CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,500
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:rhel_tus. Show all products

120 CVEs, showing 101 to 120PreviousPage 3 of 3
CVESeverityTitlePublished
CVE-2025-9566High 8.1Podman: podman kube play command may overwrite host files
Assigned by redhat
Sep 5, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-7425High 7.8Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Assigned by redhat
Jul 10, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-49794Critical 9.1Libxml: heap use after free (uaf) leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025
CVE-2025-49796Critical 9.1Libxml: type confusion leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2025-5914High 7.8Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Assigned by redhat
Jun 9, 2025
CVE-2025-4373Medium 4.8Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
Assigned by redhat
May 6, 2025
CVE-2024-8176High 7.5Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Assigned by redhat
Mar 14, 2025
CVE-2025-0624High 7.6Grub2: net: out-of-bounds write in grub_net_search_config_file()
Assigned by redhat
Feb 19, 2025
CVE-2024-12133Medium 5.3Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Assigned by redhat
Feb 10, 2025
CVE-2024-11218High 8.6Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
Assigned by redhat
Jan 22, 2025
CVE-2024-12085High 7.5Rsync: info leak via uninitialized stack contents
Assigned by redhat
Jan 14, 2025
CVE-2024-9355Medium 6.5Golang-fips: golang fips zeroed buffer
Assigned by redhat
Oct 1, 2024
CVE-2023-5178High 8.8Kernel: use after free in nvmet_tcp_free_crypto in nvme
Assigned by redhat
Nov 1, 2023
CVE-2023-42753High 7.0Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Assigned by redhat
Sep 25, 2023
CVE-2023-4459Medium 5.5Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
Assigned by redhat
Aug 21, 2023
CVE-2023-4004High 7.8Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Assigned by redhat
Jul 31, 2023
PreviousPage 3 of 3

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.