Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in libsoup may lead to denial of serviceCVE-2025-4476Public exploitFix available4.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of serviceCVE-2025-4478Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreNbd: nbdkit: integer overflow triggers an assertion resulting in denial of serviceCVE-2025-47712Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of serviceCVE-2025-47711Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreYggdrasil: local privilege escalation in yggdrasilCVE-2025-39317.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS...CVE-2025-31223Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub allow access to encrypted device through cli once root device is unlocked via tpmCVE-2025-4382Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: cookie domain validation bypass via uppercase characters in libsoupCVE-2025-4035Fix available4.3 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGlib: glib crash after long command lineCVE-2025-4056Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverCVE-2025-46421Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cCVE-2025-46420Fix available6.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev segmentation fault in read_arcobjectCVE-2025-46400Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: transfig: fig2dev segmentation fault vulnerabilityCVE-2025-46399Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev stack-overflow via read_objectsCVE-2025-46398Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreXfig: xfig: stack-overflow allows possible code execution via local input manipulationCVE-2025-46397Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 9, enterprise linux 9.4 extended update support +2 more +4 moreMod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requestsCVE-2024-10306Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueCVE-2025-32911Fix available9.0 Critical
- red hat discovery 2, enterprise linux 10, enterprise linux 6 +26 more +28 moreKrb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processCVE-2025-32914Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authenticationCVE-2025-32912Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di…CVE-2025-32910Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.cCVE-2025-32909Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: denial of service on libsoup through http/2 serverCVE-2025-32908Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: denial of service in server when client requests a large amount of overlapping ranges with range headerCVE-2025-32907Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: out of bounds reads in soup_headers_parse_request()CVE-2025-32906Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerCVE-2025-32913Fix available7.5 High
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`CVE-2025-3416Fix available3.7 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +8 more +10 moreCrossbeam-channel: crossbeam-channel vulnerable to double free on dropCVE-2025-4574Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +22 more +24 moreGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().CVE-2025-3360Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()CVE-2025-32053Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflow in sniff_unknown()CVE-2025-32052Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: segmentation fault when parsing malformed data uriCVE-2025-32051Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: integer overflow in append_param_quotedCVE-2025-32050Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: denial of service attack to websocket serverCVE-2025-32049Fix available7.5 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentCVE-2025-2784Fix available7.0 High
- red hat directory server 12, directory server 12.4 eus for rhel 9, enterprise linux 10 +5 more +7 more389-ds-base: null pointer dereference leads to denial of serviceCVE-2025-2487Fix available4.9 Medium
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpatCVE-2024-8176Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreRing: some aes functions may panic when overflow checking is enabled in ringCVE-2025-4432Fix available5.3 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()CVE-2025-26601Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()CVE-2025-26600Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use of uninitialized pointer in compredirectwindow()CVE-2025-26599Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: out-of-bounds write in createpointerbarrierclient()CVE-2025-26598Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbchangetypesofkey()CVE-2025-26597Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: heap overflow in xkbwritekeysyms()CVE-2025-26596Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbvmodmasktext()CVE-2025-26595Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursorCVE-2025-26594Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds writeCVE-2025-1125Fix available7.8 High
- Show moreLoading…