CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,511
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

832 CVEs, showing 351 to 400PreviousPage 8 of 17Next
CVESeverityTitlePublished
CVE-2026-58218Medium 5.3Samba: dns signing dos via tkey name cache exhaustion
Assigned by redhat
Jul 30, 2026
CVE-2026-18369Medium 5.8Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects
Assigned by redhat
Jul 30, 2026
CVE-2026-16531Medium 5.3Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet
Assigned by redhat
Jul 30, 2026
CVE-2026-16530Medium 6.5Pcp: pcp: remote denial of service and information leakage
Assigned by redhat
Jul 30, 2026
CVE-2026-16529High 7.5Pcp: pcp: denial of service due to signed integer overflow
Assigned by redhat
Jul 30, 2026
CVE-2026-16527High 7.3Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
Assigned by redhat
Jul 30, 2026
CVE-2026-16526High 8.8Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
Assigned by redhat
Jul 30, 2026
CVE-2026-16524High 7.8Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection
Assigned by redhat
Jul 30, 2026
CVE-2026-18220High 7.8Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing
Assigned by redhat
Jul 29, 2026
CVE-2026-18107High 7.8Criu: criu: container escape via rseq critical section hijack during checkpoint/restore
Assigned by redhat
Jul 28, 2026
CVE-2026-16313High 7.6Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
Assigned by redhat
Jul 28, 2026
CVE-2026-18047Medium 6.5Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash
Assigned by redhat
Jul 28, 2026
CVE-2026-17072Low 3.3Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers
Assigned by redhat
Jul 28, 2026
CVE-2026-66759High 7.1Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images
Assigned by redhat
Jul 27, 2026
CVE-2026-66757Medium 5.5Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images
Assigned by redhat
Jul 27, 2026
CVE-2026-66758High 7.8Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images
Assigned by redhat
Jul 27, 2026
CVE-2026-15003Medium 5.6Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
Assigned by redhat
Jul 27, 2026
CVE-2026-66339Medium 6.5A flaw was found in libsoup.Jul 24, 2026
CVE-2026-66338High 7.2A flaw was found in libsoup.Jul 24, 2026
CVE-2026-66337Medium 6.5A flaw was found in libsoup.Jul 24, 2026
CVE-2026-12548Medium 4.2A heap out-of-bounds read flaw was found in libsoup.Jul 21, 2026
CVE-2026-59851High 8.8A flaw was found in libssh.Jul 21, 2026
CVE-2026-59850High 7.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59849High 7.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59848Medium 5.3A flaw was found in libssh.Jul 21, 2026
CVE-2026-59847High 7.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59846Low 3.9A flaw was found in libssh.Jul 21, 2026
CVE-2026-59845Medium 5.9A flaw was found in libssh.Jul 21, 2026
CVE-2026-59844Medium 6.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59843Medium 6.5A flaw was found in libssh.Jul 21, 2026
CVE-2026-59842Medium 5.3A flaw was found in libssh.Jul 21, 2026
CVE-2026-15370High 7.3A flaw was found in libssh.Jul 21, 2026
CVE-2026-15588Medium 5.3Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Assigned by redhat
Jul 20, 2026
CVE-2026-16118High 7.1Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Assigned by redhat
Jul 17, 2026
CVE-2026-15028Low 3.9Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
Assigned by redhat
Jul 10, 2026
CVE-2026-15041Low 3.7A flaw was found in 389 Directory Server.Jul 8, 2026
CVE-2026-14969Medium 4.4A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged fil…Jul 7, 2026
CVE-2026-14940Medium 5.3A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base).Jul 7, 2026
CVE-2026-14476High 8.0Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
Assigned by redhat
Jul 7, 2026
CVE-2026-14474High 8.8Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
Assigned by redhat
Jul 7, 2026
CVE-2026-58384High 7.3Gimp: gimp: integer overflow in read_rle_channel()
Assigned by redhat
Jul 7, 2026
CVE-2026-59089Medium 5.5A flaw was found in GIMP.Jul 6, 2026
CVE-2026-58380High 7.3Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()
Assigned by redhat
Jul 6, 2026
CVE-2026-58379High 7.3Gimp: gimp: heap buffer overflow in read_channel_data()
Assigned by redhat
Jul 3, 2026
CVE-2026-58381High 7.3A flaw was found in GIMP's PSP file format parser.Jul 2, 2026
CVE-2026-58016High 7.5Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Assigned by redhat
Jun 30, 2026
CVE-2026-58015Medium 5.9Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Assigned by redhat
Jun 30, 2026
CVE-2026-58014High 7.3Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Assigned by redhat
Jun 30, 2026
CVE-2026-58013Medium 6.5Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Assigned by redhat
Jun 30, 2026
CVE-2026-58012Medium 6.5Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Assigned by redhat
Jun 30, 2026
PreviousPage 8 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.