Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeCVE-2025-12464Fix available6.2 Medium
- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsCVE-2025-13327Fix available6.3 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streamsCVE-2025-99086.7 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreEvent-driven-ansible: event stream test mode exposes sensitive headers in aap edaCVE-2025-99076.7 Medium
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.0 +2 moreOpenshift-ai: trusty ai grants all authenticated users to list pods in any namespaceCVE-2025-121035.0 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreOrg.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session idCVE-2025-12390Fix available6.0 Medium
- keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.4 +2 moreOrg.keycloak/keycloak-quarkus-server: unable to restrict access to the admin consoleCVE-2025-10939Fix available3.7 Low
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removalCVE-2025-62230Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 moreXorg: xmayland: use-after-free in xpresentnotify structure creationCVE-2025-62229Fix available7.3 High
- red hat build of keycloak 26.0, build of keycloak 26.0.16, build of keycloak 26.2 +1 more +3 moreKeycloak: keycloak tls client-initiated renegotiation denial of serviceCVE-2025-11419Fix available7.5 High
- red hat openshift virtualization 4, rhel-8-cnv-4.12, rhel-9-cnv-4.14 +4 more +6 moreContainer-native-virtualization: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578486.4 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreKeycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removedCVE-2025-12110Fix available5.4 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 moreKeycloak-server: too long and not settings compliant sessionCVE-2025-11429Fix available5.4 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreLibsoup: heap use-after-free in libsoup message queue handling during http/2 read completionCVE-2025-12105Fix available7.5 High
- apache activemq-artemis, red hat amq broker 7, rhel-9 based middleware containers +2 moreAmq: privilege escalation via excessive /etc/passwd permissionsCVE-2025-587126.4 Medium
- latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLuksmeta: data corruption when handling luks1 partitions with luksmetaCVE-2025-11568Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: vfs_streams_xattr uninitialized memory write possibleCVE-2025-9640Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: command injection in wins server hook scriptCVE-2025-10230Public exploitFix availableEPSS 39.8%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibxslt: type confusion in exsltfuncresultcompfunction of libxsltCVE-2025-11731Fix available3.1 Low
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsCVE-2025-11561Fix available8.8 High
- red hat ai inference server, enterprise linux ai (rhel ai) +1 moreVllm: server side request forgery (ssrf) in mediaconnectorCVE-2025-6242Fix available7.1 High
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8.1 +1 more +3 moreNodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflictCVE-2025-13033Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-freeCVE-2025-11234Fix available7.5 High
- opendatahub-io opendatahub-operator, red hat openshift ai 2.16, openshift ai 2.19 +3 more +5 moreOpenshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster adminCVE-2025-10725Public exploit9.9 Critical
- red hat openshift ai 2.16, openshift ai 2.19, openshift ai 2.21 +2 more +4 moreOpenshift-ai: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578526.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-7493Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: out-of-bounds read in cookie date handling of libsoup http libraryCVE-2025-11021Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()CVE-2025-60019Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"CVE-2025-60018Fix available4.8 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvtCVE-2025-10911Fix available5.5 Medium
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 moreLibtiff: libtiff write-what-whereCVE-2025-9900Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreRhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulationCVE-2025-5962Fix available7.7 High
- red hat openshift service mesh 3Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptionsCVE-2025-11060Fix available5.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: memory exhaustion via repeated key exchange in libsshCVE-2025-8277Fix available3.1 Low
- keycloak, red hat build of keycloak 26.0, build of keycloak 26.0.17 +2 more +4 moreKeycloak: keycloak error_description injection on error pagesCVE-2025-10044Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: improper handling of http vary header in libsoup cachingCVE-2025-99015.9 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 moreUndertow: undertow madeyoureset http/2 ddos vulnerabilityCVE-2025-9784Public exploitFix available7.5 High
- storaged-project udisks, red hat enterprise linux 10, enterprise linux 6 +14 more +16 moreUdisks: out-of-bounds read in udisks daemonCVE-2025-8067Public exploitFix available8.5 High
- red hat multicluster global hub, openshift serverless, advanced cluster management for kubernetes 2 +1 more +3 moreNx: nx/devkit: malicious versions of nx and plugins published to npmCVE-2025-10894Public exploit9.6 Critical
- keycloak, red hat build of keycloak 26.0, build of keycloak 26.2 +1 more +3 moreOrg.keycloak/keycloak-model-storage-service: variable injection into environment variablesCVE-2025-9162Fix available4.9 Medium
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructureCVE-2025-11065Fix available5.3 Medium
- cryostat, red hat cryostat 4, cryostat 4 on rhel 9 +2 moreCryostat: authentication bypass if network policies are disabledCVE-2025-84155.9 Medium
- red hat openshift container platform 4Cri-o: large /etc/passwd file may lead to denial of serviceCVE-2025-44375.7 Medium
- red hat mirror registry for red hat openshiftMirror-registry: host header injection in mirror-registryCVE-2025-77776.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callbackCVE-2025-8860Fix available3.3 Low
- red hat developer hub, developer hub 1.7 +1 moreRhdh: red hat developer hub user permissionsCVE-2025-54176.1 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreShim: expired secure boot certificateCVE-2023-53424.1 Medium
- rails activestorage, red hat 3scale api management platform 2, satellite 6 +2 moreActive Storage allowed transformation methods that were potentially unsafeCVE-2025-24293Public exploitFix available9.2 Critical
- Show moreLoading…