CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

812 CVEs, showing 201 to 250PreviousPage 5 of 17Next
CVESeverityTitlePublished
CVE-2026-86564Low 3.3Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler
Assigned by redhat
Sep 8, 2026
CVE-2026-18090Medium 6.1Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block
Assigned by redhat
Sep 8, 2026
CVE-2026-74860High 8.5Libxml2: double-free/uaf in libxml2 python bindings
Assigned by redhat
Sep 8, 2026
CVE-2026-74859Medium 6.8Gnome-tweaks: path traversal in theme installer
Assigned by redhat
Sep 8, 2026
CVE-2026-76561High 7.2Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)
Assigned by redhat
Sep 8, 2026
CVE-2026-86469Medium 5.3Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path
Assigned by redhat
Sep 7, 2026
CVE-2026-19843High 8.4389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
Assigned by redhat
Sep 7, 2026
CVE-2026-18922Critical 9.8389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property
Assigned by redhat
Sep 7, 2026
CVE-2026-18453High 7.5389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search
Assigned by redhat
Sep 7, 2026
CVE-2026-18355High 7.5389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()
Assigned by redhat
Sep 7, 2026
CVE-2026-76560High 7.5389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
Assigned by redhat
Sep 7, 2026
CVE-2026-79678High 8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
Assigned by redhat
Sep 7, 2026
CVE-2026-76578Critical 9.8Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci
Assigned by redhat
Sep 7, 2026
CVE-2026-76925Medium 5.8Flatpak: flatpak: toctou race condition allows symlink redirection
Assigned by redhat
Sep 4, 2026
CVE-2026-85769Medium 6.5Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
Assigned by redhat
Sep 4, 2026
CVE-2026-85534Medium 5.9Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
Assigned by redhat
Sep 4, 2026
CVE-2026-81666Medium 6.5Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems
Assigned by redhat
Sep 4, 2026
CVE-2026-81665High 7.5Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly
Assigned by redhat
Sep 4, 2026
CVE-2026-85197High 7.6Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
Assigned by redhat
Sep 4, 2026
CVE-2026-84185Medium 5.9Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification
Assigned by redhat
Sep 3, 2026
CVE-2026-71224Medium 4.7Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
Assigned by redhat
Sep 3, 2026
CVE-2026-71222Medium 5.3Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
Assigned by redhat
Sep 3, 2026
CVE-2026-71221High 7.0Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
Assigned by redhat
Sep 3, 2026
CVE-2026-71220High 7.0Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
Assigned by redhat
Sep 3, 2026
CVE-2026-71219Medium 4.7Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
Assigned by redhat
Sep 3, 2026
CVE-2026-85150High 7.5Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header
Assigned by redhat
Sep 3, 2026
CVE-2026-84838High 7.8Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
Assigned by redhat
Sep 2, 2026
CVE-2026-84837High 7.8Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path
Assigned by redhat
Sep 2, 2026
CVE-2026-78409High 7.0Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks
Assigned by redhat
Sep 2, 2026
CVE-2026-78410High 7.8Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
Assigned by redhat
Sep 2, 2026
CVE-2026-78408High 7.9Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
Assigned by redhat
Sep 2, 2026
CVE-2026-53683Medium 4.3Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html
Assigned by redhat
Sep 2, 2026
CVE-2026-84270Medium 4.3Gvfs: mtp: out-of-bounds read in do_read()
Assigned by redhat
Sep 1, 2026
CVE-2026-84269Medium 6.5Gvfs: afp: heap-based buffer overflow in dsi read path
Assigned by redhat
Sep 1, 2026
CVE-2026-84267Medium 4.3Gvfs: sftp: uninitialized heap disclosure in read_string()
Assigned by redhat
Sep 1, 2026
CVE-2026-84268High 8.8Gvfs: sftp: heap-based buffer overflow in read_reply()
Assigned by redhat
Sep 1, 2026
CVE-2026-84233High 7.0Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
Assigned by redhat
Sep 1, 2026
CVE-2026-53682Medium 5.3Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts
Assigned by redhat
Sep 1, 2026
CVE-2026-11873Medium 6.5Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure
Assigned by redhat
Sep 1, 2026
CVE-2026-18743Low 2.5Popt-devel: popt-static: short realloc in poptconfigfiletostring
Assigned by redhat
Sep 1, 2026
CVE-2026-83596High 8.8Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
Assigned by redhat
Aug 31, 2026
CVE-2026-13732High 7.0Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
Assigned by redhat
Aug 31, 2026
CVE-2026-17615High 7.5Resteasy-core: resteasy sourceprovider remote unauthenticated file read
Assigned by redhat
Aug 31, 2026
CVE-2026-81624High 7.5Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite
Assigned by redhat
Aug 31, 2026
CVE-2026-82343Medium 6.1Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
Assigned by redhat
Aug 28, 2026
CVE-2026-82330Medium 6.1Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
Assigned by redhat
Aug 28, 2026
CVE-2026-82328Medium 6.1Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count
Assigned by redhat
Aug 28, 2026
CVE-2026-82327Medium 5.5Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data
Assigned by redhat
Aug 28, 2026
CVE-2026-82324Medium 6.1Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
Assigned by redhat
Aug 28, 2026
CVE-2026-80179Medium 5.9Jwcrypto: jwcrypto: denial of service via malformed jwe tokens
Assigned by redhat
Aug 27, 2026
PreviousPage 5 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.