Red Hat vulnerabilities
Every vulnerability this feed holds for Red Hat, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
121 vulnerabilities tracked. 2 confirmed exploited in the wild. 3 with public exploit code.
- — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- — Red Hat Libuser Race Condition Vulnerability
- 9.9 A flaw was found in Red Hat Ansible Automation Platform's automation- controller.
- 9.8 A flaw was found in FreeIPA.
- 9.8 A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or…
- 9.6 A flaw was found in FreeIPA.
- 9.6 A flaw was found in the AAP Controller's HashiCorp Vault credential plugin.
- 9.0 A path traversal vulnerability was found in pulpcore.
- 9.0 A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition() function.
- 8.8 A flaw was found in Foreman.
- 8.8 A flaw was found in rubygem-foremanremoteexecution.
- 8.8 A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via…
- 8.8 A flaw was found in bubblewrap.
- 8.8 EAP's Artemis deserialization configuration permits deserialization by default.
- 8.8 A flaw was found in WebKitGTK.
- 8.8 A flaw was found in WebKitGTK.
- 8.8 A flaw was found in JBoss marshalling.
- 8.7 A flaw was found in Red Hat Ansible Automation Platform's automation- controller.
- 8.7 A privilege escalation flaw was found in FreeIPA.
- 8.7 A flaw was found in Undertow.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.5 A flaw was found in libxml2 with Python bindings enabled.
- 8.4 A flaw was found in GIMP's PSD file format plugin.
- 8.2 A flaw was found in Foreman.
- 8.2 A flaw was found in Foreman.
- 8.2 A flaw was found in libsoup.
- 8.2 A flaw was found in Netty.
- 8.2 A flaw was found in FreeIPA.
- 8.1 A flaw was found in FreeIPA.
- 8.1 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval()…
- 8.1 when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528,…
- 8.1 A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check…
- 7.9 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and…
- 7.8 A flaw was found in GIMP.
- 7.8 A flaw was found in GIMP.
- 7.8 A flaw was found in GIMP.
- 7.8 A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader.
- 7.8 A flaw was found in GIMP.
- 7.8 A code execution flaw was found in Emacs, affecting versions prior to 31.2.
- 7.8 A flaw was found in the file-psd plugin in GIMP.
- 7.8 A flaw was found in GIMP.
- 7.8 A flaw was found in GIMP's ICO file loader.
- 7.8 A flaw was found in util-linux.
- 7.8 A flaw was found in Emacs TRAMP.
- 7.8 A flaw was found in Vim's netrw plugin.
- 7.8 openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context.
- 7.8 A flaw was found in the file-fits plugin in GIMP.
- 7.8 A flaw was found in CRI-O.
- 7.8 A flaw was found in ansible-core.
- 7.8 A flaw was found in xfig.
- 7.8 A vulnerability was found in Buildah.
- 7.7 A flaw was found in the OpenShift console.
- 7.7 A flaw was found in libstdc++.
- 7.6 A flaw was found in sg3utils.
- 7.5 A flaw was found in Foreman.
- 7.5 The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit…
Showing the 60 that warrant attention first, of 121. Search the full feed for Red Hat.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Red Hat is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft n/a MediaTek, Inc. Linux Apache Software Foundation Gitea WAVLINK Huawei Eclipse Foundation Apple WSO2 Dell PostgreSQL Control Web Panel Hewlett Packard Enterprise (HPE) nodejs Netpbm aws zephyrproject MONGODB Cisco Unknown Petpooja Oray