Skip to contentRed Hat Enterprise Linux vulnerabilities
- the webkitgtk team webkitgtk, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreWebkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dosCVE-2025-13502Fix available7.5 High
- red hat cert manager support for red hat openshift release 1.18, ceph storage 8, discovery 2 +11 more +13 moreGnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionCVE-2025-9820Fix available4.0 Medium
- keylime project keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreKeylime: keylime: registrar allows identity takeover via duplicate uuid registrationCVE-2025-13609Fix available8.2 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in net_set_vlanCVE-2025-54770Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal_exit command may lead to use-after-freeCVE-2025-61664Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal commands may lead to use-after-freeCVE-2025-61663Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-freeCVE-2025-61662Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: grub2: out-of-bounds write via malicious usb deviceCVE-2025-61661Fix available4.8 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in grub_file_close()CVE-2025-54771Fix available4.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: information disclosure via world-readable vm snapshotsCVE-2025-13193Fix available5.5 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: remote dos via unbounded tcp upstream bufferingCVE-2025-590895.9 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvCVE-2025-590888.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: denial of service in xml parsingCVE-2025-12748Public exploitFix available5.5 Medium
- apple ipados, macos, safari +20 more +22 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2025-43457Fix available6.5 Medium
- apple ipados, macos, safari +8 more +10 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS...CVE-2025-43441Fix available4.3 Medium
- apple ipados, macos, safari +8 more +10 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2025-43438Fix available4.3 Medium
- apple ipados, macos, safari +9 more +11 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.1,...CVE-2025-43433Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeCVE-2025-12464Fix available6.2 Medium
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removalCVE-2025-62230Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 moreXorg: xmayland: use-after-free in xpresentnotify structure creationCVE-2025-62229Fix available7.3 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreLibsoup: heap use-after-free in libsoup message queue handling during http/2 read completionCVE-2025-12105Fix available7.5 High
- latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLuksmeta: data corruption when handling luks1 partitions with luksmetaCVE-2025-11568Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: vfs_streams_xattr uninitialized memory write possibleCVE-2025-9640Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: command injection in wins server hook scriptCVE-2025-10230Public exploitFix availableEPSS 39.8%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibxslt: type confusion in exsltfuncresultcompfunction of libxsltCVE-2025-11731Fix available3.1 Low
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsCVE-2025-11561Fix available8.8 High
- red hat ai inference server, enterprise linux ai (rhel ai) +1 moreVllm: server side request forgery (ssrf) in mediaconnectorCVE-2025-6242Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-freeCVE-2025-11234Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-7493Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: out-of-bounds read in cookie date handling of libsoup http libraryCVE-2025-11021Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()CVE-2025-60019Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"CVE-2025-60018Fix available4.8 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvtCVE-2025-10911Fix available5.5 Medium
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 moreLibtiff: libtiff write-what-whereCVE-2025-9900Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreRhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulationCVE-2025-5962Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: memory exhaustion via repeated key exchange in libsshCVE-2025-8277Fix available3.1 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: improper handling of http vary header in libsoup cachingCVE-2025-99015.9 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 moreUndertow: undertow madeyoureset http/2 ddos vulnerabilityCVE-2025-9784Public exploitFix available7.5 High
- storaged-project udisks, red hat enterprise linux 10, enterprise linux 6 +14 more +16 moreUdisks: out-of-bounds read in udisks daemonCVE-2025-8067Public exploitFix available8.5 High
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructureCVE-2025-11065Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callbackCVE-2025-8860Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreShim: expired secure boot certificateCVE-2023-53424.1 Medium
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-6020CVE-2025-8941Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGlib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()CVE-2025-7039Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd race issue from smb2 close and logoff with multichannelCVE-2023-32256Fix available7.5 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS...CVE-2025-43214Fix available6.5 Medium
- apple ipados, macos, safari +30 more +32 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,...CVE-2025-31277In KEVPublic exploitFix available8.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...CVE-2025-43213Fix available6.5 Medium
- Show moreLoading…