Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat build of apache camel 4.8 for quarkus 3.15, build of quarkus, build of quarkus 3.15.3.sp1 +4 more +6 moreIo.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeoutCVE-2025-1634Fix available7.5 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()CVE-2025-26601Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()CVE-2025-26600Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use of uninitialized pointer in compredirectwindow()CVE-2025-26599Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: out-of-bounds write in createpointerbarrierclient()CVE-2025-26598Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbchangetypesofkey()CVE-2025-26597Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: heap overflow in xkbwritekeysyms()CVE-2025-26596Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbvmodmasktext()CVE-2025-26595Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursorCVE-2025-26594Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds writeCVE-2025-1125Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabledCVE-2025-1118Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: read: integer overflow may lead to out-of-bounds writeCVE-2025-0690Public exploitFix available6.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code executionCVE-2025-0689Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading datCVE-2025-0686Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0685Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0684Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading dataCVE-2025-0678Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinksCVE-2025-0677Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()CVE-2025-0624Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: command/gpg: use-after-free due to hooks not being removed on module unloadCVE-2025-0622Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/hfs+: refcount can be decremented twiceCVE-2024-45783Fix available4.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)CVE-2024-45782Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/ufs: oob write in the heapCVE-2024-45781Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/tar: integer overflow causes heap oob writeCVE-2024-45780Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/bfs: integer overflow leads to heap oob read in the bfs parserCVE-2024-45779Fix available6.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.CVE-2024-45778Fix available4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.CVE-2024-45777Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write and read.CVE-2024-45776Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/extcmd: missing check for failed allocationCVE-2024-45775Fix available5.2 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: reader/jpeg: heap oob write during jpeg parsingCVE-2024-45774Fix available6.7 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-core: stored xss in keycloak when creating a items in admin consoleCVE-2024-40283.8 Low
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- red hat build of keycloak, build of keycloak 26.0 +1 moreKeycloak-services: improper authorization in keycloak organization mapper allows unauthorized organization claimsCVE-2025-1391Fix available5.4 Medium
- fedora linux, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: secure boot does not automatically enable kernel lockdownCVE-2025-1272Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreKeylime: keylime registrar dos due to incompatible database entry handlingCVE-2025-1057Fix available4.3 Medium
- red hat build of apache camel 4.8 for quarkus 3.15, build of quarkus 3.15.3.sp1, build of quarkus 3.8.6.sp3 +2 moreIo.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instanceCVE-2025-1247Fix available8.3 High
- red hat builds for red hat openshift 1.3.2, enterprise linux 10, enterprise linux 6 +14 more +16 moreEmacs: shell injection vulnerability in gnu emacs via custom "man" uri schemeCVE-2025-1244Fix available8.8 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +20 more +22 moreGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dosCVE-2024-12243Fix available5.3 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +26 more +28 moreLibtasn1: inefficient der decoding in libtasn1 leading to potential remote dosCVE-2024-12133Fix available5.3 Medium
- redhat wildfly, red hat build of keycloak, data grid 8 +14 more +16 moreOrg.wildfly.core:wildfly-server: wildfly improper rbac permissionCVE-2025-23367Fix available6.5 Medium
- red hat openshift gitops 1.14, openshift gitops 1.15, openshift gitops 1.16 +2 moreOpenshift-gitops-operator-container: namespace isolation breakCVE-2024-13484Fix available8.2 High
- red hat openshift service mesh 2Envoyproxy: openshift service mesh 2.6.3 and 2.5.6 envoy header handling allows log injection and potential spoofingCVE-2025-07544.3 Medium
- red hat openshift service mesh 2, redhat openshift service mesh +1 moreEnvoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized accessCVE-2025-07527.1 High
- red hat openshift container platform 4, openshift container platform 4.17, openshift container platform 4.18 +2 moreCri-o: cri-o path traversal in log handling functions allows arbitrary unmountingCVE-2025-0750Fix available6.6 Medium
- red hat data gridOrg.infinispan-infinispan-parent: exposure of sensitive information in application logsCVE-2025-07365.5 Medium
- red hat advanced cluster security 3Rhacs: cross-site scripting in portalCVE-2022-49758.9 High
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, openshift container platform 4 +2 moreOvn: egress acls may be bypassed via specially crafted udp packetCVE-2025-0650Fix available8.1 High
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreKeycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloakCVE-2025-0604Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- Show moreLoading…