Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-26466Openssh: denial-of-service in openssh
- CVE-2025-1634Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout
- CVE-2025-26601Xorg: xwayland: use-after-free in syncinittrigger()
- CVE-2025-26600Xorg: xwayland: use-after-free in playreleasedevents()
- CVE-2025-26599Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
- CVE-2025-26598Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
- CVE-2025-26597Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
- CVE-2025-26596Xorg: xwayland: heap overflow in xkbwritekeysyms()
- CVE-2025-26595Xorg: xwayland: buffer overflow in xkbvmodmasktext()
- CVE-2025-26594X.org: xwayland: use-after-free of the root cursor
- CVE-2025-0690Grub2: read: integer overflow may lead to out-of-bounds write
- CVE-2025-0677Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks
- CVE-2025-0624Grub2: net: out-of-bounds write in grub_net_search_config_file()
- CVE-2025-1118Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled
- CVE-2024-45777Grub2: grub-core/gettext: integer overflow leads to heap oob write.
- CVE-2025-0622Grub2: command/gpg: use-after-free due to hooks not being removed on module unload
- CVE-2024-45783Grub2: fs/hfs+: refcount can be decremented twice
- CVE-2024-45781Grub2: fs/ufs: oob write in the heap
- CVE-2024-45776Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.
- CVE-2024-45775Grub2: commands/extcmd: missing check for failed allocation
- CVE-2025-26465Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
- CVE-2024-45774Grub2: reader/jpeg: heap oob write during jpeg parsing
- CVE-2024-4028Keycloak-core: stored xss in keycloak when creating a items in admin console
- CVE-2025-1391Keycloak-services: improper authorization in keycloak organization mapper allows unauthorized organization claims
- CVE-2025-1247Io.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance
- CVE-2025-1244Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
- CVE-2024-12243Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
- CVE-2024-12133Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
- CVE-2024-11831Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
- CVE-2025-23367Org.wildfly.core:wildfly-server: wildfly improper rbac permission