Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- red hat advanced cluster management for kubernetes 2.11 for rhel 9, advanced cluster management for kubernetes 2.12 for rhel 9, redhat advanced cluster management for kubernetes +2 moreRhacm: users with clusterreader role can see credentials from managed-clustersCVE-2025-60175.5 Medium
- red hat ai inference serverAi-inference-server: authentication bypass via unprotected inference endpoint in apiCVE-2025-69205.3 Medium
- sudo, canonical ubuntu linux, debian linux +5 more +7 moreSudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a...CVE-2025-32463In KEVPublic exploitFix availableEPSS 56.3%9.3 Critical
- infinispan, red hat data grid 8.5.4, jboss enterprise application platform 7 +4 more +6 moreInfinispan: credential leakage in infinispan cliCVE-2025-57315.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libsshCVE-2025-5372Fix available5.0 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: double free vulnerability in libssh key export functionsCVE-2025-5351Fix available6.5 Medium
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- redhat keycloak, red hat build of keycloak +1 moreKeycloak-core: keycloak environment informationCVE-2025-54162.7 Low
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: reading past eof may be triggered for piped file streamsCVE-2025-5918Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.cCVE-2025-5917Fix available2.8 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.cCVE-2025-5916Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.cCVE-2025-5915Public exploitFix available6.6 Medium
- hibernate validator, redhat hibernate validator +1 morehibernate-validator insecure default Expression Language interpolationCVE-2025-35036Fix available6.9 Medium
- debian linux, linux kernel, systemd project systemd +14 more +16 moreSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpCVE-2025-4598Fix available4.7 Medium
- stackrox, red hat advanced cluster security 4, redhat advanced cluster security +2 moreStackrox: xss in stackroxCVE-2025-51985.0 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of serviceCVE-2025-4478Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of serviceCVE-2025-47711Fix available6.5 Medium
- redhat pagurePagure: path traversal in view_issue_raw_file()CVE-2024-4982Fix available7.6 High
- redhat pagurePagure: _update_file_in_git() follows symbolic links in temporary clonesCVE-2024-4981Fix available7.6 High
- project quay quay, red hat quay 3 +1 moreQuay: incorrect privilege assignmentCVE-2025-43746.5 Medium
- red hat build of keycloak, build of keycloak 26.0 +1 moreOrg.keycloak.authentication: two factor authentication bypassCVE-2025-3910Fix available5.4 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev segmentation fault in read_arcobjectCVE-2025-46400Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: transfig: fig2dev segmentation fault vulnerabilityCVE-2025-46399Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev stack-overflow via read_objectsCVE-2025-46398Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreXfig: xfig: stack-overflow allows possible code execution via local input manipulationCVE-2025-46397Fix available7.8 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentCVE-2025-2784Fix available7.0 High
- image-size, red hat gatekeeper 3, build of podman desktop +15 more +17 moreimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF ParserCVE-2025-71319Fix available8.7 High
- red hat build of keycloak, data grid 8, fuse 7 +13 more +15 moreOrg.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cliCVE-2025-23368Fix available8.1 High
- mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 moreMongoDB Shell may be susceptible to local privilege escalation in WindowsCVE-2025-1756Fix available7.5 High
- mongodb compass, redhat enterprise linux for arm 64, enterprise linux for ibm z systems +2 more +4 moreMongoDB Compass may be susceptible to local privilege escalation in WindowsCVE-2025-17557.5 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()CVE-2025-26601Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()CVE-2025-26600Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use of uninitialized pointer in compredirectwindow()CVE-2025-26599Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: out-of-bounds write in createpointerbarrierclient()CVE-2025-26598Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbchangetypesofkey()CVE-2025-26597Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: heap overflow in xkbwritekeysyms()CVE-2025-26596Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbvmodmasktext()CVE-2025-26595Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursorCVE-2025-26594Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading dataCVE-2025-0678Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)CVE-2024-45782Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.CVE-2024-45778Fix available4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.CVE-2024-45777Fix available6.7 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- redhat wildfly, red hat build of keycloak, data grid 8 +14 more +16 moreOrg.wildfly.core:wildfly-server: wildfly improper rbac permissionCVE-2025-23367Fix available6.5 Medium
- Show moreLoading…