Red Hat CVEs
2,567 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-4367Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing
- CVE-2026-10649Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression
- CVE-2026-12398Galaxy_ng: shell injection in legacy role import via unsanitized git ref names
- CVE-2026-42014Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
- CVE-2026-1767Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags
- CVE-2026-1766Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.
- CVE-2026-1765Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 files
- CVE-2026-1764Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 files
- CVE-2026-52718Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion
- CVE-2026-52722Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling
- CVE-2026-52720Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb
- CVE-2026-53704Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser
- CVE-2026-53703Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser
- CVE-2026-52721Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing
- CVE-2026-53705Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow
- CVE-2026-52719Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder
- CVE-2026-44188Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration
- CVE-2026-54231Abrt: unsanitized systemd journal content written to dump directory files enables content injection
- CVE-2026-54230Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
- CVE-2026-54229Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking
- CVE-2026-54228Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories
- CVE-2026-48914Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling
- CVE-2026-53702Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser
- CVE-2026-53701Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser
- CVE-2026-11774389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow
- CVE-2026-11986Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak
- CVE-2026-11850Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
- CVE-2026-6893Dracut: dracut: root code execution via dhcp options command injection
- CVE-2026-11884389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation
- CVE-2026-11837Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown