CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:rhel_e4s. Show all products

152 CVEs, showing 51 to 100PreviousPage 2 of 4Next
CVESeverityTitlePublished
CVE-2026-55653Medium 4.3Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Assigned by redhat
Jun 23, 2026
CVE-2026-56208High 7.6Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Assigned by redhat
Jun 19, 2026
CVE-2026-46331High 7.8net/sched: fix pedit partial COW leading to page cache corruption
Assigned by Linux
Jun 16, 2026
CVE-2026-42014Medium 6.6Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
Assigned by redhat
Jun 16, 2026
CVE-2026-6893High 7.5Dracut: dracut: root code execution via dhcp options command injection
Assigned by redhat
Jun 10, 2026
CVE-2026-11837High 7.3Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown
Assigned by redhat
Jun 10, 2026
CVE-2026-11788Medium 5.9389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
Assigned by redhat
Jun 9, 2026
CVE-2026-46323High 7.8net: gro: don't merge zcopy skbs
Assigned by Linux
Jun 9, 2026
CVE-2026-11332High 7.8Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Assigned by redhat
Jun 5, 2026
CVE-2026-46244Critical 9.1netfilter: nft_inner: Fix IPv6 inner_thoff desync
Assigned by Linux
Jun 3, 2026
CVE-2026-5419Low 3.7Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
Assigned by redhat
Jun 1, 2026
CVE-2026-46243High 7.1smb: client: reject userspace cifs.spnego descriptions
Assigned by Linux
Jun 1, 2026
CVE-2026-46227High 7.8sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Assigned by Linux
May 28, 2026
CVE-2026-46181High 7.8RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Assigned by Linux
May 28, 2026
CVE-2026-46152High 8.8wifi: mac80211: drop stray 'static' from fast-RX rx_result
Assigned by Linux
May 28, 2026
CVE-2026-46145High 7.8RDMA/mana: Validate rx_hash_key_len
Assigned by Linux
May 28, 2026
CVE-2026-46125High 8.8wifi: mac80211: remove station if connection prep fails
Assigned by Linux
May 28, 2026
CVE-2026-46117High 7.8RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
Assigned by Linux
May 28, 2026
CVE-2026-46116High 7.8xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
Assigned by Linux
May 28, 2026
CVE-2026-4408Critical 9.0Samba: remote code execution in samr
Assigned by redhat
May 28, 2026
CVE-2026-46099High 8.1net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
Assigned by Linux
May 27, 2026
CVE-2026-46090High 7.8ALSA: aloop: Fix peer runtime UAF during format-change stop
Assigned by Linux
May 27, 2026
CVE-2026-46054High 7.1selinux: fix overlayfs mmap() and mprotect() access checks
Assigned by Linux
May 27, 2026
CVE-2026-1933High 7.1Samba: missing access check on reparse point operations
Assigned by redhat
May 27, 2026
CVE-2026-45984High 7.8gfs2: Fix use-after-free in iomap inline data write path
Assigned by Linux
May 27, 2026
CVE-2026-45852High 7.8RDMA/rxe: Fix double free in rxe_srq_from_init
Assigned by Linux
May 27, 2026
CVE-2026-2340Medium 6.5Samba: vfs_worm does not block directory modification
Assigned by redhat
May 27, 2026
CVE-2026-3012High 8.0Samba: group policy certificate enrollment uses http:// without validation
Assigned by redhat
May 27, 2026
CVE-2026-42015Medium 5.3Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
Assigned by redhat
May 26, 2026
CVE-2026-42013High 8.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Assigned by redhat
May 26, 2026
CVE-2026-42012High 7.1Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Assigned by redhat
May 26, 2026
CVE-2026-5260High 8.2Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Assigned by redhat
May 26, 2026
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Assigned by redhat
May 26, 2026
CVE-2026-46300High 7.8net: skbuff: preserve shared-frag marker during coalescing
Assigned by Linux
May 23, 2026
CVE-2026-43503High 8.8net: skbuff: propagate shared-frag marker through frag-transfer helpers
Assigned by Linux
May 23, 2026
CVE-2026-43501Critical 9.8ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
Assigned by Linux
May 21, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-46333High 7.1ptrace: slightly saner 'get_dumpable()' logic
Assigned by Linux
May 15, 2026
CVE-2026-43329High 7.8netfilter: flowtable: strictly check for maximum number of actions
Assigned by Linux
May 8, 2026
CVE-2026-43284High 8.8xfrm: esp: avoid in-place decrypt on shared skb frags
Assigned by Linux
May 8, 2026
CVE-2026-42011High 7.4Gnutls: gnutls: security bypass due to incorrect name constraint handling
Assigned by redhat
May 7, 2026
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username
Assigned by redhat
May 7, 2026
CVE-2026-43198Critical 9.8tcp: fix potential race in tcp_v6_syn_recv_sock()
Assigned by Linux
May 6, 2026
CVE-2026-43125Critical 9.8dlm: validate length in dlm_search_rsb_tree
Assigned by Linux
May 6, 2026
CVE-2026-43114Critical 9.4netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
Assigned by Linux
May 6, 2026
CVE-2026-43112High 8.8fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
Assigned by Linux
May 6, 2026
CVE-2026-33846High 7.5Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Assigned by redhat
May 4, 2026
CVE-2026-43038Critical 9.8ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
Assigned by Linux
May 1, 2026
CVE-2026-43037Critical 9.8ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Assigned by Linux
May 1, 2026
CVE-2026-31709High 8.8smb: client: validate the whole DACL before rewriting it in cifsacl
Assigned by Linux
May 1, 2026
PreviousPage 2 of 4Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.