CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 08:40 UTC)

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product suse:linux_enterprise_workstation_extension. Show all products

14 CVEs, showing 1 to 14

CVE	Severity	Title	Published
CVE-2026-31431 Known exploited	High 7.8	crypto: algif_aead - Revert to operating out-of-place Assigned by Linux	Apr 22, 2026
CVE-2021-4034 Known exploited	High 7.8	A local privilege escalation vulnerability was found on polkit's pkexec utility. Assigned by redhat	Jan 28, 2022
CVE-2016-4171 Known exploited	High 7.8	Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. Assigned by adobe	Jun 16, 2016
CVE-2016-4117 Known exploited	High 7.8	Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. Assigned by adobe	May 11, 2016
CVE-2016-3718 Known exploited	Medium 5.5	The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image. Assigned by redhat	May 5, 2016
CVE-2016-3715 Known exploited	Medium 5.5	The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. Assigned by redhat	May 5, 2016
CVE-2015-8651 Known exploited	High 8.8	Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20… Assigned by adobe	Dec 28, 2015
CVE-2015-7645 Known exploited	High 7.8	Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF f… Assigned by adobe	Oct 15, 2015
CVE-2015-5123 Known exploited	High 7.8	Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows a… Assigned by adobe	Jul 14, 2015
CVE-2015-5122 Known exploited	High 7.8	Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Window… Assigned by adobe	Jul 14, 2015
CVE-2015-5119 Known exploited	High 7.8	Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x t… Assigned by adobe	Jul 8, 2015
CVE-2015-3113 Known exploited	High 7.8	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbi… Assigned by adobe	Jun 23, 2015
CVE-2015-0313 Known exploited	High 7.8	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute ar… Assigned by adobe	Feb 2, 2015
CVE-2015-0311 Known exploited	High 7.8	Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute… Assigned by adobe	Jan 23, 2015

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.