CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,345 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,345
Show in the list
Critical, last 7 days
351
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

843 CVEs, showing 501 to 550PreviousPage 11 of 17Next
CVESeverityTitlePublished
CVE-2026-50256High 7.8A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.Jun 5, 2026
CVE-2026-11332High 7.8Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Assigned by redhat
Jun 5, 2026
CVE-2026-46244Critical 9.1netfilter: nft_inner: Fix IPv6 inner_thoff desync
Assigned by Linux
Jun 3, 2026
CVE-2026-5419Low 3.7Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
Assigned by redhat
Jun 1, 2026
CVE-2026-46243High 7.1smb: client: reject userspace cifs.spnego descriptions
Assigned by Linux
Jun 1, 2026
CVE-2026-46227High 7.8sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Assigned by Linux
May 28, 2026
CVE-2026-46195Critical 9.8smb: client: validate dacloffset before building DACL pointers
Assigned by Linux
May 28, 2026
CVE-2026-46181High 7.8RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Assigned by Linux
May 28, 2026
CVE-2026-46176High 7.8RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
Assigned by Linux
May 28, 2026
CVE-2026-46166High 8.8wifi: mac80211: use safe list iteration in radar detect work
Assigned by Linux
May 28, 2026
CVE-2026-46152High 8.8wifi: mac80211: drop stray 'static' from fast-RX rx_result
Assigned by Linux
May 28, 2026
CVE-2026-46145High 7.8RDMA/mana: Validate rx_hash_key_len
Assigned by Linux
May 28, 2026
CVE-2026-46125High 8.8wifi: mac80211: remove station if connection prep fails
Assigned by Linux
May 28, 2026
CVE-2026-46117High 7.8RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
Assigned by Linux
May 28, 2026
CVE-2026-46116High 7.8xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
Assigned by Linux
May 28, 2026
CVE-2026-4408Critical 9.0Samba: remote code execution in samr
Assigned by redhat
May 28, 2026
CVE-2026-46099High 8.1net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
Assigned by Linux
May 27, 2026
CVE-2026-46090High 7.8ALSA: aloop: Fix peer runtime UAF during format-change stop
Assigned by Linux
May 27, 2026
CVE-2026-46054High 7.1selinux: fix overlayfs mmap() and mprotect() access checks
Assigned by Linux
May 27, 2026
CVE-2026-46033High 7.1crypto: authencesn - reject short ahash digests during instance creation
Assigned by Linux
May 27, 2026
CVE-2026-1933High 7.1Samba: missing access check on reparse point operations
Assigned by redhat
May 27, 2026
CVE-2026-45984High 7.8gfs2: Fix use-after-free in iomap inline data write path
Assigned by Linux
May 27, 2026
CVE-2026-45972Critical 9.8smb: client: fix potential UAF and double free in smb2_open_file()
Assigned by Linux
May 27, 2026
CVE-2026-45898Critical 9.8RDMA/iwcm: Fix workqueue list corruption by removing work_list
Assigned by Linux
May 27, 2026
CVE-2026-45852High 7.8RDMA/rxe: Fix double free in rxe_srq_from_init
Assigned by Linux
May 27, 2026
CVE-2026-2340Medium 6.5Samba: vfs_worm does not block directory modification
Assigned by redhat
May 27, 2026
CVE-2026-3012High 8.0Samba: group policy certificate enrollment uses http:// without validation
Assigned by redhat
May 27, 2026
CVE-2026-42015Medium 5.3Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
Assigned by redhat
May 26, 2026
CVE-2026-42013High 8.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Assigned by redhat
May 26, 2026
CVE-2026-42012High 7.1Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Assigned by redhat
May 26, 2026
CVE-2026-5260High 8.2Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Assigned by redhat
May 26, 2026
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Assigned by redhat
May 26, 2026
CVE-2026-4480Critical 9.0A flaw was found in the Samba printing subsystem.May 26, 2026
CVE-2026-46300High 7.8net: skbuff: preserve shared-frag marker during coalescing
Assigned by Linux
May 23, 2026
CVE-2026-43503High 8.8net: skbuff: propagate shared-frag marker through frag-transfer helpers
Assigned by Linux
May 23, 2026
CVE-2026-9256High 8.1NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.May 22, 2026
CVE-2026-43501Critical 9.8ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
Assigned by Linux
May 21, 2026
CVE-2026-43494High 7.8net/rds: reset op_nents when zerocopy page pin fails
Assigned by Linux
May 21, 2026
CVE-2026-9149Medium 6.5A flaw was found in libsolv.May 21, 2026
CVE-2026-9150Medium 6.5A flaw was found in libsolv.May 20, 2026
CVE-2026-9064High 7.5A flaw was found in 389-ds-base.May 20, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-46333High 7.1ptrace: slightly saner 'get_dumpable()' logic
Assigned by Linux
May 15, 2026
CVE-2026-45186Low 2.9In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
Assigned by mitre
May 10, 2026
CVE-2026-43329High 7.8netfilter: flowtable: strictly check for maximum number of actions
Assigned by Linux
May 8, 2026
CVE-2026-43284High 8.8xfrm: esp: avoid in-place decrypt on shared skb frags
Assigned by Linux
May 8, 2026
CVE-2026-42011High 7.4Gnutls: gnutls: security bypass due to incorrect name constraint handling
Assigned by redhat
May 7, 2026
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username
Assigned by redhat
May 7, 2026
CVE-2026-43198Critical 9.8tcp: fix potential race in tcp_v6_syn_recv_sock()
Assigned by Linux
May 6, 2026
CVE-2026-43133High 7.9KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
Assigned by Linux
May 6, 2026
PreviousPage 11 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.