CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

811 CVEs, showing 151 to 200PreviousPage 4 of 17Next
CVESeverityTitlePublished
CVE-2026-91203Medium 6.0Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition
Assigned by redhat
Sep 18, 2026
CVE-2026-91205Medium 6.0Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race
Assigned by redhat
Sep 18, 2026
CVE-2026-92768Medium 5.5Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments
Assigned by redhat
Sep 18, 2026
CVE-2026-92747Medium 5.0Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list
Assigned by redhat
Sep 18, 2026
CVE-2026-92745Medium 5.0Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
Assigned by redhat
Sep 18, 2026
CVE-2026-91142Low 3.6Cockpit: cockpit: unauthorized modification of login records via integer overflow
Assigned by redhat
Sep 18, 2026
CVE-2026-91147Medium 5.9Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash
Assigned by redhat
Sep 18, 2026
CVE-2026-91149High 7.5Cockpit: cockpit: denial of service via unbounded connection thread spawning
Assigned by redhat
Sep 18, 2026
CVE-2026-93676Low 3.2Xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks
Assigned by redhat
Sep 18, 2026
CVE-2026-93653Medium 5.5Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)
Assigned by redhat
Sep 18, 2026
CVE-2026-81627High 8.2Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
Assigned by redhat
Sep 18, 2026
CVE-2026-89058High 7.4Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
Assigned by redhat
Sep 18, 2026
CVE-2026-89059High 7.5Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
Assigned by redhat
Sep 18, 2026
CVE-2026-76781Medium 5.5Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute
Assigned by redhat
Sep 17, 2026
CVE-2026-92925High 7.1Redis: redis: out-of-bounds read via crafted cluster bus packets
Assigned by redhat
Sep 17, 2026
CVE-2026-86320High 7.8Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)
Assigned by redhat
Sep 17, 2026
CVE-2026-42784High 7.4Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
Assigned by redhat
Sep 16, 2026
CVE-2026-92091Medium 5.9Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array
Assigned by redhat
Sep 16, 2026
CVE-2025-11395Medium 5.5Podman: arbitrary file write when importing oci archive
Assigned by redhat
Sep 15, 2026
CVE-2026-92248High 7.8Gimp: integer overflow when generating a thumbnail preview for a psd file
Assigned by redhat
Sep 15, 2026
CVE-2026-85234High 7.5Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine
Assigned by redhat
Sep 15, 2026
CVE-2026-79699Medium 4.4Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory
Assigned by redhat
Sep 15, 2026
CVE-2026-79705Medium 4.5Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers
Assigned by redhat
Sep 15, 2026
CVE-2026-85013High 7.3Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
Assigned by redhat
Sep 15, 2026
CVE-2026-91926Low 3.7Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge
Assigned by redhat
Sep 15, 2026
CVE-2026-91786Medium 6.1Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size
Assigned by redhat
Sep 15, 2026
CVE-2026-75092High 7.3Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins
Assigned by redhat
Sep 15, 2026
CVE-2026-19816High 7.1PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
Assigned by fedora
Sep 14, 2026
CVE-2026-90996Medium 4.0Sssd: sssd: denial of service in nss responder via crafted zero-length requests
Assigned by redhat
Sep 14, 2026
CVE-2026-90995Medium 5.5Sssd: sssd: local denial of service due to null pointer dereference in pam responder
Assigned by redhat
Sep 14, 2026
CVE-2026-90994Medium 4.0Sssd: sssd: denial of service via malformed pam v1 requests
Assigned by redhat
Sep 14, 2026
CVE-2026-90463Medium 4.0Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)
Assigned by redhat
Sep 14, 2026
CVE-2026-90947High 7.8Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file
Assigned by redhat
Sep 14, 2026
CVE-2026-90949High 7.8Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch
Assigned by redhat
Sep 14, 2026
CVE-2026-90948High 7.8Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions
Assigned by redhat
Sep 14, 2026
CVE-2026-89329Medium 6.2Device-mapper-multipath: local denial of service via blocking ipc send operations
Assigned by redhat
Sep 11, 2026
CVE-2026-18495Medium 6.1Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
Assigned by redhat
Sep 11, 2026
CVE-2026-77159Medium 5.5Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink
Assigned by redhat
Sep 11, 2026
CVE-2026-88914Medium 4.4Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser
Assigned by redhat
Sep 11, 2026
CVE-2026-88924High 7.0Gvfs: gvfs-admin socket ownership race permits local root
Assigned by redhat
Sep 10, 2026
CVE-2026-88859Medium 6.3Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction
Assigned by redhat
Sep 10, 2026
CVE-2026-84828
Healthcare
Medium 6.5Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
Assigned by redhat
Sep 10, 2026
CVE-2026-88265Medium 5.6Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown
Assigned by redhat
Sep 10, 2026
CVE-2026-88264Medium 5.6Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
Assigned by redhat
Sep 10, 2026
CVE-2026-84042High 7.8Crun: crun: rootful krun with passt executes container payload as host root
Assigned by redhat
Sep 10, 2026
CVE-2026-18147High 8.1Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url
Assigned by redhat
Sep 9, 2026
CVE-2026-87876Low 3.0Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)
Assigned by redhat
Sep 9, 2026
CVE-2026-87875Medium 4.3Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
Assigned by redhat
Sep 9, 2026
CVE-2026-87853High 7.5Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation
Assigned by redhat
Sep 9, 2026
CVE-2026-87766High 8.8Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
Assigned by redhat
Sep 9, 2026
PreviousPage 4 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.