CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,345 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,345
Show in the list
Critical, last 7 days
351
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

843 CVEs, showing 401 to 450PreviousPage 9 of 17Next
CVESeverityTitlePublished
CVE-2026-52993Critical 9.8tipc: fix double-free in tipc_buf_append()
Assigned by Linux
Jun 24, 2026
CVE-2026-53000High 7.8netfilter: nat: use kfree_rcu to release ops
Assigned by Linux
Jun 24, 2026
CVE-2026-53002Critical 9.8netfilter: conntrack: remove sprintf usage
Assigned by Linux
Jun 24, 2026
CVE-2026-53006Critical 9.8ipv6: fix possible UAF in icmpv6_rcv()
Assigned by Linux
Jun 24, 2026
CVE-2026-53009High 7.8ice: fix double-free of tx_buf skb
Assigned by Linux
Jun 24, 2026
CVE-2026-53016High 7.8crypto: ccp - copy IV using skcipher ivsize
Assigned by Linux
Jun 24, 2026
CVE-2026-53033High 7.8bpf, sockmap: Take state lock for af_unix iter
Assigned by Linux
Jun 24, 2026
CVE-2026-53071High 8.8Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
Assigned by Linux
Jun 24, 2026
CVE-2026-53081High 7.8bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars
Assigned by Linux
Jun 24, 2026
CVE-2026-53085High 7.8bpf: fix mm lifecycle in open-coded task_vma iterator
Assigned by Linux
Jun 24, 2026
CVE-2026-53090High 7.8bpf: Fix ld_{abs,ind} failure path analysis in subprogs
Assigned by Linux
Jun 24, 2026
CVE-2026-53091High 8.4net: pull headers in qdisc_pkt_len_segs_init()
Assigned by Linux
Jun 24, 2026
CVE-2026-53092High 7.8bpf: Fix linked reg delta tracking when src_reg == dst_reg
Assigned by Linux
Jun 24, 2026
CVE-2026-53145High 7.8drm/gem: Try to fix change_handle ioctl, attempt 4
Assigned by Linux
Jun 25, 2026
CVE-2026-53148High 7.0thunderbolt: Clamp XDomain response data copy to allocation size
Assigned by Linux
Jun 25, 2026
CVE-2026-53176Critical 9.8IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
Assigned by Linux
Jun 25, 2026
CVE-2026-53185High 7.8zram: fix use-after-free in zram_bvec_write_partial()
Assigned by Linux
Jun 25, 2026
CVE-2026-53194High 7.8USB: serial: kl5kusb105: fix bulk-out buffer overflow
Assigned by Linux
Jun 25, 2026
CVE-2026-53202High 7.8accel/ivpu: Fix signed integer truncation in IPC receive
Assigned by Linux
Jun 25, 2026
CVE-2026-53203High 7.1accel/ivpu: Add buffer overflow check in MS get_info_ioctl
Assigned by Linux
Jun 25, 2026
CVE-2026-53153High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clearing xarray entry on reparent memcg_reparent_list_lrus() clears the dying memcg's xarray entry with x…Jun 25, 2026
CVE-2026-53281High 8.8iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Assigned by Linux
Jun 26, 2026
CVE-2026-13595Medium 5.3A flaw was found in the libblkid library of util-linux.Jun 29, 2026
CVE-2026-57965Medium 5.1A flaw was found in spice-vdagent.Jun 29, 2026
CVE-2026-57966Medium 4.4A path traversal vulnerability was found in spice-vdagent.Jun 29, 2026
CVE-2026-13601Medium 6.5A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl.Jun 29, 2026
CVE-2026-12912High 7.3Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
Assigned by redhat
Jun 29, 2026
CVE-2026-13757Medium 6.2P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
Assigned by redhat
Jun 29, 2026
CVE-2026-14164High 7.5Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
Assigned by redhat
Jun 30, 2026
CVE-2026-12610Medium 6.4A flaw was found in sssd.Jun 30, 2026
CVE-2026-58010Medium 6.5Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Assigned by redhat
Jun 30, 2026
CVE-2026-58011Medium 6.5Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Assigned by redhat
Jun 30, 2026
CVE-2026-58012Medium 6.5Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Assigned by redhat
Jun 30, 2026
CVE-2026-58013Medium 6.5Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Assigned by redhat
Jun 30, 2026
CVE-2026-58014High 7.3Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Assigned by redhat
Jun 30, 2026
CVE-2026-58015Medium 5.9Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Assigned by redhat
Jun 30, 2026
CVE-2026-58016High 7.5Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Assigned by redhat
Jun 30, 2026
CVE-2026-58381High 7.3A flaw was found in GIMP's PSP file format parser.Jul 2, 2026
CVE-2026-58379High 7.3Gimp: gimp: heap buffer overflow in read_channel_data()
Assigned by redhat
Jul 3, 2026
CVE-2026-58380High 7.3Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()
Assigned by redhat
Jul 6, 2026
CVE-2026-59089Medium 5.5A flaw was found in GIMP.Jul 6, 2026
CVE-2026-58384High 7.3Gimp: gimp: integer overflow in read_rle_channel()
Assigned by redhat
Jul 7, 2026
CVE-2026-14474High 8.8Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
Assigned by redhat
Jul 7, 2026
CVE-2026-14476High 8.0Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
Assigned by redhat
Jul 7, 2026
CVE-2026-14940Medium 5.3A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base).Jul 7, 2026
CVE-2026-14969Medium 4.4A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged fil…Jul 7, 2026
CVE-2026-15041Low 3.7A flaw was found in 389 Directory Server.Jul 8, 2026
CVE-2026-15028Low 3.9Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
Assigned by redhat
Jul 10, 2026
CVE-2026-16118High 7.1Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Assigned by redhat
Jul 17, 2026
CVE-2026-15588Medium 5.3Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Assigned by redhat
Jul 20, 2026
PreviousPage 9 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.