CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,500 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,500
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product gnu:gnutls. Show all products

17 CVEs, showing 1 to 17
CVESeverityTitlePublished
CVE-2020-11501High 7.4GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS.
Assigned by mitre
Apr 3, 2020
CVE-2020-13777High 7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).
Assigned by mitre
Jun 4, 2020
CVE-2020-24659High 7.5An issue was discovered in GnuTLS before 3.6.15.
Assigned by mitre
Sep 4, 2020
CVE-2021-20231Critical 9.8A flaw was found in gnutls.
Assigned by redhat
Mar 12, 2021
CVE-2021-20232Critical 9.8A flaw was found in gnutls.
Assigned by redhat
Mar 12, 2021
CVE-2022-2509High 7.5A vulnerability found in gnutls.
Assigned by redhat
Aug 1, 2022
CVE-2021-4209Medium 6.5A NULL pointer dereference flaw was found in GnuTLS.
Assigned by redhat
Aug 24, 2022
CVE-2023-0361High 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.
Assigned by redhat
Feb 15, 2023
CVE-2023-5981Medium 5.9Gnutls: timing side-channel in the rsa-psk authentication
Assigned by redhat
Nov 28, 2023
CVE-2024-0553High 7.5Gnutls: incomplete fix for cve-2023-5981
Assigned by redhat
Jan 16, 2024
CVE-2024-0567High 7.5Gnutls: rejects certificate chain with distributed trust
Assigned by redhat
Jan 16, 2024
CVE-2026-1584High 7.5A flaw was found in gnutls.Apr 9, 2026
CVE-2026-3833Medium 6.5Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Assigned by redhat
Apr 30, 2026
CVE-2026-3832Low 3.7Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
Assigned by redhat
Apr 30, 2026
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment
Assigned by redhat
Apr 30, 2026
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username
Assigned by redhat
May 7, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.