Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- freedesktop udisks, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreUdisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus apiCVE-2026-26104Fix available5.5 Medium
- freedesktop udisks, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreUdisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus apiCVE-2026-26103Fix available7.1 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via duplicate content-length headersCVE-2026-2708Fix available3.7 Low
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosureCVE-2026-2443Fix available5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: memory corruption due to integer overflow in ico file handlingCVE-2026-2272Fix available4.3 Medium
- gimp, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflowCVE-2026-2239Fix available2.8 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service due to malformed sftp messageCVE-2026-0968Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processingCVE-2026-0967Fix available2.2 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handlingCVE-2026-0965Fix available3.3 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp serversCVE-2026-0964Fix available5.0 Medium
- gnu gnutls, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binderCVE-2026-1584Fix available7.5 High
- microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: null dereference via c_derivekey with specific null parametersCVE-2026-2100Fix available5.3 Medium
- keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 moreKeylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authenticationCVE-2026-1709Fix available9.4 Critical
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via malformed chunk headersCVE-2026-1801Public exploitFix available5.3 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tagsCVE-2026-1767Fix available5.6 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.CVE-2026-1766Fix available5.6 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 filesCVE-2026-1764Fix available5.6 Medium
- red hat osim, redhat open security issue management +1 moreosim: Path Traversal via query parameters in Nginx configurationCVE-2026-16167.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: credential leakage via http redirectsCVE-2026-1539Fix available5.8 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition headerCVE-2026-1536Fix available5.8 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http header injection via specially crafted urls when an http proxy is configuredCVE-2026-1467Fix available5.8 Medium
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +33 more +35 moreUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrfCVE-2025-12543Fix available9.6 Critical
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruptionCVE-2025-14087Fix available5.6 Medium
- ansible-collections ansible community general collection, red hat ceph storage 5, ceph storage 6 +5 more +7 moreAnsible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose outputCVE-2025-14010Fix available5.5 Medium
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 moreNodemailer: nodemailer: denial of service via crafted email address headerCVE-2025-14874Fix available7.5 High
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()CVE-2025-13601Fix available7.7 High
- redhat satellite, the foreman foreman, red hat satellite 6.15 for rhel 8 +6 more +8 moreForeman: satellite: graphql api permission bypass leads to information disclosureCVE-2025-9572Fix available5.0 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreAap-gateway: improper path validation in gateway allows credential exfiltrationCVE-2025-99096.7 Medium
- cephRGW DoS attack with empty HTTP header in S3 object copyCVE-2024-47866Fix available7.5 High
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streamsCVE-2025-99086.7 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreEvent-driven-ansible: event stream test mode exposes sensitive headers in aap edaCVE-2025-99076.7 Medium
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removalCVE-2025-62230Fix available7.3 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 moreUndertow: undertow madeyoureset http/2 ddos vulnerabilityCVE-2025-9784Public exploitFix available7.5 High
- keycloak, red hat build of keycloak, build of keycloak 26.0 +1 more +3 moreOrg.keycloak/keycloak-services: keycloak smtp inject vulnerabilityCVE-2025-8419Fix available5.3 Medium
- apple ipados, macos, safari +30 more +32 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,...CVE-2025-31277In KEVPublic exploitFix available8.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreNetavark: podman: netavark may resolve hostnames to unexpected hostsCVE-2025-8283Fix available3.7 Low
- red hat build of keycloak 26, build of keycloak 26.2, jboss enterprise application platform 8 +3 more +5 moreOrg.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)CVE-2025-7784Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolkit: xml policy file with a large number of nested elements may lead to out-of-bounds writeCVE-2025-7519Fix available6.7 Medium
- red hat ansible automation platform 2, redhat ansible automation platform +1 moreAap: sensitive cookie(s) set without security flagsCVE-2025-538613.1 Low
- red hat ansible automation platform 2, redhat ansible automation platform +1 moreAap: aap-gateway: automation-hub: sensitive information disclosureCVE-2025-538623.5 Low
- redhat keycloak, red hat build of keycloak 26, build of keycloak 26.0 +1 more +3 moreKeycloak: phishing attack via email verification step in first login flowCVE-2025-7365Fix available7.1 High
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodesCVE-2025-7424Fix available7.5 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- Show moreLoading…