Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Red Hat — Vulnerabilities & Security Advisories 1440

Browse all 1440 CVE security advisories affecting Red Hat. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Red Hat operates primarily as a provider of open-source enterprise software solutions, most notably its Linux operating system and container platforms. With 688 recorded Common Vulnerabilities and Exposures, the organization’s historical attack surface frequently involves remote code execution, cross-site scripting, and privilege escalation flaws within its middleware and management tools. These vulnerabilities often stem from complex codebases and third-party dependencies integrated into its distribution. Security characteristics are defined by a rigorous patching lifecycle and the Red Hat Security Response Team, which issues timely advisories for critical issues. While major public breaches directly attributed to Red Hat core infrastructure are rare, individual component flaws have occasionally allowed attackers to gain unauthorized access or execute arbitrary commands. The company maintains a strong reputation for transparency, providing detailed technical guidance to help administrators mitigate risks associated with its widely deployed enterprise technologies.

Found 323 results / 1440 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-96276 Flatpak: flatpak: arbitrary write in host context via flatpak build-init — Red Hat Enterprise Linux 10 CWE-22 6.5 Medium 2026-09-23
CVE-2026-96275 Flatpak: flatpak: arbitrary write access as root via extra-data extraction — Red Hat Enterprise Linux 10 CWE-22 8.8 High 2026-09-23
CVE-2026-90462 Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization — Red Hat Enterprise Linux 10 CWE-280 5.4 Medium 2026-09-22
CVE-2026-94640 Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service — Red Hat Enterprise Linux 10 CWE-400 7.5 High 2026-09-22
CVE-2026-95508 Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu — Red Hat Enterprise Linux 10 CWE-787 7.4 High 2026-09-22
CVE-2026-93433 Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing — Red Hat Enterprise Linux 10 CWE-121 5.5 Medium 2026-09-21
CVE-2026-92382 Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write — Red Hat Enterprise Linux 10 CWE-787 4.1 Medium 2026-09-21
CVE-2026-94184 Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01) — Red Hat Enterprise Linux 10 CWE-121 5.3 Medium 2026-09-21
CVE-2026-80110 Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint — Red Hat Enterprise Linux 10 CWE-863 8.1 High 2026-09-21
CVE-2026-91202 Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste — Red Hat Enterprise Linux 10 CWE-61 6.1 Medium 2026-09-18
CVE-2026-91203 Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition — Red Hat Enterprise Linux 10 CWE-363 6.0 Medium 2026-09-18
CVE-2026-91205 Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race — Red Hat Enterprise Linux 10 CWE-363 6.0 Medium 2026-09-18
CVE-2026-92768 Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments — Red Hat Enterprise Linux 10 CWE-214 5.5 Medium 2026-09-18
CVE-2026-92747 Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list — Red Hat Enterprise Linux 10 CWE-214 5.0 Medium 2026-09-18
CVE-2026-92745 Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments — Red Hat Enterprise Linux 10 CWE-214 5.0 Medium 2026-09-18
CVE-2026-91142 Cockpit: integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ilp32 builds — Red Hat Enterprise Linux 10 CWE-787 3.6 Low 2026-09-18
CVE-2026-91147 Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash — Red Hat Enterprise Linux 10 CWE-617 5.9 Medium 2026-09-18
CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning — Red Hat Enterprise Linux 10 CWE-770 7.5 High 2026-09-18
CVE-2026-93676 Xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks — Red Hat Enterprise Linux 10 CWE-284 3.2 Low 2026-09-18
CVE-2026-93653 Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service) — Red Hat Enterprise Linux 10 CWE-606 5.5 Medium 2026-09-18
CVE-2026-81627 Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram — Red Hat Enterprise Linux 10 CWE-787 8.2 High 2026-09-18
CVE-2026-86320 Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`) — Red Hat Enterprise Linux 10 CWE-94 7.8 High 2026-09-17
CVE-2026-85234 Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine — Red Hat Enterprise Linux 10 CWE-125 7.5 High 2026-09-15
CVE-2026-91786 Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size — Red Hat Enterprise Linux 10 CWE-125 6.1 Medium 2026-09-15
CVE-2026-90996 Sssd: sssd: denial of service in nss responder via crafted zero-length requests — Red Hat Enterprise Linux 10 CWE-191 4.0 Medium 2026-09-14
CVE-2026-90995 Sssd: sssd: local denial of service due to null pointer dereference in pam responder — Red Hat Enterprise Linux 10 CWE-476 5.5 Medium 2026-09-14
CVE-2026-90994 Sssd: sssd: denial of service via malformed pam v1 requests — Red Hat Enterprise Linux 10 CWE-125 4.0 Medium 2026-09-14
CVE-2026-90463 Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`) — Red Hat Enterprise Linux 10 CWE-125 4.0 Medium 2026-09-14
CVE-2026-89329 Device-mapper-multipath: local denial of service via blocking ipc send operations — Red Hat Enterprise Linux 10 CWE-1322 6.2 Medium 2026-09-11
CVE-2026-77159 Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink — Red Hat Enterprise Linux 10 CWE-61 5.5 Medium 2026-09-11

This page lists every published CVE security advisory associated with Red Hat. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.