CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,499 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,499
Show in the list
Critical, last 7 days
356
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

835 CVEs, showing 301 to 350PreviousPage 7 of 17Next
CVESeverityTitlePublished
CVE-2026-46333High 7.1ptrace: slightly saner 'get_dumpable()' logic
Assigned by Linux
May 15, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-9064High 7.5A flaw was found in 389-ds-base.May 20, 2026
CVE-2026-9150Medium 6.5A flaw was found in libsolv.May 20, 2026
CVE-2026-9149Medium 6.5A flaw was found in libsolv.May 21, 2026
CVE-2026-43494High 7.8net/rds: reset op_nents when zerocopy page pin fails
Assigned by Linux
May 21, 2026
CVE-2026-43501Critical 9.8ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
Assigned by Linux
May 21, 2026
CVE-2026-9256High 8.1NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.May 22, 2026
CVE-2026-43503High 8.8net: skbuff: propagate shared-frag marker through frag-transfer helpers
Assigned by Linux
May 23, 2026
CVE-2026-46300High 7.8net: skbuff: preserve shared-frag marker during coalescing
Assigned by Linux
May 23, 2026
CVE-2026-4480Critical 9.0A flaw was found in the Samba printing subsystem.May 26, 2026
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Assigned by redhat
May 26, 2026
CVE-2026-5260High 8.2Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Assigned by redhat
May 26, 2026
CVE-2026-42012High 7.1Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Assigned by redhat
May 26, 2026
CVE-2026-42013High 8.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Assigned by redhat
May 26, 2026
CVE-2026-42015Medium 5.3Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
Assigned by redhat
May 26, 2026
CVE-2026-3012High 8.0Samba: group policy certificate enrollment uses http:// without validation
Assigned by redhat
May 27, 2026
CVE-2026-2340Medium 6.5Samba: vfs_worm does not block directory modification
Assigned by redhat
May 27, 2026
CVE-2026-45852High 7.8RDMA/rxe: Fix double free in rxe_srq_from_init
Assigned by Linux
May 27, 2026
CVE-2026-45898Critical 9.8RDMA/iwcm: Fix workqueue list corruption by removing work_list
Assigned by Linux
May 27, 2026
CVE-2026-45972Critical 9.8smb: client: fix potential UAF and double free in smb2_open_file()
Assigned by Linux
May 27, 2026
CVE-2026-45984High 7.8gfs2: Fix use-after-free in iomap inline data write path
Assigned by Linux
May 27, 2026
CVE-2026-1933High 7.1Samba: missing access check on reparse point operations
Assigned by redhat
May 27, 2026
CVE-2026-46033High 7.1crypto: authencesn - reject short ahash digests during instance creation
Assigned by Linux
May 27, 2026
CVE-2026-46054High 7.1selinux: fix overlayfs mmap() and mprotect() access checks
Assigned by Linux
May 27, 2026
CVE-2026-46090High 7.8ALSA: aloop: Fix peer runtime UAF during format-change stop
Assigned by Linux
May 27, 2026
CVE-2026-46099High 8.1net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
Assigned by Linux
May 27, 2026
CVE-2026-4408Critical 9.0Samba: remote code execution in samr
Assigned by redhat
May 28, 2026
CVE-2026-46116High 7.8xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
Assigned by Linux
May 28, 2026
CVE-2026-46117High 7.8RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
Assigned by Linux
May 28, 2026
CVE-2026-46125High 8.8wifi: mac80211: remove station if connection prep fails
Assigned by Linux
May 28, 2026
CVE-2026-46145High 7.8RDMA/mana: Validate rx_hash_key_len
Assigned by Linux
May 28, 2026
CVE-2026-46152High 8.8wifi: mac80211: drop stray 'static' from fast-RX rx_result
Assigned by Linux
May 28, 2026
CVE-2026-46166High 8.8wifi: mac80211: use safe list iteration in radar detect work
Assigned by Linux
May 28, 2026
CVE-2026-46176High 7.8RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
Assigned by Linux
May 28, 2026
CVE-2026-46181High 7.8RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Assigned by Linux
May 28, 2026
CVE-2026-46195Critical 9.8smb: client: validate dacloffset before building DACL pointers
Assigned by Linux
May 28, 2026
CVE-2026-46227High 7.8sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Assigned by Linux
May 28, 2026
CVE-2026-46243High 7.1smb: client: reject userspace cifs.spnego descriptions
Assigned by Linux
Jun 1, 2026
CVE-2026-5419Low 3.7Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
Assigned by redhat
Jun 1, 2026
CVE-2026-46244Critical 9.1netfilter: nft_inner: Fix IPv6 inner_thoff desync
Assigned by Linux
Jun 3, 2026
CVE-2026-11332High 7.8Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Assigned by redhat
Jun 5, 2026
CVE-2026-50256High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-50257High 7.8A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().Jun 5, 2026
CVE-2026-50258High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-50259High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-50260High 7.8A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().Jun 5, 2026
CVE-2026-50261High 7.8A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().Jun 5, 2026
CVE-2026-50262Medium 5.5An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes().Jun 5, 2026
CVE-2026-50263Medium 5.5A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow().Jun 5, 2026
PreviousPage 7 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.