CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:rhel_eus. Show all products

183 CVEs, showing 1 to 50Page 1 of 4Next
CVESeverityTitlePublished
CVE-2021-4037Medium 4.4Kernel: security regression for cve-2018-13405
Assigned by redhat
Aug 24, 2022
CVE-2023-3772Medium 5.5Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
Assigned by redhat
Jul 25, 2023
CVE-2023-4004High 7.8Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Assigned by redhat
Jul 31, 2023
CVE-2023-4459Medium 5.5Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
Assigned by redhat
Aug 21, 2023
CVE-2023-4813Medium 5.9Glibc: potential use-after-free in gaih_inet()
Assigned by redhat
Sep 12, 2023
CVE-2023-4806Medium 5.9Glibc: potential use-after-free in getaddrinfo()
Assigned by redhat
Sep 18, 2023
CVE-2023-42753High 7.0Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Assigned by redhat
Sep 25, 2023
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-5178High 8.8Kernel: use after free in nvmet_tcp_free_crypto in nvme
Assigned by redhat
Nov 1, 2023
CVE-2023-5981Medium 5.9Gnutls: timing side-channel in the rsa-psk authentication
Assigned by redhat
Nov 28, 2023
CVE-2023-6606High 7.1Kernel: out-of-bounds read vulnerability in smbcalcsize
Assigned by redhat
Dec 8, 2023
CVE-2024-0553High 7.5Gnutls: incomplete fix for cve-2023-5981
Assigned by redhat
Jan 16, 2024
CVE-2024-0567High 7.5Gnutls: rejects certificate chain with distributed trust
Assigned by redhat
Jan 16, 2024
CVE-2024-2236Medium 5.9Libgcrypt: vulnerable to marvin attack
Assigned by redhat
Mar 6, 2024
CVE-2024-28835Medium 5.0Gnutls: potential crash during chain building/verification
Assigned by redhat
Mar 21, 2024
CVE-2024-1394High 7.5Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
Assigned by redhat
Mar 21, 2024
CVE-2024-28834Medium 5.3Gnutls: vulnerable to minerva side-channel information leak
Assigned by redhat
Mar 21, 2024
CVE-2024-6387High 8.1Openssh: regresshion - race condition in ssh allows rce/dos
Assigned by redhat
Jul 1, 2024
CVE-2024-6409High 7.0Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
Assigned by redhat
Jul 8, 2024
CVE-2024-7409High 7.5Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
Assigned by redhat
Aug 5, 2024
CVE-2024-9355Medium 6.5Golang-fips: golang fips zeroed buffer
Assigned by redhat
Oct 1, 2024
CVE-2024-9407Medium 4.7Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction
Assigned by redhat
Oct 1, 2024
CVE-2024-10963High 7.4Pam: improper hostname interpretation in pam_access leads to access control bypass
Assigned by redhat
Nov 7, 2024
CVE-2024-12085High 7.5Rsync: info leak via uninitialized stack contents
Assigned by redhat
Jan 14, 2025
CVE-2024-11218High 8.6Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
Assigned by redhat
Jan 22, 2025
CVE-2024-12133Medium 5.3Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Assigned by redhat
Feb 10, 2025
CVE-2024-12243Medium 5.3Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
Assigned by redhat
Feb 10, 2025
CVE-2025-26465Medium 6.8Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
Assigned by redhat
Feb 18, 2025
CVE-2025-0624High 7.6Grub2: net: out-of-bounds write in grub_net_search_config_file()
Assigned by redhat
Feb 19, 2025
CVE-2024-8176High 7.5Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Assigned by redhat
Mar 14, 2025
CVE-2025-4373Medium 4.8Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
Assigned by redhat
May 6, 2025
CVE-2025-5222High 7.0Icu: stack buffer overflow in the srbroot::addtag function
Assigned by redhat
May 27, 2025
CVE-2025-5914High 7.8Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Assigned by redhat
Jun 9, 2025
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2025-49796Critical 9.1Libxml: type confusion leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025
CVE-2025-49794Critical 9.1Libxml: heap use after free (uaf) leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-6032High 8.3Podman: podman missing tls verification
Assigned by redhat
Jun 24, 2025
CVE-2025-5987High 8.1Libssh: invalid return code for chacha20 poly1305 with openssl backend
Assigned by redhat
Jul 7, 2025
CVE-2025-32988Medium 6.5Gnutls: vulnerability in gnutls othername san export
Assigned by redhat
Jul 10, 2025
CVE-2025-32989Medium 5.3Gnutls: vulnerability in gnutls sct extension parsing
Assigned by redhat
Jul 10, 2025
CVE-2025-7425High 7.8Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Assigned by redhat
Jul 10, 2025
CVE-2025-6395Medium 6.5Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
Assigned by redhat
Jul 10, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-9566High 8.1Podman: podman kube play command may overwrite host files
Assigned by redhat
Sep 5, 2025
CVE-2025-11234High 7.5Qemu-kvm: vnc websocket handshake use-after-free
Assigned by redhat
Oct 3, 2025
CVE-2025-61662High 7.8Grub2: missing unregister call for gettext command may lead to use-after-free
Assigned by redhat
Nov 18, 2025
CVE-2025-13947High 7.4Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
Assigned by redhat
Dec 3, 2025
CVE-2025-14087Medium 5.6Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Assigned by redhat
Dec 10, 2025
Page 1 of 4Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.