Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.12CVE-2026-12329Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12328Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 152 and Thunderbird 152CVE-2026-123268.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreJIT miscompilation in the DOM: Core & HTML componentCVE-2026-12299Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12298Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape due to incorrect boundary conditions in the Networking componentCVE-2026-12297Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Security: Process Sandboxing componentCVE-2026-12296Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Navigation componentCVE-2026-12295Public exploitFix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Workers componentCVE-2026-12294Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the Graphics: WebGPU componentCVE-2026-122939.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-12292Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the Networking: HTTP componentCVE-2026-12291Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12290Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-12289Fix available8.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruptionCVE-2026-46331Public exploitFix available7.8 High
- encode starlette, red hat exploit intelligence, migration toolkit for applications 8 +8 more +10 moreStarlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on WindowsCVE-2026-48818Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +6 more +8 moreGstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusionCVE-2026-52718Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingCVE-2026-52722Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbCVE-2026-52720Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreGstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parserCVE-2026-53704Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreGstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parserCVE-2026-53703Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsingCVE-2026-52721Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +12 more +14 moreGstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflowCVE-2026-53705Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +5 more +7 moreGstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoderCVE-2026-52719Fix available7.1 High
- angular, red hat enterprise linux 8, fuse 7 +2 moreAngular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSRCVE-2026-50556Fix available8.6 High
- websockets ws, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 morews: Memory exhaustion DoS from tiny fragments and data chunksCVE-2026-48779Fix available7.5 High
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilationCVE-2026-8357Fix available5.4 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreHeap use-after-free in ODF number-format blank-width parsingCVE-2026-6040Fix available5.4 Medium
- red hat ansible automation platform 2, ansible automation platform 2.6, ansible automation platform 2.7 +2 moreAnsible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expirationCVE-2026-441885.3 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreAbrt: unsanitized systemd journal content written to dump directory files enables content injectionCVE-2026-542315.5 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +10 more +12 moreAbrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwritesCVE-2026-54230Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: chownproblemdir succeeds during active post-create event processing due to inadequate lockingCVE-2026-542297.0 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directoriesCVE-2026-542287.8 High
- form-data, red hat cluster observability operator 1.5.0, cryostat 4 +77 more +79 moreform-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)CVE-2026-12143Fix available8.7 High
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreChromaDB has a code injection vulnerabilityCVE-2026-45833Public exploit9.4 Critical
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreAll V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and...CVE-2026-458328.8 High
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collectionCVE-2026-458308.8 High
- netty, red hat build of apache camel - hawtio 4 +1 moreNetty HTTP/3 QPACK Blocked Streams Memory ExhaustionCVE-2026-48748Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreQemu-kvm: heap buffer overflow in virtio-blk scsi request handlingCVE-2026-48914Fix available6.7 Medium
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +3 more +5 moreApache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImplCVE-2026-50633Fix available8.1 High
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +8 more +10 moreApache CXF: JNDI Injection Vulnerability in JMSConfigFactoryCVE-2026-50632Fix available8.1 High
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 moreApache CXF: OAuth2: Inverted IP Binding Check Defeats Security ControlCVE-2026-50628Fix available9.8 Critical
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 moreApache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token ValidatorCVE-2026-50627Fix available9.1 Critical
- apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 moreApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtilsCVE-2026-49875Fix available9.8 Critical
- vim, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreVim: Arbitrary Code Execution via Python Omni-CompletionCVE-2026-52860Fix available7.5 High
- vim, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 moreVim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory nameCVE-2026-47162Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parserCVE-2026-53702Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parserCVE-2026-53701Fix available6.5 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowCVE-2026-11774Fix available7.6 High
- red hat build of keycloak 26.6, build of keycloak 26.6.5, jboss enterprise application platform expansion pack +1 more +3 moreKeycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloakCVE-2026-11986Fix available4.9 Medium
- Show moreLoading…