Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-82965Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing
- CVE-2026-111253Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved…
- CVE-2026-123151Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
- CVE-2026-121997Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
- CVE-2026-121996Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
- CVE-2026-121995Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
- CVE-2026-121994Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
- CVE-2026-114232Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access
- CVE-2026-112208Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login
- CVE-2026-110932Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache
- CVE-2026-110931Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop
- CVE-2026-107602Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop
- CVE-2026-103112Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path
- CVE-2026-107123Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing
- CVE-2026-117691Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names
- CVE-2026-107912Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
- CVE-2026-123036A flaw was found in ansible-core.
- CVE-2026-121621Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy…
- CVE-2026-82976Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster…
- CVE-2026-121259Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator
- CVE-2026-119843Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags
- CVE-2026-120971Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses
- CVE-2026-120831Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
- CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
- CVE-2026-120740Hivex: hivex: denial of service via out-of-bounds read in big-data block processing
- CVE-2026-120194Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
- CVE-2026-119842Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check
- CVE-2026-119727Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation
- CVE-2026-119729Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service
- CVE-2026-119728Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure