, 2026
CVE-2025-13465Medium 6.9Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Assigned by openjs
Jan 21, 2026
CVE-2025-9820Medium 4.0Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
Assigned by redhat
Jan 26, 2026
CVE-2026-1467Medium 5.3A flaw was found in libsoup, an HTTP client library.Jan 27, 2026
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026
CVE-2026-1536Medium 5.3A flaw was found in libsoup.Jan 28, 2026
CVE-2026-1539Medium 5.8A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations.Jan 28, 2026
CVE-2026-1801Medium 6.5A flaw was found in libsoup, an HTTP client/server library.Feb 3, 2026
CVE-2026-1709Critical 9.8A flaw was found in Keylime.Feb 6, 2026
CVE-2025-14831Medium 5.3Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Assigned by redhat
Feb 9, 2026
CVE-2026-2443Medium 5.3A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems.Feb 13, 2026
PreviousPage 4 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.