Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Red Hat — Vulnerabilities & Security Advisories 1444

Browse all 1444 CVE security advisories affecting Red Hat. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Red Hat operates primarily as a provider of open-source enterprise software solutions, most notably its Linux operating system and container platforms. With 688 recorded Common Vulnerabilities and Exposures, the organization’s historical attack surface frequently involves remote code execution, cross-site scripting, and privilege escalation flaws within its middleware and management tools. These vulnerabilities often stem from complex codebases and third-party dependencies integrated into its distribution. Security characteristics are defined by a rigorous patching lifecycle and the Red Hat Security Response Team, which issues timely advisories for critical issues. While major public breaches directly attributed to Red Hat core infrastructure are rare, individual component flaws have occasionally allowed attackers to gain unauthorized access or execute arbitrary commands. The company maintains a strong reputation for transparency, providing detailed technical guidance to help administrators mitigate risks associated with its widely deployed enterprise technologies.

Found 320 results / 1444 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-66338 Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() — Red Hat Enterprise Linux 10 CWE-444 5.4 Medium 2026-07-24
CVE-2026-66339 Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels — Red Hat Enterprise Linux 10 CWE-201 6.5 Medium 2026-07-24
CVE-2026-16743 Accountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed users — Red Hat Enterprise Linux 10 CWE-269 5.5 Medium 2026-07-24
CVE-2026-16730 Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup — Red Hat Enterprise Linux 10 CWE-755 5.5 Medium 2026-07-24
CVE-2026-64611 Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel() — Red Hat Enterprise Linux 10 CWE-835 7.5 High 2026-07-23
CVE-2026-6390 Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. — Red Hat Enterprise Linux 10 CWE-134 6.8 Medium 2026-07-23
CVE-2026-16473 Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame — Red Hat Enterprise Linux 10 CWE-125 4.3 Medium 2026-07-22
CVE-2026-16517 Libarchive: libarchive: signed integer overflow in archive_write_zip_header — Red Hat Enterprise Linux 10 CWE-190 2.9 Low 2026-07-21
CVE-2026-12548 Libsoup: heap out-of-bounds read in libsoup due to integer truncation — Red Hat Enterprise Linux 10 CWE-125 4.2 Medium 2026-07-21
CVE-2026-12547 Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch — Red Hat Enterprise Linux 10 CWE-201 3.4 Low 2026-07-21
CVE-2026-59851 Libssh: libssh: authentication bypass via missing gssapi principal check — Red Hat Enterprise Linux 10 CWE-863 8.8 High 2026-07-21
CVE-2026-59850 Libssh: libssh: use-after-free via data callbacks on closed channels — Red Hat Enterprise Linux 10 CWE-416 4.3 Medium 2026-07-21
CVE-2026-59849 Libssh: libssh: denial of service via automatic certificate authentication loop — Red Hat Enterprise Linux 10 CWE-835 3.1 Low 2026-07-21
CVE-2026-59848 Libssh: libssh: denial of service via sftp responses with unknown request ids — Red Hat Enterprise Linux 10 CWE-770 5.3 Medium 2026-07-21
CVE-2026-59847 Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification — Red Hat Enterprise Linux 10 CWE-253 5.9 Medium 2026-07-21
CVE-2026-59846 Libssh: libssh: information disclosure via proxycommand %r username expansion — Red Hat Enterprise Linux 10 CWE-78 3.9 Low 2026-07-21
CVE-2026-16461 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting — Red Hat Enterprise Linux 10 CWE-121 6.5 Medium 2026-07-21
CVE-2026-59844 Libssh: libssh: denial of service via oversized sftp read length — Red Hat Enterprise Linux 10 CWE-789 6.5 Medium 2026-07-21
CVE-2026-59845 Libssh: libssh: denial of service via unchecked proxycommand fork() failure — Red Hat Enterprise Linux 10 CWE-390 5.3 Medium 2026-07-21
CVE-2026-59843 Libssh: libssh: denial of service via zero advertised channel packet size — Red Hat Enterprise Linux 10 CWE-835 6.5 Medium 2026-07-21
CVE-2026-59842 Libssh: libssh: information disclosure via short gssapi curve25519 public key — Red Hat Enterprise Linux 10 CWE-125 3.7 Low 2026-07-21
CVE-2026-15370 Libssh: libssh: stack buffer overflow in sftp server longname construction — Red Hat Enterprise Linux 10 CWE-121 6.7 Medium 2026-07-21
CVE-2026-15811 Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes — Red Hat Enterprise Linux 10 CWE-212 5.8 Medium 2026-07-21
CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links — Red Hat Enterprise Linux 10 CWE-290 4.8 Medium 2026-07-21
CVE-2026-64612 Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png — Red Hat Enterprise Linux 10 CWE-248 7.5 High 2026-07-20
CVE-2026-16277 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() — Red Hat Enterprise Linux 10 CWE-121 6.5 Medium 2026-07-20
CVE-2026-12080 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys — Red Hat Enterprise Linux 10 CWE-61 7.3 High 2026-07-20
CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering — Red Hat Enterprise Linux 10 CWE-770 5.3 Medium 2026-07-20
CVE-2026-15813 Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation — Red Hat Enterprise Linux 10 CWE-787 6.5 Medium 2026-07-20
CVE-2026-15779 Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation — Red Hat Enterprise Linux 10 CWE-732 6.1 Medium 2026-07-15

This page lists every published CVE security advisory associated with Red Hat. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.