Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-82324Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
- CVE-2026-18393Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor
- CVE-2026-80179Jwcrypto: jwcrypto: denial of service via malformed jwe tokens
- CVE-2026-81893Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery
- CVE-2026-5680Undertow-core: undertow: denial of service via websocket permessage-deflate processing
- CVE-2026-78002Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
- CVE-2026-81668Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup
- CVE-2026-81658Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup
- CVE-2026-80158Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings
- CVE-2026-79902Gimp: stack vla size underflow denial of service in seattle
- CVE-2026-79654Ketello: katello content view history api cross-organization authorization bypass
- CVE-2026-80185Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root
- CVE-2026-80186Bluez: stack overflow in name2utf8 causes dos and potential code execution
- CVE-2026-80101Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
- CVE-2026-77680Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix
- CVE-2026-79992Emacs: emacs: command injection via crafted filenames in tramp
- CVE-2026-79717Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restriction
- CVE-2026-79655Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write
- CVE-2026-79652Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired
- CVE-2026-78701389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos
- CVE-2026-78322File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers
- CVE-2026-17113Cri-o: cri-o: unvalidated image env var causes daemon crash
- CVE-2026-78475Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader
- CVE-2026-78465Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit
- CVE-2026-19685Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server…
- CVE-2026-71366Awx: notification backends allow ssrf and credential leakage
- CVE-2026-71364Awx: project archive extraction allows path traversal file writes
- CVE-2026-78367Rpm: rpmbuild gettarspec() crafted tar member name → macro injection
- CVE-2026-78376Webkitgtk: use-after-free of jscvalue function parameters
- CVE-2026-78323Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates