Red Hat CVEs
2,574 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-12748Libvirt: denial of service in xml parsing
- CVE-2025-10230Samba: command injection in wins server hook script
- CVE-2025-12789Rhsso: open redirect
- CVE-2024-121253scale-porta: readonly fields not validated server-side
- CVE-2025-12790Rubygem-mqtt: rubygem-mqtt hostname validation
- CVE-2025-10622Foreman: os command injection via ct_location and fcct_location parameters
- CVE-2025-12464Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode
- CVE-2025-62229Xorg: xmayland: use-after-free in xpresentnotify structure creation
- CVE-2025-62230Xorg: xwayland: use-after-free in xkb client resource removal
- CVE-2025-62231Xorg: xmayland: value overflow in xkbsetcompatmap()
- CVE-2025-12103Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace
- CVE-2025-12390Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id
- CVE-2025-10939Org.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console
- CVE-2025-57848Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions
- CVE-2025-12110Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed
- CVE-2025-11429Keycloak-server: too long and not settings compliant session
- CVE-2025-12105Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
- CVE-2025-58712Amq: privilege escalation via excessive /etc/passwd permissions
- CVE-2025-11568Luksmeta: data corruption when handling luks1 partitions with luksmeta
- CVE-2025-9640Samba: vfs_streams_xattr uninitialized memory write possible
- CVE-2025-11731Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
- CVE-2025-11561Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems
- CVE-2025-6242Vllm: server side request forgery (ssrf) in mediaconnector
- CVE-2025-11234Qemu-kvm: vnc websocket handshake use-after-free
- CVE-2025-10725Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin
- CVE-2025-7493Freeipa: idm: privilege escalation from host to domain admin in freeipa
- CVE-2025-57852Openshift-ai: privilege escalation via excessive /etc/passwd permissions
- CVE-2025-11060Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptions
- CVE-2025-11021Libsoup: out-of-bounds read in cookie date handling of libsoup http library
- CVE-2025-60019Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via…