Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via integer overflow in playstation tim loaderCVE-2026-59089Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: stack buffer overflow in pnmscanner_gettoken()CVE-2026-58380Fix available7.3 High
- red hat build of keycloak, data grid 8, jboss enterprise application platform expansion pack +1 more +3 moreKeycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo emailCVE-2026-147814.8 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreGimp: gimp: heap buffer overflow in read_channel_data()CVE-2026-58379Fix available7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filterCVE-2026-14615Fix available4.3 Medium
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.14 +5 more +7 moreKeycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresourceCVE-2026-14614Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 moreKeycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permissionCVE-2026-14613Fix available4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: double-free in read_layer_block()CVE-2026-58381Fix available6.1 Medium
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: foreman: information disclosure via improper validation of nested request parametersCVE-2026-51384.3 Medium
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: foreman: unauthorized modification of host configurations via broken access controlCVE-2026-51356.5 Medium
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypassCVE-2026-51426.5 Medium
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulationCVE-2026-51368.8 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CVE-2026-58016Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 moreGlib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveCVE-2026-58015Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"CVE-2026-58013Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()CVE-2026-58012Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeCVE-2026-58011Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()CVE-2026-58010Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6.5 +1 more +3 moreKeycloak: keycloak: privilege escalation through hardcoded role mapper injectionCVE-2026-46296.5 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, redhat build of keycloak +2 moreKeycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapperCVE-2026-123886.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +3 more +5 moreKeycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictionsCVE-2026-142094.3 Medium
- theforeman foreman, red hat satellite 6, redhat satellite +2 moreForeman: ssrf to cloud metada service through unvalidated test_url parameters in foreman configCVE-2026-133164.4 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreSssd: use-after-free crash in sssd' 'sssd_pam' processCVE-2026-12610Fix available6.4 Medium
- p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingCVE-2026-13757Fix available6.2 Medium
- red hat openshift dev spaces 3.29, redhat openshift dev spaces +1 moreVscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extensionCVE-2026-128568.8 High
- gnome yelp, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreYelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationsCVE-2026-13601Fix available7.1 High
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingCVE-2026-13595Fix available6.8 Medium
- spice-space spice-vdagent, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSpice-vdagent: path traversal in file transfer via unsanitized filenameCVE-2026-57966Fix available4.4 Medium
- spice-space spice-vdagent, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSpice-vdagent: integer overflow in udscs_write() leading to heap buffer overflowCVE-2026-57965Fix available5.1 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreVirt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabledCVE-2026-134344.9 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of serviceCVE-2026-133223.8 Low
- redhat pen drive, red hat pen drive powered by red hat lightspeed +1 morePen-drive: pen-drive: stored xss via unescaped cluster data in html reportCVE-2026-130836.9 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreVirt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ipCVE-2026-13318Fix available6.4 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcherCVE-2026-132184.2 Medium
- red hat build of apicurio registry 3.3.1, redhat build of apicurio registry +1 moreApicurio/apicurio-registry: apicurio-registry: xml entity-expansion denial of service via internal dtd subsetCVE-2026-12993Fix available6.5 Medium
- red hat build of apicurio registry 3.3.1, redhat build of apicurio registry +1 moreApicurio/apicurio-registry: apicurio-registry: ssrf via wsdl4j import dereference in wsdl full validationCVE-2026-12992Fix available7.4 High
- red hat build of apicurio registry 3.3.1, redhat build of apicurio registry +1 moreApicurio/apicurio-registry: apicurio-registry: unhardened saxparser in content-type detection leads to blind xxe / ssrf / billion-laughs dosCVE-2026-12975Fix available8.5 High
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.4 +3 more +5 moreOrg.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusionCVE-2026-11800Public exploitFix available8.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: information disclosure through arbitrary filesystem path probingCVE-2026-9083Fix available4.9 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: unauthorized access to resources via uma permission ticket bypassCVE-2026-9799Fix available4.6 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: attacker can re-enable and take over disabled clients via registration access tokenCVE-2026-9705Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypassCVE-2026-9086Public exploitFix available7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: group-admin escalation to realm-adminCVE-2026-9099Fix available7.7 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.4.14 +8 more +10 moreKeycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonCVE-2026-9800Fix available8.1 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moremm/list_lru: drain before clearing xarray entry on reparentCVE-2026-53153Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moredrm/gem: Try to fix change_handle ioctl, attempt 4CVE-2026-53145Fix available7.8 High
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request bodyCVE-2026-132086.5 Medium
- kubevirt, red hat container native virtualization 4.12, container native virtualization 4.13 +10 more +12 moreKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruptionCVE-2026-13201Fix available7.3 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreice: fix double-free of tx_buf skbCVE-2026-53009Fix available7.8 High
- Show moreLoading…