Red Hat CVEs
2,570 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-2625Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification
- CVE-2026-4636Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.
- CVE-2026-4634Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters
- CVE-2026-4325Keycloak: keycloak: replay of action tokens via improper handling of single-use entries
- CVE-2026-4282Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw
- CVE-2026-3872Keycloak: keycloak: information disclosure due to redirect_uri validation bypass
- CVE-2026-35094Libinput: libinput: information disclosure via dangling pointer in lua plugin handling
- CVE-2026-35093Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins
- CVE-2026-35092Corosync: corosync: denial of service via integer overflow in join message validation
- CVE-2026-35091Corosync: corosync: denial of service and information disclosure via crafted udp packet
- CVE-2026-5201Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
- CVE-2026-5165Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset
- CVE-2026-5164Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request
- CVE-2026-5121Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
- CVE-2026-5119Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
- CVE-2026-28369Undertow: undertow: request smuggling via malformed http request headers
- CVE-2026-28367Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
- CVE-2026-28368Undertow: undertow: request smuggling via inconsistent header parsing
- CVE-2026-4948Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
- CVE-2025-12805Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy
- CVE-2026-0965Libssh: libssh: denial of service via improper configuration file handling
- CVE-2026-0967Libssh: libssh: denial of service via inefficient regular expression processing
- CVE-2026-0968Libssh: libssh: denial of service due to malformed sftp message
- CVE-2026-0964Libssh: improper sanitation of paths received from scp servers
- CVE-2026-0966Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
- CVE-2026-2100P11-kit: null dereference via c_derivekey with specific null parameters
- CVE-2026-2239Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow
- CVE-2026-2272Gimp: gimp: memory corruption due to integer overflow in ico file handling
- CVE-2026-2271Gimp: gimp: denial of service via crafted psp image file
- CVE-2026-2436Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake