CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:rhel_aus. Show all products

106 CVEs, showing 51 to 100PreviousPage 2 of 3Next
CVESeverityTitlePublished
CVE-2026-42013High 8.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Assigned by redhat
May 26, 2026
CVE-2026-42012High 7.1Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Assigned by redhat
May 26, 2026
CVE-2026-5260High 8.2Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Assigned by redhat
May 26, 2026
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Assigned by redhat
May 26, 2026
CVE-2026-46300High 7.8net: skbuff: preserve shared-frag marker during coalescing
Assigned by Linux
May 23, 2026
CVE-2026-43503High 8.8net: skbuff: propagate shared-frag marker through frag-transfer helpers
Assigned by Linux
May 23, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-46333High 7.1ptrace: slightly saner 'get_dumpable()' logic
Assigned by Linux
May 15, 2026
CVE-2026-43329High 7.8netfilter: flowtable: strictly check for maximum number of actions
Assigned by Linux
May 8, 2026
CVE-2026-43284High 8.8xfrm: esp: avoid in-place decrypt on shared skb frags
Assigned by Linux
May 8, 2026
CVE-2026-42011High 7.4Gnutls: gnutls: security bypass due to incorrect name constraint handling
Assigned by redhat
May 7, 2026
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username
Assigned by redhat
May 7, 2026
CVE-2026-43198Critical 9.8tcp: fix potential race in tcp_v6_syn_recv_sock()
Assigned by Linux
May 6, 2026
CVE-2026-43125Critical 9.8dlm: validate length in dlm_search_rsb_tree
Assigned by Linux
May 6, 2026
CVE-2026-43112High 8.8fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
Assigned by Linux
May 6, 2026
CVE-2026-33846High 7.5Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Assigned by redhat
May 4, 2026
CVE-2026-43038Critical 9.8ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
Assigned by Linux
May 1, 2026
CVE-2026-43037Critical 9.8ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Assigned by Linux
May 1, 2026
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment
Assigned by redhat
Apr 30, 2026
CVE-2026-3833Medium 6.5Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Assigned by redhat
Apr 30, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-4878Medium 6.7Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Assigned by redhat
Apr 9, 2026
CVE-2026-21413Critical 9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.
Assigned by talos
Apr 7, 2026
CVE-2026-31402Critical 9.8nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
Assigned by Linux
Apr 3, 2026
CVE-2026-4800High 8.1lodash vulnerable to Code Injection via `_.template` imports key names
Assigned by openjs
Mar 31, 2026
CVE-2026-5121High 7.5Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Assigned by redhat
Mar 30, 2026
CVE-2026-4424High 7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Assigned by redhat
Mar 19, 2026
CVE-2026-27135High 7.5nghttp2 Denial of service: Assertion failure due to the missing state validation
Assigned by GitHub_M
Mar 18, 2026
CVE-2026-3497Low 2.7Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
Assigned by canonical
Mar 12, 2026
CVE-2025-14831Medium 5.3Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Assigned by redhat
Feb 9, 2026
CVE-2025-13465Medium 6.9Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Assigned by openjs
Jan 21, 2026
CVE-2025-14512Medium 6.5Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Assigned by redhat
Dec 11, 2025
CVE-2025-14087Medium 5.6Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Assigned by redhat
Dec 10, 2025
CVE-2025-13947High 7.4Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
Assigned by redhat
Dec 3, 2025
CVE-2025-61662High 7.8Grub2: missing unregister call for gettext command may lead to use-after-free
Assigned by redhat
Nov 18, 2025
CVE-2025-11234High 7.5Qemu-kvm: vnc websocket handshake use-after-free
Assigned by redhat
Oct 3, 2025
CVE-2025-9566High 8.1Podman: podman kube play command may overwrite host files
Assigned by redhat
Sep 5, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-7425High 7.8Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Assigned by redhat
Jul 10, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-49794Critical 9.1Libxml: heap use after free (uaf) leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025
CVE-2025-49796Critical 9.1Libxml: type confusion leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2025-5914High 7.8Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Assigned by redhat
Jun 9, 2025
CVE-2025-4373Medium 4.8Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
Assigned by redhat
May 6, 2025
CVE-2024-8176High 7.5Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Assigned by redhat
Mar 14, 2025
CVE-2025-0624High 7.6Grub2: net: out-of-bounds write in grub_net_search_config_file()
Assigned by redhat
Feb 19, 2025
CVE-2024-12133Medium 5.3Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Assigned by redhat
Feb 10, 2025
CVE-2024-11218High 8.6Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
Assigned by redhat
Jan 22, 2025
PreviousPage 2 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.