CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 14:10 UTC)

What this means for you

This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,511; Show in the list
Critical, last 7 days: 359; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product fedoraproject:fedora. Show all products

407 CVEs, showing 251 to 300PreviousPage 6 of 9Next

CVE	Severity	Title	Published
CVE-2022-0778	High 7.5	Infinite loop in BN_mod_sqrt() reachable when parsing certificates Assigned by openssl	Mar 15, 2022
CVE-2018-25032	High 7.5	zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. Assigned by mitre	Mar 25, 2022
CVE-2022-0500	High 7.8	A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. Assigned by redhat	Mar 25, 2022
CVE-2022-0995 Known exploited	High 7.8	An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. Assigned by redhat	Mar 25, 2022
CVE-2022-27943	Medium 5.5	libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Assigned by mitre	Mar 26, 2022
CVE-2015-20107	High 7.8	In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Assigned by mitre	Apr 13, 2022
CVE-2022-1304	High 7.8	An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. Assigned by redhat	Apr 14, 2022
CVE-2022-1015	Medium 6.6	A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. Assigned by redhat	Apr 29, 2022
CVE-2022-29824	Medium 6.5	In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. Assigned by mitre	May 3, 2022
CVE-2022-1292	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	May 3, 2022
CVE-2022-1616	High 7.3	Use after free in append_command in vim/vim Assigned by @huntrdev	May 7, 2022
CVE-2022-1620	Medium 6.6	NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim Assigned by @huntrdev	May 8, 2022
CVE-2022-1619	Medium 6.1	Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim Assigned by @huntrdev	May 8, 2022
CVE-2022-1674	Medium 6.6	NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim Assigned by @huntrdev	May 12, 2022
CVE-2022-27776	Medium 6.5	A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. Assigned by hackerone	Jun 1, 2022
CVE-2022-32250	High 7.8	net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check l… Assigned by mitre	Jun 2, 2022
CVE-2022-32511	Critical 9.8	jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable. Assigned by mitre	Jun 6, 2022
CVE-2022-21123	Medium 5.5	Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-21125	Medium 5.5	Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-21166	Medium 5.5	Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Assigned by intel	Jun 15, 2022
CVE-2022-2126	High 7.8	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2125	High 7.8	Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2124	High 7.8	Buffer Over-read in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2129	High 7.8	Out-of-bounds Write in vim/vim Assigned by @huntrdev	Jun 19, 2022
CVE-2022-2068	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	Jun 21, 2022
CVE-2022-33070	Medium 5.5	Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. Assigned by mitre	Jun 22, 2022
CVE-2022-2175	High 7.8	Buffer Over-read in vim/vim Assigned by @huntrdev	Jun 23, 2022
CVE-2022-2182	High 7.8	Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jun 23, 2022
CVE-2022-2183	High 7.8	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jun 23, 2022
CVE-2022-2206	High 7.8	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jun 26, 2022
CVE-2022-2207	High 7.8	Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jun 27, 2022
CVE-2022-2210	High 7.8	Out-of-bounds Write in vim/vim Assigned by @huntrdev	Jun 27, 2022
CVE-2022-2208	High 7.8	NULL Pointer Dereference in vim/vim Assigned by @huntrdev	Jun 27, 2022
CVE-2022-2257	High 7.8	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jun 30, 2022
CVE-2022-2287	High 8.0	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jul 2, 2022
CVE-2022-2286	High 7.8	Out-of-bounds Read in vim/vim Assigned by @huntrdev	Jul 2, 2022
CVE-2022-2284	High 7.8	Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jul 2, 2022
CVE-2022-2285	High 7.8	Integer Overflow or Wraparound in vim/vim Assigned by @huntrdev	Jul 2, 2022
CVE-2022-2304	High 7.8	Stack-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jul 5, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2022-32208	Medium 5.9	When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. Assigned by hackerone	Jul 7, 2022
CVE-2022-32206	Medium 6.5	curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. Assigned by hackerone	Jul 7, 2022
CVE-2022-32207	Critical 9.8	When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In… Assigned by hackerone	Jul 7, 2022
CVE-2022-32205	Medium 4.3	A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. Assigned by hackerone	Jul 7, 2022
CVE-2022-2344	High 7.8	Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jul 8, 2022
CVE-2022-2343	High 7.8	Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev	Jul 8, 2022
CVE-2022-2345	High 7.8	Use After Free in vim/vim Assigned by @huntrdev	Jul 8, 2022
CVE-2022-2294 Known exploited	High 8.8	Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Jul 28, 2022
CVE-2022-2509	High 7.5	A vulnerability found in gnutls. Assigned by redhat	Aug 1, 2022
CVE-2022-37434	Critical 9.8	zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre	Aug 5, 2022

PreviousPage 6 of 9Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.