Red Hat CVEs
2,575 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-5731Infinispan: credential leakage in infinispan cli
- CVE-2025-5318Libssh: out-of-bounds read in sftp_handle()
- CVE-2025-6032Podman: podman missing tls verification
- CVE-2025-5416Keycloak-core: keycloak environment information
- CVE-2025-6193Trustyai-explainability: command injection via lmevaljob cr
- CVE-2025-6019Libblockdev: lpe from allow_active to root in libblockdev via udisks
- CVE-2025-49180Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
- CVE-2025-49179Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
- CVE-2025-49178Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
- CVE-2025-49177Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
- CVE-2025-49176Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
- CVE-2025-49175Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
- CVE-2025-6199Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder
- CVE-2025-6196Libgepub: integer overflow in libgepub's epub archive handling
- CVE-2025-4404Freeipa: idm: privilege escalation from host to domain admin in freeipa
- CVE-2025-6020Linux-pam: linux-pam directory traversal
- CVE-2025-49794Libxml: heap use after free (uaf) leads to denial of service (dos)
- CVE-2025-6170Libxml2: stack buffer overflow in xmllint interactive shell command handling
- CVE-2025-49795Libxml: null pointer dereference leads to denial of service (dos)
- CVE-2025-49796Libxml: type confusion leads to denial of service (dos)
- CVE-2025-6052Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
- CVE-2025-6035Gimp: gimp integer overflow
- CVE-2025-6021Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
- CVE-2025-5914Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
- CVE-2025-5918Libarchive: reading past eof may be triggered for piped file streams
- CVE-2025-5917Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
- CVE-2025-5916Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c
- CVE-2025-5915Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
- CVE-2025-25209Rhcl: sharedsecretref can be used to leak secrets severity
- CVE-2025-25208Rhcl: authorino denial of service through authpolicy with sharedsecretref severity