Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-119777Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser
- CVE-2026-119542Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror
- CVE-2026-119528Gimp: gimp: stack buffer overflow in psd image resource header loader
- CVE-2026-115456Gcc: out-of-bounds read in std::from_chars
- CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++
- CVE-2026-114691Gcc: integer wrap in `std
- CVE-2026-114690Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
- CVE-2026-118593Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)
- CVE-2026-118952Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules
- CVE-2026-103963Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service
- CVE-2026-118475Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
- CVE-2026-112922Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading
- CVE-2026-91920Undertow: undertow: chunkreader message length permits chunk-size overflow
- CVE-2026-110133Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback
- CVE-2026-118959Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter
- CVE-2026-118947Keycloak-services: keycloak-services: authorization bypass via uma resource registration idor
- CVE-2026-92092Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification
- CVE-2026-118425Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback
- CVE-2026-93009Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder
- CVE-2026-93010Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
- CVE-2026-93006Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
- CVE-2026-93007Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
- CVE-2026-93011Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms
- CVE-2026-93008Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
- CVE-2026-85498Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow
- CVE-2026-118030Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins
- CVE-2026-117859Keycloak-services: keycloak-services: par single-use bypass via flow restart
- CVE-2026-117688Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration
- CVE-2026-117548389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service
- CVE-2026-117627Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions