Skip to contentRed Hat Enterprise Linux 8 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-freeCVE-2025-11234Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-7493Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: out-of-bounds read in cookie date handling of libsoup http libraryCVE-2025-11021Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()CVE-2025-60019Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"CVE-2025-60018Fix available4.8 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvtCVE-2025-10911Fix available5.5 Medium
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 moreLibtiff: libtiff write-what-whereCVE-2025-9900Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: memory exhaustion via repeated key exchange in libsshCVE-2025-8277Fix available3.1 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: improper handling of http vary header in libsoup cachingCVE-2025-99015.9 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 moreUndertow: undertow madeyoureset http/2 ddos vulnerabilityCVE-2025-9784Public exploitFix available7.5 High
- storaged-project udisks, red hat enterprise linux 10, enterprise linux 6 +14 more +16 moreUdisks: out-of-bounds read in udisks daemonCVE-2025-8067Public exploitFix available8.5 High
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructureCVE-2025-11065Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callbackCVE-2025-8860Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreShim: expired secure boot certificateCVE-2023-53424.1 Medium
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-6020CVE-2025-8941Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGlib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()CVE-2025-7039Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd race issue from smb2 close and logoff with multichannelCVE-2023-32256Fix available7.5 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS...CVE-2025-43214Fix available6.5 Medium
- apple ipados, macos, safari +30 more +32 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,...CVE-2025-31277In KEVPublic exploitFix available8.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...CVE-2025-43213Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreNetavark: podman: netavark may resolve hostnames to unexpected hostsCVE-2025-8283Fix available3.7 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: null pointer dereference in libssh kex session id calculationCVE-2025-8114Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolkit: xml policy file with a large number of nested elements may lead to out-of-bounds writeCVE-2025-7519Fix available6.7 Medium
- red hat ceph storage 7, discovery 2, enterprise linux 10 +11 more +13 moreGnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()CVE-2025-6395Fix available6.5 Medium
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodesCVE-2025-7424Fix available7.5 High
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrCVE-2025-7425Fix available7.8 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufCVE-2025-7345Fix available7.5 High
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timingCVE-2026-42246Fix available7.6 High
- libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreLibssh: invalid return code for chacha20 poly1305 with openssl backendCVE-2025-5987Fix available8.1 High
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: integer overflow in libssh sftp server packet length validation leading to denial of serviceCVE-2025-5449Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libsshCVE-2025-5372Fix available5.0 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: double free vulnerability in libssh key export functionsCVE-2025-5351Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: use of uninitialized variable in privatekey_from_file()CVE-2025-4878Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: write beyond bounds in binary to base64 conversion functionsCVE-2025-4877Fix available4.5 Medium
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: podman missing tls verificationCVE-2025-6032Fix available8.3 High
- suse pam-config, red hat enterprise linux 7, enterprise linux 8 +1 more +3 morePam-config: lpe from unprivileged to allow_active in pamCVE-2025-6018Public exploitFix available7.8 High
- gnome gdkpixbuf, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoderCVE-2025-6199Fix available3.3 Low
- red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1, discovery 2 +33 more +35 moreLinux-pam: linux-pam directory traversalCVE-2025-6020Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +10 more +12 moreLibblockdev: lpe from allow_active to root in libblockdev via udisksCVE-2025-6019Public exploitFix available7.0 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionCVE-2025-49180Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionCVE-2025-49179Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignoreCVE-2025-49178Fix available5.5 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodeCVE-2025-49177Fix available6.1 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionCVE-2025-49176Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsCVE-2025-49175Fix available6.1 Medium
- Show moreLoading…