Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat exploit intelligence, openshift serverless, build of apache camel 4 for quarkus 3 +7 more +9 moreIo.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flawCVE-2026-1079127.7 High
- red hat ansible-coreA flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is...CVE-2026-1230365.5 Medium
- red hat openshift gitopsGithub.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configurationCVE-2026-1216218.8 High
- red hat openshift container platform 4, openshift container platform 5 +1 moreImage-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secretCVE-2026-829767.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimatorCVE-2026-121259Fix available6.5 Medium
- gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreGst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tagsCVE-2026-119843Fix available6.5 Medium
- red hat build of apache camel 4 for quarkus 3, build of apicurio registry 3, build of debezium 3 +6 more +8 moreOrg.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responsesCVE-2026-1209715.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: queue pointer corruption in if_output() leading to denial of serviceCVE-2026-120831Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosureCVE-2026-120830Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreHivex: hivex: denial of service via out-of-bounds read in big-data block processingCVE-2026-120740Fix available2.0 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 moreJson-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepCVE-2026-1201947.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace checkCVE-2026-119842Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computationCVE-2026-119727Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of serviceCVE-2026-119729Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failureCVE-2026-119728Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parserCVE-2026-119777Fix available8.8 High
- red hat build of apache camel 4 for quarkus 3, data grid 8, fuse 7 +2 more +4 moreOrg.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerrorCVE-2026-1195424.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loaderCVE-2026-119528Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-115455Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-114691Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-114690Fix available6.2 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)CVE-2026-1185935.9 Medium
- red hat streams for apache kafka 2, streams for apache kafka 3 +1 moreKroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rulesCVE-2026-1189526.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunkCVE-2026-118475Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shadingCVE-2026-112922Fix available3.3 Low
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: chunkreader message length permits chunk-size overflowCVE-2026-919206.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollbackCVE-2026-110133Fix available5.8 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: required actions bypassed via kc_action parameterCVE-2026-1189595.4 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: authorization bypass via uma resource registration idorCVE-2026-1189474.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceCVE-2026-103963Fix available7.5 High
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +3 more +5 moreOpenshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verificationCVE-2026-92092Fix available7.4 High
- kubeflow pipelinesKubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memoryCVE-2026-118761Fix available7.5 High
- kubeflow pipelinesKubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact readsCVE-2026-1187606.5 Medium
- kubeflow pipelinesKubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenantCVE-2026-118759Fix available7.5 High
- kubeflow pipelinesKubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact sourceCVE-2026-1187587.5 High
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopbackCVE-2026-1184256.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent loginsCVE-2026-1180304.2 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: par single-use bypass via flow restartCVE-2026-1178595.4 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: vault secret disclosure via client registration installation configurationCVE-2026-1176885.3 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of serviceCVE-2026-1175486.5 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictionsCVE-2026-1176275.4 Medium
- red hat fuse 7, jboss enterprise application platform 7, jboss enterprise application platform 8.1 +2 more +4 moreWildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport bindingCVE-2026-1144887.4 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8.1, jboss enterprise application platform expansion pack +1 more +3 moreWildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbeanCVE-2026-196106.5 Medium
- Show moreLoading…