Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- sebhildebrandt systeminformation, red hat developer hub +1 moreSysteminformation has a Command Injection via unsanitized interface parameter in wifi.js retry pathCVE-2026-26280Fix available8.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlibc: vdso getrandom acceleration may return predictable randomnessCVE-2025-05774.8 Medium
- nltk, nltk nltk/nltk, red hat openshift lightspeed +2 more +4 moreZip Slip Vulnerability in nltk/nltk Leading to Remote Code ExecutionCVE-2025-14009Fix available10.0 Critical
- gnome evolution data server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handlingCVE-2026-2604Fix available5.6 Medium
- naturalintelligence fast-xml-parser, red hat migration toolkit for applications 8, advanced cluster security 4.8 +11 more +13 morefast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)CVE-2026-26278Fix available7.5 High
- rack, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +4 more +6 moreRack has a Directory Traversal via Rack:DirectoryCVE-2026-22860Fix available7.5 High
- openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 moreOpenStack Nova calls qemu-img without format restrictions for resizeCVE-2026-24708Fix available8.2 High
- ocaml, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIn OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization ...CVE-2026-28364Public exploitFix available7.9 High
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreLibsoup: libsoup: buffer overread due to integer underflow when handling zero-length resourcesCVE-2026-2369Fix available6.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewifi: iwlwifi: mld: cancel mlo_scan_start_wkCVE-2026-23185Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()CVE-2026-23111Public exploitFix available7.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosureCVE-2026-2443Fix available5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: memory corruption due to integer overflow in ico file handlingCVE-2026-2272Fix available4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via crafted psp image fileCVE-2026-2271Fix available3.3 Low
- gimp, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflowCVE-2026-2239Fix available2.8 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service due to malformed sftp messageCVE-2026-0968Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processingCVE-2026-0967Fix available2.2 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handlingCVE-2026-0965Fix available3.3 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp serversCVE-2026-0964Fix available5.0 Medium
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: TCP readTimeout bypass via STARTTLS on PostgresCVE-2026-25949Fix available7.5 High
- postgresql, red hat enterprise linux 10, enterprise linux 9 +1 more +3 morePostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryCVE-2026-2007Fix available8.2 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary codeCVE-2026-2006Fix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary codeCVE-2026-2005Public exploitFix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20644Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20652Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...CVE-2026-20608Fix available5.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS...CVE-2026-20635Fix available4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS...CVE-2026-20636Fix available6.5 Medium
- google keras, red hat openshift ai (rhoai) +1 moreArbitrary File Read in Keras via HDF5 External DatasetsCVE-2026-1669Fix available7.1 High
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entriesCVE-2026-26158Fix available7.0 High
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitizationCVE-2026-26157Public exploitFix available7.0 High
- google libjxl, red hat enterprise linux 10, enterprise linux 7 +2 more +4 morelibjxl: Out-of-bounds write in grayscale color transformation when using LCMS2CVE-2026-1837Fix available8.7 High
- python pillow, red hat openshift lightspeed, ai inference server +24 more +26 morePillow has an out-of-bounds write when loading PSD imagesCVE-2026-25990Fix available8.6 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-0797Fix available7.8 High
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` optionCVE-2025-69873Fix available2.9 Low
- red hat ai inference server, enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more +4 moreDiskCache has unsafe pickle deserializationCVE-2025-698729.8 Critical
- cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 morecryptography Subgroup Attack Due to Missing Subgroup Validation for SECT CurvesCVE-2026-26007Fix available8.2 High
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantizeCVE-2026-25646Fix available8.3 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +3 more +5 moreMissing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist...CVE-2025-35998Fix available7.0 High
- red hat build of keycloak, build of keycloak 26.4.2 +1 moreKeycloak-services: sensitive headers shown in the http access logsCVE-2025-11537Fix available5.0 Medium
- dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 moreMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgeryCVE-2026-25506Fix available7.7 High
- gnu gnutls, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binderCVE-2026-1584Fix available7.5 High
- red hat build of keycloak 26.2, build of keycloak 26.2.13, build of keycloak 26.4 +1 more +3 moreKeycloak: incorrect ownership checks in /uma-policy/CVE-2025-14778Fix available5.4 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.13, build of keycloak 26.4 +1 more +3 moreOrg.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validationCVE-2026-1529Public exploitFix available8.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 moreOrg.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grantCVE-2026-1486Fix available8.8 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios affected by Denial of Service via __proto__ Key in mergeConfigCVE-2026-25639Fix available7.5 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreGnutls: gnutls: denial of service via excessive resource consumption during certificate verificationCVE-2025-14831Fix available5.3 Medium
- Show moreLoading…