Red Hat CVEs
2,575 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-2842Tempo-operator: tempo operator token exposition lead to read sensitive data
- CVE-2025-2786Tempo-operator: serviceaccount token exposure leading to token and subject access reviews in openshift tempo operator
- CVE-2025-2586Ols: unauthenticated metrics flooding in openshift lightspeed service leading to resource exhaustion
- CVE-2024-6875Infinispan: infinispan: rest compare api has buffer leak
- CVE-2025-2877Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
- CVE-2025-31181Gnuplot: gnuplot segmentation fault on x11_graphics
- CVE-2025-31180Gnuplot: gnuplot segmentation fault on canvas_text
- CVE-2025-31179Gnuplot: gnuplot segmentation fault on xstrftime
- CVE-2025-31178Gnuplot: gnuplot segmentation fault on getannotatestring
- CVE-2025-31176Gnuplot: gnuplot segmentation fault on plot3d_points
- CVE-2025-2559Org.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloak
- CVE-2024-7631Openshift-console: openshift console: path traversal
- CVE-2025-2487389-ds-base: null pointer dereference leads to denial of service
- CVE-2025-2241Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm
- CVE-2025-1057Keylime: keylime registrar dos due to incompatible database entry handling
- CVE-2025-2157Foreman: disclosure of executed commands and outputs in foreman / red hat satellite
- CVE-2024-8176Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
- CVE-2025-2240Smallrye-fault-tolerance: smallrye fault tolerance
- CVE-2025-23368Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
- CVE-2025-0686Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat
- CVE-2025-0685Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data
- CVE-2025-0684Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data
- CVE-2025-0678Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data
- CVE-2024-45782Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
- CVE-2024-45778Grub2: fs/bfs: integer overflow in the bfs parser.
- CVE-2025-1801Aap-gateway: aap-gateway privilege escalation
- CVE-2024-45779Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
- CVE-2024-45780Grub2: fs/tar: integer overflow causes heap oob write
- CVE-2025-0689Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
- CVE-2025-1125Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write