Vendor

    Red Hat

    2,743 known vulnerabilities in products by Red Hat, 3 of them actively exploited (CISA KEV).

    Key figures

    2,743

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    170

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Red Hat
    SeverityCVETitleCVSSPublished
    CriticalCVE-2025-24813

    Apache Tomcat Path Equivalence Vulnerability

    In CISA KEV

    9.8
    CriticalCVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    In CISA KEV

    7.5
    CriticalCVE-2023-4911

    Glibc: buffer overflow in ld.so leading to privilege escalation

    In CISA KEV

    7.8
    CriticalCVE-2022-34265

    Django: SQL Injection

    9.8
    CriticalCVE-2007-4559

    Python Software Foundation CPython: Path Traversal

    9.8
    CriticalCVE-2026-4631

    Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

    9.8
    CriticalCVE-2024-5535

    SSL_select_next_proto buffer overread

    9.1
    HighCVE-2025-3155

    Yelp: arbitrary file read

    7.4
    CriticalCVE-2026-18963

    Red Hat: Weak Password Recovery Mechanism for Forgotten Password

    9.1
    CriticalCVE-2025-10230

    Samba: command injection in wins server hook script

    10.0
    CriticalCVE-2026-4480

    Samba: samba: remote code execution in printing subsystem via unescaped job description

    9.0
    HighCVE-2023-24580

    Django: Denial of Service

    7.5
    HighCVE-2023-23969

    Django: Denial of Service

    7.5
    CriticalCVE-2024-12084

    Rsync: heap buffer overflow in rsync due to improper checksum length handling

    9.8
    CriticalCVE-2024-3094

    Xz: malicious code in distributed source

    10.0
    MediumCVE-2024-2511

    Unbounded memory growth with session handling in TLSv1.3

    5.9
    CriticalCVE-2024-45337

    Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

    9.1
    CriticalCVE-2022-24724

    Integer overflow in table parsing extension leads to heap memory corruption

    8.8
    CriticalCVE-2026-1709

    Red Hat Enterprise Linux 10: Key Exchange without Entity Authentication

    9.4
    HighCVE-2026-6893

    Dracut: dracut: root code execution via dhcp options command injection

    7.5
    HighCVE-2026-8632

    HP Linux Imaging and Printing Software: Command Injection

    7.8
    HighCVE-2026-40217

    BerriAI LiteLLM: Unprotected Alternate Channel

    8.8
    CriticalCVE-2026-42945

    NGINX ngx_http_rewrite_module vulnerability

    8.1
    HighCVE-2026-58459

    gpsd gpsprof Command Injection via gnuplot plot title subtype field

    7.8
    HighCVE-2023-46847

    Squid: denial of service in http digest authentication

    8.6

    All vulnerabilities in search

    News

    Products

    Products by Red Hat
    ProductCVEsActively exploited
    Red Hat Enterprise Linux 91,1901
    Red Hat Enterprise Linux 81,1681
    Red Hat Enterprise Linux 79221
    Red Hat Enterprise Linux 68721
    Red Hat Enterprise Linux 108570
    Enterprise Linux4071
    Red Hat Openshift Container Platform 43740
    Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support2110
    Red Hat Hardened Images2100
    Red Hat Single Sign-on 71900
    Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support1830
    Red Hat Enterprise Linux 9.2 Update Services For Sap Solutions1720
    Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions1630
    Red Hat Enterprise Linux 8.8 Telecommunications Update Service1600
    Red Hat Enterprise Linux 9.6 Extended Update Support1590
    Red Hat Enterprise Linux 10.0 Extended Update Support1530
    Red Hat Jboss Enterprise Application Platform Expansion Pack1440
    Red Hat Enterprise Linux 7 Extended Lifecycle Support1430
    Red Hat Enterprise Linux 8.4 Extended Update Support Long-life Add-on1360
    Red Hat Build Of Keycloak1210
    Red Hat Enterprise Linux 9.4 Extended Update Support1180
    Red Hat Enterprise Linux 9.2 Extended Update Support1130
    Red Hat Enterprise Linux 8.2 Advanced Update Support1120
    Ansible Automation Platform1110
    Red Hat Enterprise Linux 9.4 Update Services For Sap Solutions1110
    Red Hat Enterprise Linux 8.8 Extended Update Support1040
    Red Hat Enterprise Linux 9.0 Update Services For Sap Solutions1020
    Red Hat Jboss Enterprise Application Platform 81010
    Red Hat Enterprise Linux 8.6 Extended Update Support Long-life Add-on990
    Red Hat Data Grid 8960
    Red Hat Enterprise Linux 8.6 Telecommunications Update Service950
    Red Hat Enterprise Linux 8.6 Update Services For Sap Solutions950
    Red Hat Build Of Keycloak 26.4860
    Red Hat Jboss Enterprise Application Platform 7800
    Red Hat Fuse 7790
    Red Hat Openshift Container Platform 4.14750
    Red Hat Openshift Container Platform 4.15720
    Red Hat Openshift Container Platform 4.16720
    Red Hat Openshift Container Platform 4.18720
    Red Hat Enterprise Linux 8.6 Extended Update Support691
    Red Hat Openshift Container Platform 4.17690
    Red Hat Satellite 6690
    Openshift Container Platform671
    Red Hat Build Of Keycloak 26.6670
    Red Hat Enterprise Linux 8.4 Telecommunications Update Service660
    Red Hat Enterprise Linux 8.4 Update Services For Sap Solutions660
    Red Hat Openshift Container Platform 4.13660
    Red Hat Openshift AI 3.4630
    Red Hat Openshift Container Platform 4.12610
    Red Hat Discovery 2570
    Red Hat Update Infrastructure 5570
    Openshift561
    Red Hat Openshift Container Platform 4.19550
    Red Hat Ansible Automation Platform 2530
    Red Hat Enterprise Linux 9.0 Extended Update Support521
    Red Hat Ansible Automation Platform 2.5 For Rhel 8490
    Red Hat Ansible Automation Platform 2.5 For Rhel 9490
    Red Hat Enterprise Linux 6 Extended Lifecycle Support - Extension450
    Red Hat Ansible Automation Platform 2.7440
    Red Hat Ansible Automation Platform 2.6430