Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat exploit intelligence, build of quarkus 3.27.6.redhat, build of quarkus 3.33.4.redhat +2 moreQuarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panacheCVE-2026-944516.5 Medium
- red hat quay 3Quay: repository auto-prune policy uuid idor in quay apiCVE-2026-1091953.1 Low
- red hat quay 3Quay: build trigger uuid idor in quay apiCVE-2026-1091946.4 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreMutter: mutter: client-triggered use-after-free in wayland color-management icc image description pathCVE-2026-108094Fix available7.8 High
- manageiq, red hat cloudforms +1 moreYAML safe_load production fallback to unsafe_load enables RCE via deserializationCVE-2026-529038.8 High
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: ciba confidential-only contract not enforced for public clientsCVE-2026-1090826.8 Medium
- red hat satellite 6Foreman: domain and subnet interface api skips host search filtersCVE-2026-1072035.4 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +1 more +3 moreForeman: api filter lookup ignores a search-limited filter permissionCVE-2026-1071936.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fixCVE-2026-108119Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loadingCVE-2026-108093Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entryCVE-2026-1080635.5 Medium
- red hat build of podman desktop, certification program for red hat enterprise linux 9, edge manager 1 +8 more +10 moreGvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposeCVE-2026-107935Fix available9.3 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCups: null pointer dereference via embedded job ticket comments allows remote denial of serviceCVE-2026-107655Fix available4.0 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: stored xss on login page via kcsanitize bypassCVE-2026-1078895.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eog: arbitrary code execution via heap buffer overflow in png metadata readerCVE-2026-107651Fix available5.5 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +15 more +17 moreAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091Fix available8.8 High
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocationCVE-2026-1076234.3 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpointsCVE-2026-1076044.9 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruptionCVE-2026-107565Fix available5.1 Medium
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreInsights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerCVE-2026-930177.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreFlatpak-builder: local file exfiltration via `fileCVE-2026-107466Fix available6.1 Medium
- red hat hardened images, satellite 6 +1 moreRubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypassCVE-2026-1074455.4 Medium
- red hat hardened images, satellite 6 +1 moreRubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypassCVE-2026-1074444.3 Medium
- red hat openshift container platform 4, openshift container platform 4.19, openshift container platform 4.20 +3 more +5 moreCluster-samples-operator: role reads all secrets in openshift-config, not just pull-secretCVE-2026-1071766.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreCyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clientsCVE-2026-107161Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in hot color filter on oversized imageCVE-2026-106067Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in raw data export on oversized image dimensionsCVE-2026-106066Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in pcx export on oversized image dimensionsCVE-2026-106065Fix available6.3 Medium
- red hat openshift serverless, openshift source-to-image (s2i), openshift container platform 4 +2 more +4 moreSource-to-image: source-to-image: security boundary bypass via absolute symbolic link extractionCVE-2026-1071746.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: null-pointer write in read_mtext_element() on malformed utf-8CVE-2026-1071696.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: heap use-after-free write in re_init_ic()CVE-2026-1071676.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in gif export on oversized image dimensionsCVE-2026-106064Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: null dereference in minput_open_im() after failed m17n_init()CVE-2026-107170Fix available2.9 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()CVE-2026-107168Fix available6.2 Medium
- red hat satellite 6Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requestsCVE-2026-1071515.9 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: smtp starttls plaintext credential and message downgradeCVE-2026-1071216.5 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +4 more +6 morePulp-rpm: distribution tree publish creates directories from .treeinfo idsCVE-2026-1038705.0 Medium
- red hat ansible automation platform 2, satellite 6 +1 morePulp-ansible: bearer tokens are reused across remotes in a workerCVE-2026-1038696.5 Medium
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePulp-container: registry credentials are reused across remotes in a workerCVE-2026-1038686.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted fileCVE-2026-106061Fix available5.5 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreCandlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latchingCVE-2026-1064718.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd-kcm: local denial of service via excessive memory preallocationCVE-2026-800485.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via race condition in autofs responderCVE-2026-1040454.7 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via incomplete identity provider authentication requestsCVE-2026-1040466.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface fileCVE-2026-106062Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-freeCVE-2026-101258Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in dicom export on oversized image dimensionsCVE-2026-106063Fix available6.3 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: authorization bypass via cross-domain username collision in hbac evaluationCVE-2026-1040486.8 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: information disclosure via query injection in entra id lookupsCVE-2026-1040475.3 Medium
- red hat openshift container platform 4Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypassCVE-2026-760615.5 Medium
- Show moreLoading…