Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus methodCVE-2026-111581Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: missing slot-range validation permits out-of-gap device i/oCVE-2026-1115556.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap oob read/write via unchecked migration data offsetsCVE-2026-105958Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncationCVE-2026-105959Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- red hat enterprise linux 8, enterprise linux 9, fuse 7 +4 more +6 moreOrg.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor roleCVE-2026-848237.1 High
- red hat ansible automation platform 2Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)CVE-2026-1091315.4 Medium
- red hat connectivity link 1, connectivity link 1.4, connectivity link 1.5 +1 more +3 moreGithub.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway po…CVE-2026-1083347.4 High
- red hat fuse 7, jboss enterprise application platform 7, jboss enterprise application platform 8.1 +2 more +4 moreWildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment nameCVE-2026-856348.8 High
- red hat migration toolkit for applications 8, migration toolkit for containers, migration toolkit for virtualization +12 more +14 moreAnsible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionCVE-2026-929828.5 High
- gnome evolution-data-server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: local file disclosure via attach file:// urisCVE-2026-1107775.7 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-cryptoCVE-2026-86849Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: stack and heap buffer overflow in nfp vdpa driverCVE-2026-86856Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupCVE-2026-86847Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-cryptoCVE-2026-86846Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupCVE-2026-86845Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)CVE-2026-86566Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoCVE-2026-86848Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapCVE-2026-86567Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: heap out-of-bounds read/write in gso header copyCVE-2026-100236Fix available8.6 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeCVE-2026-86565Fix available8.2 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: double offset bug in vhost log mapping calculationCVE-2026-86563Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)CVE-2026-86562Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: missing memory size validation before mmap in vhost memory region setupCVE-2026-86561Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouCVE-2026-93683Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileCVE-2026-109968Fix available5.5 Medium
- red hat openshift container platform 4.19, openshift container platform 4.20, openshift container platform 4.21 +2 more +4 moreInsights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary executionCVE-2026-1047958.8 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directoryCVE-2026-1247456.3 Medium
- red hat hardened imagesBusybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruptionCVE-2026-888423.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolCVE-2026-109971Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin written to world-readable fileCVE-2026-109970Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskCVE-2026-109969Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp charactersCVE-2026-1002316.1 Medium
- red hat hardened imagesBusybox: busybox: http request smuggling via pipelined requests in httpd reverse proxyCVE-2026-888297.2 High
- red hat hardened imagesBusybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flushCVE-2026-909547.8 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +3 more +5 moreGstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserializeCVE-2026-86476Public exploitFix available8.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indicesCVE-2026-1100363.3 Low
- red hat hardened imagesBusybox: busybox: httpd user existence oracle in non-default shadow-disabled buildsCVE-2026-88834Fix available3.7 Low
- red hat hardened imagesBusybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictionsCVE-2026-888385.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of serviceCVE-2026-88833Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()CVE-2026-105460Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connectionCVE-2026-109976Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreGnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of serviceCVE-2026-1098335.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreGnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)CVE-2026-109832Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decodingCVE-2026-109854Fix available2.5 Low
- red hat openstack platform 18.0Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparisonCVE-2026-835357.4 High
- red hat openstack platform 18.0Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)CVE-2026-835365.3 Medium
- red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2, quay 3 +2 moreQuay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassableCVE-2026-854716.4 Medium
- red hat exploit intelligence, build of quarkus 3.27.6.redhat, build of quarkus 3.33.4.redhat +2 moreIo.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotationsCVE-2026-877449.1 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreOpenshift/console: openshift/console: authenticated ssrf via helm chart url fetchCVE-2026-758887.7 High
- Show moreLoading…