CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

805 CVEs, showing 51 to 100PreviousPage 2 of 17Next
CVESeverityTitlePublished
CVE-2026-108094High 7.8Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path
Assigned by redhat
Oct 12, 2026
CVE-2026-108119Medium 6.3Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
Assigned by redhat
Oct 9, 2026
CVE-2026-108093Medium 5.5Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading
Assigned by redhat
Oct 9, 2026
CVE-2026-108063Medium 5.5Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry
Assigned by redhat
Oct 9, 2026
CVE-2026-107935Critical 9.3Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
Assigned by redhat
Oct 9, 2026
CVE-2026-107655Medium 4.0Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
Assigned by redhat
Oct 9, 2026
CVE-2026-107651Medium 5.5Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader
Assigned by redhat
Oct 8, 2026
CVE-2026-89091High 8.8Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
Assigned by redhat
Oct 8, 2026
CVE-2026-107565Medium 5.1Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption
Assigned by redhat
Oct 8, 2026
CVE-2026-107466Medium 6.1Flatpak-builder: local file exfiltration via `file
Assigned by redhat
Oct 8, 2026
CVE-2026-107161High 7.5Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients
Assigned by redhat
Oct 7, 2026
CVE-2026-106067Medium 6.3Gimp: gimp: heap buffer overflow in hot color filter on oversized image
Assigned by redhat
Oct 7, 2026
CVE-2026-106066Medium 6.3Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions
Assigned by redhat
Oct 7, 2026
CVE-2026-106065Medium 6.3Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions
Assigned by redhat
Oct 7, 2026
CVE-2026-107169Medium 6.2M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8
Assigned by redhat
Oct 7, 2026
CVE-2026-107167Medium 6.2M17n-lib: heap use-after-free write in re_init_ic()
Assigned by redhat
Oct 7, 2026
CVE-2026-106064Medium 6.3Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions
Assigned by redhat
Oct 7, 2026
CVE-2026-107170Low 2.9M17n-lib: null dereference in minput_open_im() after failed m17n_init()
Assigned by redhat
Oct 7, 2026
CVE-2026-107168Medium 6.2M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()
Assigned by redhat
Oct 7, 2026
CVE-2026-106061Medium 5.5Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file
Assigned by redhat
Oct 7, 2026
CVE-2026-80048Medium 5.5Sssd: sssd-kcm: local denial of service via excessive memory preallocation
Assigned by redhat
Oct 6, 2026
CVE-2026-104045Medium 4.7Sssd: sssd: denial of service via race condition in autofs responder
Assigned by redhat
Oct 6, 2026
CVE-2026-104046Medium 6.2Sssd: sssd: denial of service via incomplete identity provider authentication requests
Assigned by redhat
Oct 6, 2026
CVE-2026-106062High 7.8Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file
Assigned by redhat
Oct 6, 2026
CVE-2026-101258High 7.8Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free
Assigned by redhat
Oct 6, 2026
CVE-2026-106063
Healthcare
Medium 6.3Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions
Assigned by redhat
Oct 6, 2026
CVE-2026-104048Medium 6.8Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
Assigned by redhat
Oct 6, 2026
CVE-2026-104047Medium 5.3Sssd: sssd: information disclosure via query injection in entra id lookups
Assigned by redhat
Oct 6, 2026
CVE-2026-88252Medium 4.7Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
Assigned by redhat
Oct 6, 2026
CVE-2026-104044Medium 6.2Sssd: sssd: denial of service via crafted passkey kerberos authentication request
Assigned by redhat
Oct 6, 2026
CVE-2026-104043Medium 5.5Sssd: sssd: denial of service via undersized packet parsing in nss responder
Assigned by redhat
Oct 6, 2026
CVE-2026-104042Medium 5.5Sssd: sssd: denial of service via out-of-bounds read in pam responder
Assigned by redhat
Oct 6, 2026
CVE-2026-104041Medium 5.5Sssd: sssd: denial of service via unbounded negative cache growth
Assigned by redhat
Oct 6, 2026
CVE-2026-104040Medium 4.4Sssd: sssd: information disclosure via odata injection in entra id lookups
Assigned by redhat
Oct 6, 2026
CVE-2026-104039Medium 4.7Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
Assigned by redhat
Oct 6, 2026
CVE-2026-104038Medium 5.9Sssd: sssd: denial of service via missing sid extension in certificate mapping
Assigned by redhat
Oct 6, 2026
CVE-2026-104037Medium 5.5Sssd: sssd: denial of service via packet length underflow in autofs responder
Assigned by redhat
Oct 6, 2026
CVE-2026-92821Medium 6.8Sssd: sssd: access control bypass via premature ldap access rule evaluation
Assigned by redhat
Oct 6, 2026
CVE-2026-104036Medium 5.8Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin
Assigned by redhat
Oct 6, 2026
CVE-2026-104035Medium 5.5Sssd: sssd: denial of service via memory exhaustion in kcm responder
Assigned by redhat
Oct 6, 2026
CVE-2026-104034Medium 4.7Sssd: sssd: denial of service via use-after-free in kcm ticket renewal
Assigned by redhat
Oct 6, 2026
CVE-2026-104033Medium 5.4Sssd: sssd: access control bypass via improper ldap shadow expiration check
Assigned by redhat
Oct 6, 2026
CVE-2026-104032Medium 5.5Sssd: sssd: denial of service via unprivileged autofs cache invalidation
Assigned by redhat
Oct 6, 2026
CVE-2026-104031Medium 5.5Sssd: sssd: denial of service via memory exhaustion in autofs responder
Assigned by redhat
Oct 6, 2026
CVE-2026-104029Low 3.3Sssd: sssd: denial of service via out-of-bounds read in autofs responder
Assigned by redhat
Oct 5, 2026
CVE-2026-104030Medium 5.5Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
Assigned by redhat
Oct 5, 2026
CVE-2026-105326Low 2.5Cups: cups: argument injection in mailto notifier via notify-recipient-uri
Assigned by redhat
Oct 5, 2026
CVE-2026-104988High 8.1Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject
Assigned by redhat
Oct 2, 2026
CVE-2026-94422High 8.8xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
Assigned by redhat
Oct 2, 2026
CVE-2026-95512Medium 5.5Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader
Assigned by redhat
Oct 2, 2026
PreviousPage 2 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.