CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux_eus. Show all products

199 CVEs, showing 101 to 150PreviousPage 3 of 4Next
CVESeverityTitlePublished
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment
Assigned by redhat
Apr 30, 2026
CVE-2026-3832Low 3.7Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
Assigned by redhat
Apr 30, 2026
CVE-2026-3833Medium 6.5Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Assigned by redhat
Apr 30, 2026
CVE-2026-31607Critical 9.8usbip: validate number_of_packets in usbip_pack_ret_submit()
Assigned by Linux
Apr 24, 2026
CVE-2026-31488High 7.8drm/amd/display: Do not skip unrelated mode changes in DSC validation
Assigned by Linux
Apr 22, 2026
CVE-2026-31474High 7.8can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
Assigned by Linux
Apr 22, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-32203High 7.5.NET and Visual Studio Denial of Service Vulnerability
Assigned by microsoft
Apr 14, 2026
CVE-2026-26171High 7.5.NET Denial of Service Vulnerability
Assigned by microsoft
Apr 14, 2026
CVE-2026-33116High 7.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Assigned by microsoft
Apr 14, 2026
CVE-2026-32178High 7.5.NET Spoofing Vulnerability
Assigned by microsoft
Apr 14, 2026
CVE-2026-31419High 7.8net: bonding: fix use-after-free in bond_xmit_broadcast()
Assigned by Linux
Apr 13, 2026
CVE-2026-34486
Known exploited
High 7.5Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
Assigned by apache
Apr 9, 2026
CVE-2026-4878Medium 6.7Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Assigned by redhat
Apr 9, 2026
CVE-2026-4631Critical 9.8Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
Assigned by redhat
Apr 7, 2026
CVE-2026-31402Critical 9.8nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
Assigned by Linux
Apr 3, 2026
CVE-2026-4800High 8.1lodash vulnerable to Code Injection via `_.template` imports key names
Assigned by openjs
Mar 31, 2026
CVE-2026-21710High 7.5A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.Mar 30, 2026
CVE-2026-4424High 7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Assigned by redhat
Mar 19, 2026
CVE-2026-27135High 7.5nghttp2 Denial of service: Assertion failure due to the missing state validation
Assigned by GitHub_M
Mar 18, 2026
CVE-2026-4111High 7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
Assigned by redhat
Mar 13, 2026
CVE-2026-3497Low 2.7Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
Assigned by canonical
Mar 12, 2026
CVE-2026-23111High 7.8netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
Assigned by Linux
Feb 13, 2026
CVE-2025-14831Medium 5.3Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Assigned by redhat
Feb 9, 2026
CVE-2026-1709Critical 9.8A flaw was found in Keylime.Feb 6, 2026
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026
CVE-2025-13465Medium 6.9Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Assigned by openjs
Jan 21, 2026
CVE-2025-14512Medium 6.5Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Assigned by redhat
Dec 11, 2025
CVE-2025-14087Medium 5.6Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Assigned by redhat
Dec 10, 2025
CVE-2025-61662High 7.8Grub2: missing unregister call for gettext command may lead to use-after-free
Assigned by redhat
Nov 18, 2025
CVE-2025-62230High 7.3A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.Oct 30, 2025
CVE-2025-62231High 7.3A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.Oct 30, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-5987High 8.1Libssh: invalid return code for chacha20 poly1305 with openssl backend
Assigned by redhat
Jul 7, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2024-12085High 7.5Rsync: info leak via uninitialized stack contents
Assigned by redhat
Jan 14, 2025
CVE-2024-6387High 8.1Openssh: regresshion - race condition in ssh allows rce/dos
Assigned by redhat
Jul 1, 2024
CVE-2023-6606High 7.1Kernel: out-of-bounds read vulnerability in smbcalcsize
Assigned by redhat
Dec 8, 2023
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-4813Medium 5.9Glibc: potential use-after-free in gaih_inet()
Assigned by redhat
Sep 12, 2023
CVE-2019-8720
Known exploited
High 8.8A vulnerability was found in WebKit.
Assigned by redhat
Mar 6, 2023
CVE-2022-0847
Known exploited
High 7.8A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
Assigned by redhat
Mar 7, 2022
CVE-2021-3733Medium 6.5There's a flaw in urllib's AbstractBasicAuthHandler class.
Assigned by redhat
Mar 7, 2022
CVE-2022-0492
Known exploited
High 7.8A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.
Assigned by redhat
Mar 3, 2022
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 28, 2022
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2019-19906High 7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.
Assigned by mitre
Dec 19, 2019
CVE-2019-5010High 7.5An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6.Oct 31, 2019
PreviousPage 3 of 4Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.