CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,492 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,492
Show in the list
Critical, last 7 days
353
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

838 CVEs, showing 451 to 500PreviousPage 10 of 17Next
CVESeverityTitlePublished
CVE-2026-11819Medium 5.5Community.general: community.general keyring_info — os keyring passphrase returned in plaintext
Assigned by redhat
Jun 23, 2026
CVE-2026-12969Medium 5.3An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c.Jun 23, 2026
CVE-2026-55654Low 3.7A flaw was found in OpenSSH.Jun 23, 2026
CVE-2026-55655Medium 5.0Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
Assigned by redhat
Jun 23, 2026
CVE-2026-55653Medium 4.3Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Assigned by redhat
Jun 23, 2026
CVE-2026-12725Medium 5.9A heap-based buffer overflow was found in dnsmasq.Jun 22, 2026
CVE-2026-12549Medium 4.8The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison.Jun 22, 2026
CVE-2026-56211High 7.1Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Assigned by redhat
Jun 19, 2026
CVE-2026-56210High 7.1Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Assigned by redhat
Jun 19, 2026
CVE-2026-56208High 7.6Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Assigned by redhat
Jun 19, 2026
CVE-2026-56209High 7.1Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
Assigned by redhat
Jun 19, 2026
CVE-2026-52910High 7.8bpf: Free reuseport cBPF prog after RCU grace period.
Assigned by Linux
Jun 19, 2026
CVE-2026-11791Medium 5.0A flaw was found in 389 Directory Server.Jun 18, 2026
CVE-2026-12505High 7.8Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
Assigned by redhat
Jun 18, 2026
CVE-2026-42055High 8.1NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.Jun 17, 2026
CVE-2026-12528Medium 5.4A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c.Jun 17, 2026
CVE-2026-46331High 7.8net/sched: fix pedit partial COW leading to page cache corruption
Assigned by Linux
Jun 16, 2026
CVE-2026-1767High 8.1A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component.Jun 16, 2026
CVE-2026-1766Medium 6.1A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component.Jun 16, 2026
CVE-2026-1764Medium 5.6A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor.Jun 16, 2026
CVE-2026-42014Medium 6.6Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
Assigned by redhat
Jun 16, 2026
CVE-2026-54231Medium 5.5A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport.Jun 13, 2026
CVE-2026-54230High 7.8A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport.Jun 13, 2026
CVE-2026-44172Critical 9.1MariaDB server is a community developed fork of MySQL server.Jun 12, 2026
CVE-2026-46625High 7.5JavaScript Cookie is a JavaScript API for handling cookies, client-side.Jun 10, 2026
CVE-2026-6893High 7.5Dracut: dracut: root code execution via dhcp options command injection
Assigned by redhat
Jun 10, 2026
CVE-2026-11837High 7.3Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown
Assigned by redhat
Jun 10, 2026
CVE-2025-71319High 7.5image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-…Jun 9, 2026
CVE-2026-11790Medium 4.9A flaw was found in 389 Directory Server.Jun 9, 2026
CVE-2026-11789Medium 6.5A flaw was found in 389 Directory Server.Jun 9, 2026
CVE-2026-11787Medium 6.3A flaw was found in 389 Directory Server.Jun 9, 2026
CVE-2026-11786Medium 6.5A flaw was found in 389 Directory Server.Jun 9, 2026
CVE-2026-11785Medium 4.3A flaw was found in 389 Directory Server.Jun 9, 2026
CVE-2026-11788Medium 5.9389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
Assigned by redhat
Jun 9, 2026
CVE-2026-46323High 7.8net: gro: don't merge zcopy skbs
Assigned by Linux
Jun 9, 2026
CVE-2026-46316Critical 9.3KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry
Assigned by Linux
Jun 9, 2026
CVE-2026-11611Medium 6.5A flaw was found in 389 Directory Server.Jun 8, 2026
CVE-2026-50264High 7.8An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.Jun 5, 2026
CVE-2026-50263Medium 5.5A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow().Jun 5, 2026
CVE-2026-50262Medium 5.5An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes().Jun 5, 2026
CVE-2026-50261High 7.8A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().Jun 5, 2026
CVE-2026-50260High 7.8A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().Jun 5, 2026
CVE-2026-50259High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-50258High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-50257High 7.8A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().Jun 5, 2026
CVE-2026-50256High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-11332High 7.8Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Assigned by redhat
Jun 5, 2026
CVE-2026-46244Critical 9.1netfilter: nft_inner: Fix IPv6 inner_thoff desync
Assigned by Linux
Jun 3, 2026
CVE-2026-5419Low 3.7Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
Assigned by redhat
Jun 1, 2026
CVE-2026-46243High 7.1smb: client: reject userspace cifs.spnego descriptions
Assigned by Linux
Jun 1, 2026
PreviousPage 10 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.