RE
Vendor
Redhat
17,464
CVEs
567
On KEV
25
New 30D
Products
EL9.9
Enterprise Linux
Redhat
1,948 CVEs26 on KEV12 new
SA9.8
Satellite
Redhat
241 CVEs4 on KEV7 new
OC10.0
Openshift Container Platform
Redhat
334 CVEs7 on KEV6 new
EL9.8
Enterprise Linux Aus
Redhat
50 CVEs4 on KEV0 new
EL10.0
Enterprise Linux Server
Redhat
1,886 CVEs59 on KEV0 new
EL10.0
Enterprise Linux Workstation
Redhat
1,841 CVEs58 on KEV0 new
EL10.0
Enterprise Linux Desktop
Redhat
1,925 CVEs57 on KEV0 new
EL9.8
Enterprise Linux Eus
Redhat
788 CVEs42 on KEV0 new
EL10.0
Enterprise Linux Server Aus
Redhat
1,057 CVEs37 on KEV0 new
EL10.0
Enterprise Linux Server Tus
Redhat
765 CVEs21 on KEV0 new
EL9.8
Enterprise Linux For Ibm Z Systems
Redhat
117 CVEs20 on KEV0 new
EL9.8
Enterprise Linux For Power Little Endian
Redhat
111 CVEs16 on KEV0 new
EL9.8
Enterprise Linux For Ibm Z Systems Eus
Redhat
92 CVEs16 on KEV0 new
EL9.8
Enterprise Linux For Power Little Endian Eus
Redhat
98 CVEs15 on KEV0 new
EL9.8
Enterprise Linux For Power Big Endian
Redhat
45 CVEs15 on KEV0 new
EL9.8
Enterprise Linux For Power Big Endian Eus
Redhat
20 CVEs12 on KEV0 new
EL10.0
Enterprise Linux Server Eus
Redhat
620 CVEs9 on KEV0 new
EL9.8
Enterprise Linux For Scientific Computing
Redhat
71 CVEs9 on KEV0 new
EL9.8
Enterprise Linux Server From Rhui
Redhat
12 CVEs9 on KEV0 new
EL9.0
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Redhat
65 CVEs6 on KEV0 new
EL9.0
Enterprise Linux Server Update Services For Sap Solutions
Redhat
43 CVEs6 on KEV0 new
EL9.0
Enterprise Linux Update Services For Sap Solutions
Redhat
34 CVEs6 on KEV0 new
JE10.0
Jboss Enterprise Application Platform
Redhat
241 CVEs5 on KEV0 new
SC9.8
Software Collections
Redhat
137 CVEs5 on KEV0 new
VI9.8
Virtualization
Redhat
127 CVEs5 on KEV0 new
EL9.8
Enterprise Linux For Arm 64
Redhat
46 CVEs5 on KEV0 new
GS9.8
Gluster Storage Server For On-premise
Redhat
7 CVEs5 on KEV0 new
VH9.8
Virtualization Host
Redhat
84 CVEs4 on KEV0 new
CL8.8
Codeready Linux Builder
Redhat
44 CVEs4 on KEV0 new
EL9.8
Enterprise Linux For Arm 64 Eus
Redhat
37 CVEs4 on KEV0 new
EL9.8
Enterprise Linux Tus
Redhat
26 CVEs4 on KEV0 new
EL9.8
Enterprise Linux Eus Compute Node
Redhat
5 CVEs4 on KEV0 new
EL9.8
Enterprise Linux Hpc Node
Redhat
146 CVEs3 on KEV0 new
JE9.8
Jboss Enterprise Web Server
Redhat
35 CVEs3 on KEV0 new
FU9.8
Fuse
Redhat
29 CVEs3 on KEV0 new
EL9.8
Enterprise Linux For Real Time For Nfv Tus
Redhat
22 CVEs3 on KEV0 new
EL9.8
Enterprise Linux For Real Time Tus
Redhat
21 CVEs3 on KEV0 new
EL9.8
Enterprise Linux Server Supplementary Eus
Redhat
83 CVEs2 on KEV0 new
EL9.8
Enterprise Linux Hpc Node Eus
Redhat
81 CVEs2 on KEV0 new
EL9.8
Enterprise Linux For Real Time
Redhat
44 CVEs2 on KEV0 new
EL9.8
Enterprise Linux For Real Time For Nfv
Redhat
38 CVEs2 on KEV0 new
JC9.8
Jboss Core Services
Redhat
35 CVEs2 on KEV0 new
ST9.8
Storage
Redhat
31 CVEs2 on KEV0 new
CL8.8
Codeready Linux Builder Eus
Redhat
21 CVEs2 on KEV0 new
CL8.8
Codeready Linux Builder For Ibm Z Systems Eus
Redhat
19 CVEs2 on KEV0 new
CL8.8
Codeready Linux Builder For Power Little Endian Eus
Redhat
18 CVEs2 on KEV0 new
CL8.8
Codeready Linux Builder For Arm64 Eus
Redhat
17 CVEs2 on KEV0 new
CL7.8
Codeready Linux Builder For Power Little Endian
Redhat
17 CVEs2 on KEV0 new
OA9.9
Openshift AI
Redhat
11 CVEs2 on KEV0 new
EL9.0
Enterprise Linux For Ibm Z Systems Eus S390x
Redhat
7 CVEs2 on KEV0 new
EL8.8
Enterprise Linux Els
Redhat
5 CVEs2 on KEV0 new
JE8.1
Jboss Enterprise Web Server Text-only Advisories
Redhat
2 CVEs2 on KEV0 new
OP9.8
Openshift
Redhat
145 CVEs1 on KEV0 new
CL9.8
Cloudforms
Redhat
48 CVEs1 on KEV0 new
AA8.8
Ansible Automation Platform
Redhat
27 CVEs1 on KEV0 new
GS9.8
Gluster Storage
Redhat
25 CVEs1 on KEV0 new
OC9.8
Openshift Container Platform For Power
Redhat
23 CVEs1 on KEV0 new
AB7.8
Automatic Bug Reporting Tool
Redhat
18 CVEs1 on KEV0 new
CL7.8
Codeready Linux Builder For Ibm Z Systems
Redhat
17 CVEs1 on KEV0 new
CL7.8
Codeready Linux Builder For Arm64
Redhat
13 CVEs1 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104045 | EL Enterprise Linux Redhat | 4.7 | Oct 6 | Sssd: sssd: denial of service via race condition in autofs responder |
| CVE-2026-104046 | EL Enterprise Linux Redhat | 6.2 | Oct 6 | Sssd: sssd: denial of service via incomplete identity provider authentication requests |
| CVE-2026-104048 | EL Enterprise Linux Redhat | 8.1 | Oct 6 | Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation |
| CVE-2026-104047 | OC Openshift Container Platform Redhat | 5.3 | Oct 6 | Sssd: sssd: information disclosure via query injection in entra id lookups |
| CVE-2026-88252 | EL Enterprise Linux Redhat | 5.5 | Oct 6 | Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion |
| CVE-2026-104040 | EL Enterprise Linux Redhat | 6.1 | Oct 6 | Sssd: sssd: information disclosure via odata injection in entra id lookups |
| CVE-2026-12542 | SA Satellite Redhat | 7.8 | Oct 1 | Foreman: command injection in foreman-tail |
| CVE-2026-96658 | SA Satellite Redhat | 8.8 | Oct 1 | Foreman: foreman: arbitrary code execution via safemode sandbox bypass |
| CVE-2026-96659 | SA Satellite Redhat | 9.1 | Oct 1 | Foreman: excessive permissions for viewer role on preview |
| CVE-2026-12544 | SA Satellite Redhat | 7.7 | Oct 1 | Foreman: ssti and insecure deserialization in foreman-rake configuration |
| CVE-2026-12541 | SA Satellite Redhat | 8.2 | Oct 1 | Foreman: command injection in foreman-rake database tasks |
| CVE-2026-12540 | SA Satellite Redhat | 8.2 | Oct 1 | Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter |
| CVE-2026-12423 | SA Satellite Redhat | 7.5 | Oct 1 | Foreman: unauthenticated information disclosure via provisioning token validation flaw |
| CVE-2026-102560 | EL Enterprise Linux Redhat | 9.8 | Sep 29 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth |
| CVE-2026-102559 | EL Enterprise Linux Redhat | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking |
| CVE-2026-102558 | EL Enterprise Linux Redhat | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth |
| CVE-2026-102555 | EL Enterprise Linux Redhat | 8.2 | Sep 29 | Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding |
| CVE-2026-102557 | EL Enterprise Linux Redhat | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly |
| CVE-2026-102556 | EL Enterprise Linux Redhat | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion |
| CVE-2026-90462 | EL Enterprise Linux Redhat | 5.4 | Sep 22 | Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization |
| CVE-2026-90996 | EL Enterprise Linux Redhat | 5.5 | Sep 14 | Sssd: sssd: denial of service in nss responder via crafted zero-length requests |
| CVE-2026-90995 | EL Enterprise Linux Redhat | 5.5 | Sep 14 | Sssd: sssd: local denial of service due to null pointer dereference in pam responder |
| CVE-2026-71224 | EL Enterprise Linux Redhat | 4.7 | Sep 3 | Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk |
| CVE-2026-71222 | EL Enterprise Linux Redhat | 6.3 | Sep 3 | Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing |
| CVE-2026-71221 | EL Enterprise Linux Redhat | 7.0 | Sep 3 | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta |
| CVE-2026-71220 | EL Enterprise Linux Redhat | 7.0 | Sep 3 | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit |
| CVE-2026-71219 | EL Enterprise Linux Redhat | 4.7 | Sep 3 | Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal |
| CVE-2026-82343 | EL Enterprise Linux Redhat | 6.1 | Aug 28 | Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling |
| CVE-2026-82330 | EL Enterprise Linux Redhat | 6.1 | Aug 28 | Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check |
| CVE-2026-82328 | EL Enterprise Linux Redhat | 6.1 | Aug 28 | Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count |
| CVE-2026-82324 | EL Enterprise Linux Redhat | 6.1 | Aug 28 | Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 |
| CVE-2026-81658 | SA Satellite Redhat | 6.5 | Aug 27 | Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup |
| CVE-2026-80101 | EL Enterprise Linux Redhat | 4.4 | Aug 25 | Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation |
| CVE-2026-78475 | EL Enterprise Linux Redhat | 6.1 | Aug 24 | Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader |
| CVE-2026-11861 | EL Enterprise Linux Redhat | 8.1 | Aug 20 | Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships |
| CVE-2026-73198 | EL Enterprise Linux Redhat | 7.5 | Aug 20 | Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read |
| CVE-2026-13097 | EL Enterprise Linux Redhat | 8.7 | Aug 20 | Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore |
| CVE-2026-73196 | EL Enterprise Linux Redhat | 6.5 | Aug 20 | Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding |
| CVE-2026-73197 | EL Enterprise Linux Redhat | 7.5 | Aug 20 | Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read |
| CVE-2026-74247 | QU Quay Redhat | 7.1 | Aug 14 | Quay: ssrf via build archive_url in quay build api |
| CVE-2026-74245 | QU Quay Redhat | 7.5 | Aug 14 | Quay: unauthenticated exported logs download in quay |
| CVE-2026-74244 | OU Openshift Update Service Redhat | 7.5 | Aug 14 | Quay: stripe webhook accepts forged events without signature verification in quay |
| CVE-2026-74243 | QU Quay Redhat | 8.2 | Aug 14 | Quay: unauthenticated secscan notification endpoint in quay when psk is unset |
| CVE-2026-74242 | OU Openshift Update Service Redhat | 4.4 | Aug 14 | Quay: repository notification uuid idor in quay api |
| CVE-2026-74241 | QU Quay Redhat | 6.5 | Aug 14 | Quay: ldap referral filter injection in quay external ldap authentication |
| CVE-2026-74240 | OU Openshift Update Service Redhat | 5.4 | Aug 14 | Quay: jwt claim validation bypasses in quay federated robot and sso authentication |
| CVE-2026-13002 | EL Enterprise Linux Redhat | 4.4 | Aug 14 | Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing |
| CVE-2026-58224 | EL Enterprise Linux Redhat | 6.5 | Aug 14 | Samba: ctdb fails to do integrity checking of received packets |
| CVE-2026-19617 | HI Hardened Images Redhat | 5.5 | Aug 14 | Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser |
| CVE-2026-73584 | EL Enterprise Linux Redhat | 6.3 | Aug 13 | Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling |
| CVE-2026-73583 | EL Enterprise Linux Redhat | 6.6 | Aug 13 | Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr |
| CVE-2026-73585 | EL Enterprise Linux Redhat | 6.3 | Aug 13 | Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack |
| CVE-2026-18728 | EL Enterprise Linux Redhat | 6.5 | Aug 13 | Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing |
| CVE-2026-71846 | AC Advanced Cluster Management For Kubernetes Redhat | 6.5 | Aug 12 | Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege |
| CVE-2026-18727 | EL Enterprise Linux Redhat | 6.5 | Aug 12 | Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing |
| CVE-2026-18726 | EL Enterprise Linux Redhat | 6.5 | Aug 12 | Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing |
| CVE-2026-19654 | EL Enterprise Linux Redhat | 7.5 | Aug 12 | Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd |
| CVE-2026-73433 | EL Enterprise Linux Redhat | 6.6 | Aug 12 | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write |
| CVE-2026-73434 | EL Enterprise Linux Redhat | 6.1 | Aug 12 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing |
| CVE-2026-19548 | OC Openshift Container Platform Redhat | 5.5 | Aug 12 | Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing |