Skip to contentRed Hat Enterprise Linux vulnerabilities
- botan project botan, red hat enterprise linux 10 +1 moreBotan has a certificate authentication bypass due to trust anchor confusionCVE-2026-34580Fix available9.3 Critical
- linuxfoundation podman desktop, podman-desktop, red hat build of podman desktop +2 more +4 morePodman Desktop WebView Server ExposedCVE-2026-34045Fix available8.2 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreCockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injectionCVE-2026-4631Public exploitFix availableEPSS 15.5%9.8 Critical
- jackc pgx, github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3, red hat cryostat 4 on rhel 9 +29 more +31 moreCVE-2026-33816 in github.com/jackc/pgxCVE-2026-33816Fix available9.8 Critical
- jackc pgx, github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3, red hat cryostat 4 on rhel 9 +28 more +30 moreCVE-2026-33815 in github.com/jackc/pgxCVE-2026-33815Fix available9.8 Critical
- libarchive, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibarchive: a null pointer dereference vulnerability exists in the acl parser of libarchiveCVE-2026-5745Fix available5.5 Medium
- libraw, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreA heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of...CVE-2026-20911Fix available9.8 Critical
- libraw, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreA heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of...CVE-2026-21413Fix available9.8 Critical
- libraw, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreA heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw...CVE-2026-20889Fix available9.8 Critical
- libraw, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreA heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw...CVE-2026-24660Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2CVE-2026-57359.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2CVE-2026-5734Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-57338.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +19 more +21 moreIncorrect boundary conditions, integer overflow in the Graphics: Text componentCVE-2026-5732Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2CVE-2026-5731Fix available9.8 Critical
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansCVE-2026-34197In KEVPublic exploitFix availableEPSS 98.3%8.8 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: DWA Lossy Decoder Heap Out-of-Bounds WriteCVE-2026-34589Fix available8.4 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +9 more +11 moreOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteCVE-2026-34588Fix available8.6 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)CVE-2026-34379Fix available7.1 High
- gnu tar, red hat discovery 2, enterprise linux 10 +7 more +9 moreTar: tar: hidden file injection via crafted archivesCVE-2026-5704Fix available5.0 Medium
- xiph theora, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibtheora: libtheora: denial of service or information disclosure via malformed avi file processingCVE-2026-5673Fix available5.6 Medium
- vim, red hat ai inference server 3.2, ai inference server 3.3 +26 more +28 moreVim modeline bypass via various options affects Vim < 9.2.0276CVE-2026-34982Fix available8.2 High
- vllm, red hat ai inference server, ai inference server 3.2 +3 more +5 morevLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 ProcessingCVE-2026-34755Fix available6.5 Medium
- sequoia-pgp rpm-sequoia, red hat enterprise linux 10, enterprise linux 9 +2 more +4 moreRust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verificationCVE-2026-2625Fix available4.0 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +3 more +5 morevLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API ServerCVE-2026-34756Fix available6.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +22 more +24 morenfsd: fix heap overflow in NFSv4.0 LOCK replay cacheCVE-2026-31402Public exploitFix available9.8 Critical
- go-jose, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift +110 more +112 moreGo JOSE affect by a panic in JWE decryptionCVE-2026-34986Fix available7.5 High
- sudo project sudo, red hat ai inference server 3.3, enterprise linux 10 +25 more +27 moreIn Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during...CVE-2026-35535Fix available7.4 High
- rack, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +4 more +6 moreRack: Algorithmic-Complexity DoS in Rack::Multipart::ParserCVE-2026-34827Fix available7.5 High
- rack, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +4 more +6 moreRack: Denial of Service via Unbounded Multipart File Upload Without Content-LengthCVE-2026-34829Fix available7.5 High
- openbsd openssh, red hat multicluster engine for kubernetes, openshift pipelines +29 more +31 moreIn OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome...CVE-2026-35385Fix available7.5 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: integer overflow lead to OOB in HTJ2K decoderCVE-2026-34545Fix available8.4 High
- freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 moreLibinput: libinput: information disclosure via dangling pointer in lua plugin handlingCVE-2026-35094Fix available3.3 Low
- freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 moreLibinput: libinput: unauthorized code execution and information disclosure through lua bytecode pluginsCVE-2026-35093Fix available8.8 High
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service via integer overflow in join message validationCVE-2026-35092Fix available7.5 High
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service and information disclosure via crafted udp packetCVE-2026-35091Fix available8.2 High
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moreKVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTECVE-2026-23401Fix available5.5 Medium
- opensc, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreLibopensc: opensc: multiple uses of uninitialized variableCVE-2025-13763Fix available5.7 Medium
- lodash, lodash lodash-amd, lodash-es +105 more +107 morelodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800Public exploitFix available8.1 High
- gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 moreGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageCVE-2026-5201Public exploitFix available7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB WriteCVE-2026-33986Fix available7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP: ClearCodec resize_vbar_entry() Heap OOB WriteCVE-2026-33984Fix available7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoSCVE-2026-33983Fix available6.5 Medium
- vim, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreVim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in...CVE-2026-34714Fix available9.2 Critical
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetCVE-2026-51656.7 Medium
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap requestCVE-2026-51646.7 Medium
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingCVE-2026-5121Fix available7.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreLibsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishmentCVE-2026-5119Fix available5.9 Medium
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +11 more +13 moreHandlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and OptionsCVE-2026-33941Fix available8.3 High
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +10 more +12 moreHandlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partialCVE-2026-33940Fix available8.1 High
- Show moreLoading…