Skip to contentRed Hat Enterprise Linux vulnerabilities
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on getannotatestringCVE-2025-31178Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on plot3d_pointsCVE-2025-31176Fix available6.2 Medium
- red hat directory server 12, directory server 12.4 eus for rhel 9, enterprise linux 10 +5 more +7 more389-ds-base: null pointer dereference leads to denial of serviceCVE-2025-2487Fix available4.9 Medium
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpatCVE-2024-8176Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreRing: some aes functions may panic when overflow checking is enabled in ringCVE-2025-4432Fix available5.3 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()CVE-2025-26601Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()CVE-2025-26600Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use of uninitialized pointer in compredirectwindow()CVE-2025-26599Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: out-of-bounds write in createpointerbarrierclient()CVE-2025-26598Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbchangetypesofkey()CVE-2025-26597Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: heap overflow in xkbwritekeysyms()CVE-2025-26596Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbvmodmasktext()CVE-2025-26595Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursorCVE-2025-26594Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds writeCVE-2025-1125Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabledCVE-2025-1118Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: read: integer overflow may lead to out-of-bounds writeCVE-2025-0690Public exploitFix available6.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code executionCVE-2025-0689Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading datCVE-2025-0686Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0685Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0684Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading dataCVE-2025-0678Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinksCVE-2025-0677Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()CVE-2025-0624Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: command/gpg: use-after-free due to hooks not being removed on module unloadCVE-2025-0622Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/hfs+: refcount can be decremented twiceCVE-2024-45783Fix available4.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)CVE-2024-45782Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/ufs: oob write in the heapCVE-2024-45781Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/tar: integer overflow causes heap oob writeCVE-2024-45780Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/bfs: integer overflow leads to heap oob read in the bfs parserCVE-2024-45779Fix available6.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.CVE-2024-45778Fix available4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.CVE-2024-45777Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write and read.CVE-2024-45776Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/extcmd: missing check for failed allocationCVE-2024-45775Fix available5.2 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: reader/jpeg: heap oob write during jpeg parsingCVE-2024-45774Fix available6.7 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- fedora linux, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: secure boot does not automatically enable kernel lockdownCVE-2025-1272Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreKeylime: keylime registrar dos due to incompatible database entry handlingCVE-2025-1057Fix available4.3 Medium
- red hat builds for red hat openshift 1.3.2, enterprise linux 10, enterprise linux 6 +14 more +16 moreEmacs: shell injection vulnerability in gnu emacs via custom "man" uri schemeCVE-2025-1244Fix available8.8 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +20 more +22 moreGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dosCVE-2024-12243Fix available5.3 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +26 more +28 moreLibtasn1: inefficient der decoding in libtasn1 leading to potential remote dosCVE-2024-12133Fix available5.3 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, openshift container platform 4 +2 moreOvn: egress acls may be bypassed via specially crafted udp packetCVE-2025-0650Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 9, openshift container platform 4 +2 more +4 moreUsers: `root` appended to group listingsCVE-2025-5791Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFreeipa: administrative user data leaked through systemd journalCVE-2024-11029Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRuby: openssl: ruby marvin attackCVE-2025-03067.4 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +4 more +6 moreRsync: race condition in rsync handling symbolic linksCVE-2024-12747Fix available5.6 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- Show moreLoading…