CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 28, 2026, 11:50 PM ET)

What this means for you

This week: 3,093 CVEs published, 234 critical, and 4 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,093; Show in the list
Critical, last 7 days: 234; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product redhat:enterprise_linux_workstation. Show all products

95 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2024-1086 Known exploited	High 7.8	Use-after-free in Linux kernel's netfilter: nf_tables component Assigned by Google	Jan 31, 2024
CVE-2019-8720 Known exploited	High 8.8	A vulnerability was found in WebKit. Assigned by redhat	Mar 5, 2023
CVE-2021-4034 Known exploited	High 7.8	A local privilege escalation vulnerability was found on polkit's pkexec utility. Assigned by redhat	Jan 27, 2022
CVE-2021-40438 Known exploited	Critical 9.0	mod_proxy SSRF Assigned by apache	Sep 16, 2021
CVE-2020-10531	High 8.8	An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. Assigned by mitre	Mar 12, 2020
CVE-2020-6418 Known exploited	High 8.8	Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Feb 27, 2020
CVE-2019-19925	High 7.5	zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. Assigned by mitre	Dec 24, 2019
CVE-2019-19923	High 7.5	flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. Assigned by mitre	Dec 24, 2019
CVE-2019-19926	High 7.5	multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. Assigned by mitre	Dec 22, 2019
CVE-2019-8506 Known exploited	High 8.8	A type confusion issue was addressed with improved memory handling. Assigned by apple	Dec 18, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.