Red Hat CVEs
2,575 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-25207Rhcl: authpolicy callbacks result in denial of service in authorino severity
- CVE-2025-47711Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
- CVE-2025-47712Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service
- CVE-2025-5791Users: `root` appended to group listings
- CVE-2025-0620Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session
- CVE-2025-4598Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
- CVE-2025-5278Coreutils: heap buffer under-read in gnu coreutils sort via key specification
- CVE-2025-5222Icu: stack buffer overflow in the srbroot::addtag function
- CVE-2025-5198Stackrox: xss in stackrox
- CVE-2025-48798Gimp: multiple use after free in xcf parser
- CVE-2025-48797Gimp: multiple heap buffer overflows in tga parser
- CVE-2025-48796Gimp: stack-based buffer overflows in file-ico
- CVE-2025-4057Activemq-artemis-operator: amq broker operator starting credentials reuse
- CVE-2025-5024Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus
- CVE-2025-4969Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c
- CVE-2025-4945Libsoup: integer overflow in cookie expiration date handling in libsoup
- CVE-2025-4948Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup
- CVE-2025-4476Libsoup: null pointer dereference in libsoup may lead to denial of service
- CVE-2025-4478Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service
- CVE-2025-3931Yggdrasil: local privilege escalation in yggdrasil
- CVE-2025-4574Crossbeam-channel: crossbeam-channel vulnerable to double free on drop
- CVE-2025-4432Ring: some aes functions may panic when overflow checking is enabled in ring
- CVE-2025-4382Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm
- CVE-2025-3528Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry
- CVE-2025-31177Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one
- CVE-2024-12225Io.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypass
- CVE-2025-4374Quay: incorrect privilege assignment
- CVE-2025-4373Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
- CVE-2025-3910Org.keycloak.authentication: two factor authentication bypass
- CVE-2025-3501Org.keycloak.protocol.services: keycloak hostname verification