Skip to contentRed Hat Enterprise Linux 9.4 Extended Update Support vulnerabilities
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: remote dos via unbounded tcp upstream bufferingCVE-2025-590895.9 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvCVE-2025-590888.6 High
- apple ipados, macos, safari +20 more +22 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2025-43457Fix available6.5 Medium
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removalCVE-2025-62230Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 moreXorg: xmayland: use-after-free in xpresentnotify structure creationCVE-2025-62229Fix available7.3 High
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsCVE-2025-11561Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-freeCVE-2025-11234Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-7493Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: out-of-bounds read in cookie date handling of libsoup http libraryCVE-2025-11021Fix available7.5 High
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 moreLibtiff: libtiff write-what-whereCVE-2025-9900Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- storaged-project udisks, red hat enterprise linux 10, enterprise linux 6 +14 more +16 moreUdisks: out-of-bounds read in udisks daemonCVE-2025-8067Public exploitFix available8.5 High
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-6020CVE-2025-8941Fix available7.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS...CVE-2025-43214Fix available6.5 Medium
- apple ipados, macos, safari +30 more +32 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,...CVE-2025-31277In KEVPublic exploitFix available8.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...CVE-2025-43213Fix available6.5 Medium
- red hat ceph storage 7, discovery 2, enterprise linux 10 +11 more +13 moreGnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()CVE-2025-6395Fix available6.5 Medium
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrCVE-2025-7425Fix available7.8 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufCVE-2025-7345Fix available7.5 High
- libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreLibssh: invalid return code for chacha20 poly1305 with openssl backendCVE-2025-5987Fix available8.1 High
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: podman missing tls verificationCVE-2025-6032Fix available8.3 High
- red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1, discovery 2 +33 more +35 moreLinux-pam: linux-pam directory traversalCVE-2025-6020Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +10 more +12 moreLibblockdev: lpe from allow_active to root in libblockdev via udisksCVE-2025-6019Public exploitFix available7.0 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionCVE-2025-49180Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionCVE-2025-49179Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignoreCVE-2025-49178Fix available5.5 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodeCVE-2025-49177Fix available6.1 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionCVE-2025-49176Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsCVE-2025-49175Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-4404Public exploitFix available9.1 Critical
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple use after free in xcf parserCVE-2025-48798Fix available7.3 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple heap buffer overflows in tga parserCVE-2025-48797Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag functionCVE-2025-5222Public exploitFix available7.0 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.2 advanced update support +11 more +13 moreGnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdusCVE-2025-5024Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: integer overflow in cookie expiration date handling in libsoupCVE-2025-4945Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupCVE-2025-4948Fix available7.5 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS...CVE-2025-31223Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Fix available4.8 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverCVE-2025-46421Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cCVE-2025-46420Fix available6.5 Medium
- Show moreLoading…