Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Red Hat — Vulnerabilities & Security Advisories 1138

Browse all 1138 CVE security advisories affecting Red Hat. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Red Hat operates primarily as a provider of open-source enterprise software solutions, most notably its Linux operating system and container platforms. With 688 recorded Common Vulnerabilities and Exposures, the organization’s historical attack surface frequently involves remote code execution, cross-site scripting, and privilege escalation flaws within its middleware and management tools. These vulnerabilities often stem from complex codebases and third-party dependencies integrated into its distribution. Security characteristics are defined by a rigorous patching lifecycle and the Red Hat Security Response Team, which issues timely advisories for critical issues. While major public breaches directly attributed to Red Hat core infrastructure are rare, individual component flaws have occasionally allowed attackers to gain unauthorized access or execute arbitrary commands. The company maintains a strong reputation for transparency, providing detailed technical guidance to help administrators mitigate risks associated with its widely deployed enterprise technologies.

Found 44 results / 1138Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2026-72693 Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login — Red Hat Hardened ImagesCWE-284 7.8 High2026-08-11
CVE-2026-19079 Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation — Red Hat Hardened ImagesCWE-367 4.4 Medium2026-08-07
CVE-2026-44605 Rpm: heap buffer overflow in ndb slot table parsing — Red Hat Hardened ImagesCWE-190 5.5 Medium2026-08-05
CVE-2026-18477 Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape — Red Hat Hardened ImagesCWE-367 4.4 Medium2026-08-03
CVE-2026-18508 Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite — Red Hat Hardened ImagesCWE-59 4.4 Medium2026-08-03
CVE-2026-15003 Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service — Red Hat Hardened ImagesCWE-125 5.6 Medium2026-07-27
CVE-2026-16517 Libarchive: libarchive: signed integer overflow in archive_write_zip_header — Red Hat Hardened ImagesCWE-190 2.9 Low2026-07-21
CVE-2026-59851 Libssh: libssh: authentication bypass via missing gssapi principal check — Red Hat Hardened ImagesCWE-863 8.8 High2026-07-21
CVE-2026-59850 Libssh: libssh: use-after-free via data callbacks on closed channels — Red Hat Hardened ImagesCWE-416 4.3 Medium2026-07-21
CVE-2026-59849 Libssh: libssh: denial of service via automatic certificate authentication loop — Red Hat Hardened ImagesCWE-835 3.1 Low2026-07-21
CVE-2026-59848 Libssh: libssh: denial of service via sftp responses with unknown request ids — Red Hat Hardened ImagesCWE-770 5.3 Medium2026-07-21
CVE-2026-59847 Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification — Red Hat Hardened ImagesCWE-253 5.9 Medium2026-07-21
CVE-2026-59846 Libssh: libssh: information disclosure via proxycommand %r username expansion — Red Hat Hardened ImagesCWE-78 3.9 Low2026-07-21
CVE-2026-59844 Libssh: libssh: denial of service via oversized sftp read length — Red Hat Hardened ImagesCWE-789 6.5 Medium2026-07-21
CVE-2026-59845 Libssh: libssh: denial of service via unchecked proxycommand fork() failure — Red Hat Hardened ImagesCWE-390 5.3 Medium2026-07-21
CVE-2026-59843 Libssh: libssh: denial of service via zero advertised channel packet size — Red Hat Hardened ImagesCWE-835 6.5 Medium2026-07-21
CVE-2026-59842 Libssh: libssh: information disclosure via short gssapi curve25519 public key — Red Hat Hardened ImagesCWE-125 3.7 Low2026-07-21
CVE-2026-15370 Libssh: libssh: stack buffer overflow in sftp server longname construction — Red Hat Hardened ImagesCWE-121 6.7 Medium2026-07-21
CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering — Red Hat Hardened ImagesCWE-770 5.3 Medium2026-07-20
CVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header — Red Hat Hardened ImagesCWE-805 3.9 Low2026-07-10
CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing — Red Hat Hardened ImagesCWE-416 6.8 Medium2026-06-29
CVE-2026-4367 Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing — Red Hat Hardened ImagesCWE-125 5.5 Medium2026-06-16
CVE-2026-11850 Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read — Red Hat Hardened ImagesCWE-191 5.0 Medium2026-06-11
CVE-2026-44604 Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command — Red Hat Hardened ImagesCWE-78 7.0 High2026-05-28
CVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated document — Red Hat Hardened ImagesCWE-843 6.5 Medium2026-04-23
CVE-2026-6846 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing — Red Hat Hardened ImagesCWE-122 7.8 High2026-04-22
CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file — Red Hat Hardened ImagesCWE-476 5.0 Medium2026-04-22
CVE-2026-1584 Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder — Red Hat Hardened ImagesCWE-476 7.5 High2026-04-09
CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows — Red Hat Hardened ImagesCWE-427 7.8 High2026-04-07
CVE-2026-5745 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive — Red Hat Hardened ImagesCWE-476 5.5 Medium2026-04-07

This page lists every published CVE security advisory associated with Red Hat. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.