Skip to content
Redhat vulnerabilities
Products
Show 160 moreShow less
Newest
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via race condition in autofs responder
CVE-2026-104045
Fix available
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via incomplete identity provider authentication requests
CVE-2026-104046
6.2 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
CVE-2026-104048
Fix available
6.8 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: information disclosure via query injection in entra id lookups
CVE-2026-104047
5.3 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
CVE-2026-88252
Fix available
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: information disclosure via odata injection in entra id lookups
CVE-2026-104040
4.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104039
Fix available
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
CVE-2026-104032
Fix available
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via memory exhaustion in autofs responder
CVE-2026-104031
Fix available
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
CVE-2026-104029
Fix available
3.3 Low
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
CVE-2026-104030
Fix available
5.5 Medium
-
theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 more
Foreman: command injection in foreman-tail
CVE-2026-12542
Fix available
5.3 Medium
-
theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +4 more +6 more
Foreman: excessive permissions for viewer role on preview
CVE-2026-96659
Fix available
9.1 Critical
-
theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +4 more +6 more
Foreman: foreman: arbitrary code execution via safemode sandbox bypass
CVE-2026-96658
Fix available
8.8 High
-
theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 more
Foreman: ssti and insecure deserialization in foreman-rake configuration
CVE-2026-12544
Fix available
7.7 High
-
theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 more
Foreman: command injection in foreman-rake database tasks
CVE-2026-12541
Fix available
8.2 High
-
theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 more
Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter
CVE-2026-12540
Fix available
8.2 High
-
redhat satellite, theforeman foreman, red hat satellite 6 +5 more +7 more
Foreman: unauthenticated information disclosure via provisioning token validation flaw
CVE-2026-12423
Fix available
7.5 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
CVE-2026-102560
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
CVE-2026-102559
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
CVE-2026-102558
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 more
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
CVE-2026-102555
Fix available
8.2 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
CVE-2026-102557
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
CVE-2026-102556
Fix available
8.6 High
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
CVE-2026-90462
Fix available
5.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
CVE-2026-90996
Fix available
4.0 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-90995
Fix available
5.5 Medium
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
CVE-2026-71224
Fix available
4.7 Medium
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
CVE-2026-71222
Fix available
5.3 Medium
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
CVE-2026-71221
Fix available
7.0 High
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
CVE-2026-71220
Fix available
7.0 High
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
CVE-2026-71219
Fix available
4.7 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
CVE-2026-82343
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
CVE-2026-82330
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count
CVE-2026-82328
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
CVE-2026-82324
Fix available
6.1 Medium
-
theforeman foreman, red hat satellite 6, redhat satellite +2 more
Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup
CVE-2026-81658
6.5 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
CVE-2026-80101
Fix available
4.4 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader
CVE-2026-78475
Fix available
6.1 Medium
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
CVE-2026-11861
Fix available
9.6 Critical
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read
CVE-2026-73198
Fix available
7.5 High
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
CVE-2026-13097
Fix available
8.7 High
-
freeipa, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more
Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
CVE-2026-73196
4.3 Medium
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read
CVE-2026-73197
Fix available
7.5 High
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ssrf via build archive_url in quay build api
CVE-2026-74247
4.2 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated exported logs download in quay
CVE-2026-74245
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: stripe webhook accepts forged events without signature verification in quay
CVE-2026-74244
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated secscan notification endpoint in quay when psk is unset
CVE-2026-74243
6.5 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: repository notification uuid idor in quay api
CVE-2026-74242
5.3 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ldap referral filter injection in quay external ldap authentication
CVE-2026-74241
4.8 Medium
- Show olderLoading…