Red Hat CVEs
2,567 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-14476Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
- CVE-2026-14474Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- CVE-2026-58384Gimp: gimp: integer overflow in read_rle_channel()
- CVE-2026-59089Gimp: gimp: denial of service via integer overflow in playstation tim loader
- CVE-2026-58380Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()
- CVE-2026-9165Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service
- CVE-2026-14781Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email
- CVE-2026-58379Gimp: gimp: heap buffer overflow in read_channel_data()
- CVE-2026-14615Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter
- CVE-2026-14614Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource
- CVE-2026-14613Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission
- CVE-2026-14612Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization
- CVE-2026-14544Hplip: incomplete fix for cve-2026-8631
- CVE-2026-58381Gimp: gimp: double-free in read_layer_block()
- CVE-2026-14330Pipewire: pulse server alloca stack overflow
- CVE-2026-14324Pipewire: raop rtsp null deref
- CVE-2026-5138Foreman: foreman: information disclosure via improper validation of nested request parameters
- CVE-2026-5135Foreman: foreman: unauthorized modification of host configurations via broken access control
- CVE-2026-5142Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass
- CVE-2026-23537Feast: unauthenticated arbitrary file write
- CVE-2026-5136Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation
- CVE-2026-14258Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
- CVE-2026-58016Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- CVE-2026-58015Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
- CVE-2026-58014Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
- CVE-2026-58013Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
- CVE-2026-58012Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
- CVE-2026-58011Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
- CVE-2026-58010Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
- CVE-2026-12388Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper