Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALLCVE-2026-46227Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pathCVE-2026-46189Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()CVE-2026-46181Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreRDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()CVE-2026-46176Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 morewifi: mac80211: use safe list iteration in radar detect workCVE-2026-46166Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morewifi: mac80211: drop stray 'static' from fast-RX rx_resultCVE-2026-46152Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 moreRDMA/mana: Validate rx_hash_key_lenCVE-2026-46145Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morewifi: mac80211: remove station if connection prep failsCVE-2026-46125Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()CVE-2026-46117Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteCVE-2026-46116Fix available7.8 High
- red hat container native virtualization 4.17, container native virtualization 4.18, container native virtualization 4.19 +3 more +5 moreKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file readCVE-2026-9804Fix available7.7 High
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 morepip can extract console_scripts and gui_scripts outside installation directoryCVE-2026-8643Fix available4.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell commandCVE-2026-44604Fix available7.0 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: denial of service via malformed authorization headerCVE-2026-9803Fix available5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restartCVE-2026-9802Fix available6.8 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: denial of service via malformed ldap password policy responseCVE-2026-9801Fix available4.9 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: brute-force protection bypass in ciba flowCVE-2026-97984.3 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +2 moreKeycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerabilityCVE-2026-9796Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: privilege escalation via improper scope mapping enforcementCVE-2026-9795Fix available7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: information disclosure via saml ecp endpointCVE-2026-9794Public exploitFix available5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisitionCVE-2026-9792Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: security policy bypass in jwe-encrypted request object processingCVE-2026-97935.9 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak-rhel9: organization data leak after feature disabled in keycloakCVE-2026-9791Fix available4.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moresmb: client: validate dacloffset before building DACL pointersCVE-2026-46195Fix available9.8 Critical
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Incorrect Authorization issueCVE-2026-43000Fix available6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Authorization BypassCVE-2026-42999Fix available6.0 Medium
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 morenameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationCVE-2026-42790Fix available7.6 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morenet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnelsCVE-2026-46099Fix available8.1 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreALSA: aloop: Fix peer runtime UAF during format-change stopCVE-2026-46090Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreselinux: fix overlayfs mmap() and mprotect() access checksCVE-2026-46054Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creationCVE-2026-46033Fix available7.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: privilege escalation due to oversized subject_token jwtCVE-2026-9704Fix available6.8 Medium
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 moreNon-CA certificate accepted as intermediate issuer in public_key path validationCVE-2026-42789Fix available7.0 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moregfs2: Fix use-after-free in iomap inline data write pathCVE-2026-45984Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresmb: client: fix potential UAF and double free in smb2_open_file()CVE-2026-45972Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreRDMA/iwcm: Fix workqueue list corruption by removing work_listCVE-2026-45898Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreRDMA/rxe: Fix double free in rxe_srq_from_initCVE-2026-45852Fix available7.8 High
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604CVE-2026-96894.2 Medium
- oalders http::daemon, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreHTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()CVE-2026-8450Fix available9.1 Critical
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globCVE-2026-48962Public exploitFix available7.3 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morerxrpc: Fix potential UAF after skb_unshare() failureCVE-2026-45998Fix available7.8 High
- opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreLibsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataCVE-2026-48864Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypassCVE-2026-44421Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassCVE-2026-40033Fix available8.6 High
- red hat container native virtualization 4.12, container native virtualization 4.13, container native virtualization 4.14 +7 more +9 moreKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerabilityCVE-2026-7374Fix available9.9 Critical
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: FILE privilege was not checked for subqueries in the FROM clauseCVE-2026-44173Fix available5.0 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 moreMariaDB: mysql_real_escape_string() incorrectly handled big5CVE-2026-44172Fix available6.9 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLCVE-2026-44170Fix available6.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: wsrep SST unsafe parameter handling on the donor sideCVE-2026-44168Fix available8.0 High
- f5 nginx open source, nginx gateway fabric, nginx ingress controller +6 more +8 moreNGINX Open-Source ngx_http_v3_module vulnerabilityCVE-2026-42530Public exploitFix available9.2 Critical
- Show moreLoading…