CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

806 CVEs, showing 101 to 150PreviousPage 3 of 17Next
CVESeverityTitlePublished
CVE-2026-86345Critical 9.0389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result
Assigned by redhat
Oct 1, 2026
CVE-2026-86344High 7.5389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue
Assigned by redhat
Oct 1, 2026
CVE-2026-103641Medium 5.5Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder
Assigned by redhat
Oct 1, 2026
CVE-2026-103399Medium 5.3Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body
Assigned by redhat
Sep 30, 2026
CVE-2026-103242High 7.1Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag
Assigned by redhat
Sep 30, 2026
CVE-2026-102560High 8.6Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Assigned by redhat
Sep 29, 2026
CVE-2026-102559High 8.6Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
Assigned by redhat
Sep 29, 2026
CVE-2026-102558High 8.6Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
Assigned by redhat
Sep 29, 2026
CVE-2026-102555High 8.2Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
Assigned by redhat
Sep 29, 2026
CVE-2026-102557High 8.6Libsoup: libsoup: heap buffer overflow during websocket message reassembly
Assigned by redhat
Sep 29, 2026
CVE-2026-102556High 8.6Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
Assigned by redhat
Sep 29, 2026
CVE-2026-95520High 7.1Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
Assigned by redhat
Sep 29, 2026
CVE-2026-102474Medium 4.0Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation
Assigned by redhat
Sep 29, 2026
CVE-2026-102473Medium 5.5Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled
Assigned by redhat
Sep 29, 2026
CVE-2026-97029Medium 5.7Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group
Assigned by redhat
Sep 29, 2026
CVE-2026-97024High 7.1Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc
Assigned by redhat
Sep 29, 2026
CVE-2026-97027Low 3.6Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files
Assigned by redhat
Sep 28, 2026
CVE-2026-97026Low 3.9Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Assigned by redhat
Sep 28, 2026
CVE-2026-97025Low 3.2Flatpak: flatpak: world-readable oci authentication token in system-helper cache path
Assigned by redhat
Sep 28, 2026
CVE-2026-102010High 7.0Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Assigned by redhat
Sep 28, 2026
CVE-2026-97023High 7.1Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin
Assigned by redhat
Sep 28, 2026
CVE-2026-96284Low 2.5Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following
Assigned by redhat
Sep 27, 2026
CVE-2026-96282Low 3.1Flatpak: flatpak: extension metadata path traversal file existence oracle
Assigned by redhat
Sep 27, 2026
CVE-2026-96283Low 3.3Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull
Assigned by redhat
Sep 27, 2026
CVE-2026-96281Medium 6.2Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes
Assigned by redhat
Sep 27, 2026
CVE-2026-96280High 7.5Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems
Assigned by redhat
Sep 27, 2026
CVE-2026-96279Medium 6.5Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks
Assigned by redhat
Sep 27, 2026
CVE-2026-93834High 8.8Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
Assigned by redhat
Sep 25, 2026
CVE-2026-95521High 7.8Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
Assigned by redhat
Sep 24, 2026
CVE-2026-95519High 7.8Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)
Assigned by redhat
Sep 24, 2026
CVE-2026-97185High 7.8Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file
Assigned by redhat
Sep 24, 2026
CVE-2026-96889High 7.8Librsvg: use-after-free when xml includes have duplicated entities
Assigned by redhat
Sep 23, 2026
CVE-2026-96546Low 2.5Gimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loader
Assigned by redhat
Sep 23, 2026
CVE-2026-96545Medium 4.4Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loader
Assigned by redhat
Sep 23, 2026
CVE-2026-96541High 7.5Gnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadline
Assigned by redhat
Sep 23, 2026
CVE-2026-96276Medium 6.5Flatpak: flatpak: arbitrary write in host context via flatpak build-init
Assigned by redhat
Sep 23, 2026
CVE-2026-96275High 8.8Flatpak: flatpak: arbitrary write access as root via extra-data extraction
Assigned by redhat
Sep 23, 2026
CVE-2026-96512High 7.8Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization
Assigned by redhat
Sep 23, 2026
CVE-2026-96442High 7.8Emacs: emacs: arbitrary code execution in flymake mode
Assigned by redhat
Sep 23, 2026
CVE-2026-90462Medium 5.4Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
Assigned by redhat
Sep 22, 2026
CVE-2026-94640High 7.5Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
Assigned by redhat
Sep 22, 2026
CVE-2026-95619High 7.7Gcc: libstdc++ integer overflow in `new` operator
Assigned by redhat
Sep 22, 2026
CVE-2026-95508High 7.4Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu
Assigned by redhat
Sep 22, 2026
CVE-2026-93433Medium 5.5Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
Assigned by redhat
Sep 21, 2026
CVE-2026-92382Medium 4.1Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write
Assigned by redhat
Sep 21, 2026
CVE-2026-94184Medium 5.3Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
Assigned by redhat
Sep 21, 2026
CVE-2026-80110High 8.1Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint
Assigned by redhat
Sep 21, 2026
CVE-2026-92574High 8.8Cri-o: cri-o checkpoint restore bypasses destination security context
Assigned by redhat
Sep 21, 2026
CVE-2026-91202Medium 6.1Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste
Assigned by redhat
Sep 18, 2026
CVE-2026-91203Medium 6.0Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition
Assigned by redhat
Sep 18, 2026
PreviousPage 3 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.