CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:ai_inference_server. Show all products

31 CVEs, showing 1 to 31
CVESeverityTitlePublished
CVE-2026-18621High 7.6Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening
Assigned by redhat
Aug 10, 2026
CVE-2026-15588Medium 5.3Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Assigned by redhat
Jul 20, 2026
CVE-2026-16118High 7.1Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Assigned by redhat
Jul 17, 2026
CVE-2026-58015Medium 5.9Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Assigned by redhat
Jun 30, 2026
CVE-2026-58014High 7.3Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Assigned by redhat
Jun 30, 2026
CVE-2026-58013Medium 6.5Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Assigned by redhat
Jun 30, 2026
CVE-2026-58012Medium 6.5Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Assigned by redhat
Jun 30, 2026
CVE-2026-58011Medium 6.5Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Assigned by redhat
Jun 30, 2026
CVE-2026-58010Medium 6.5Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Assigned by redhat
Jun 30, 2026
CVE-2026-14164High 7.5Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
Assigned by redhat
Jun 30, 2026
CVE-2026-56211High 7.1Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Assigned by redhat
Jun 19, 2026
CVE-2026-56210High 7.1Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Assigned by redhat
Jun 19, 2026
CVE-2026-56208High 7.6Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Assigned by redhat
Jun 19, 2026
CVE-2026-56209High 7.1Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
Assigned by redhat
Jun 19, 2026
CVE-2026-48710
Known exploited
Medium 6.5Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Assigned by GitHub_M
May 26, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username
Assigned by redhat
May 7, 2026
CVE-2026-33846High 7.5Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Assigned by redhat
May 4, 2026
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment
Assigned by redhat
Apr 30, 2026
CVE-2026-4878Medium 6.7Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Assigned by redhat
Apr 9, 2026
CVE-2026-5121High 7.5Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Assigned by redhat
Mar 30, 2026
CVE-2026-4424High 7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Assigned by redhat
Mar 19, 2026
CVE-2026-27135High 7.5nghttp2 Denial of service: Assertion failure due to the missing state validation
Assigned by GitHub_M
Mar 18, 2026
CVE-2026-32981High 7.5Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
Assigned by VulnCheck
Mar 17, 2026
CVE-2026-4111High 7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
Assigned by redhat
Mar 13, 2026
CVE-2026-3497Low 2.7Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
Assigned by canonical
Mar 12, 2026
CVE-2025-14831Medium 5.3Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Assigned by redhat
Feb 9, 2026
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026
CVE-2025-14512Medium 6.5Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Assigned by redhat
Dec 11, 2025
CVE-2025-14087Medium 5.6Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Assigned by redhat
Dec 10, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.