CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 28, 2026, 2:50 PM ET)

What this means for you

This week: 3,191 CVEs published, 243 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,191; Show in the list
Critical, last 7 days: 243; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,760; Show in the list

Showing CVEs that name the product gnu:glibc. Show all products

48 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2016-10228	Medium 5.9	The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an… Assigned by mitre	Mar 1, 2017
CVE-2018-19591	High 7.5	In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. Assigned by mitre	Dec 4, 2018
CVE-2019-6488	High 7.8	The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which ca… Assigned by mitre	Jan 18, 2019
CVE-2016-10739	Medium 5.3	In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, whic… Assigned by mitre	Jan 21, 2019
CVE-2019-7309	Medium 5.5	In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significan… Assigned by mitre	Feb 2, 2019
CVE-2019-9169	Critical 9.8	In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. Assigned by mitre	Feb 25, 2019
CVE-2019-1010022	Critical 9.8	GNU Libc current is affected by: Mitigation bypass. Assigned by dwf	Jul 14, 2019
CVE-2019-1010024	Medium 5.3	GNU Libc current is affected by: Mitigation bypass. Assigned by dwf	Jul 14, 2019
CVE-2019-1010023	Medium 5.4	GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. Assigned by dwf	Jul 14, 2019
CVE-2019-1010025	Medium 5.3	GNU Libc current is affected by: Mitigation bypass. Assigned by dwf	Jul 14, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.