Vendor
Red Hat
13,198 known vulnerabilities in products by Red Hat, 147 of them actively exploited (CISA KEV).
Key figures
13,198
Vulnerabilities
147
Actively exploited (KEV)
18
Used by ransomware
1,361
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2012-4681 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2012-1723 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2017-12149 | Red Hat JBoss Application Server Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2019-11043 | Underflow in PHP-FPM can lead to RCE In CISA KEVRansomware | 8.7 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2017-12615 | Apache Tomcat on Windows Remote Code Execution Vulnerability In CISA KEVRansomware | 8.1 | |
| Critical | CVE-2026-64849 | MLflow Server-Side Request Forgery Vulnerability In CISA KEV | 9.3 | |
| Critical | CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2018-15982 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2026-42271 | LiteLLM: Authenticated command execution via MCP stdio test endpoints In CISA KEV | 8.8 | |
| Critical | CVE-2010-1428 | Red Hat JBoss Information Disclosure Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2025-62593 | Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack In CISA KEV | 8.8 | |
| Critical | CVE-2017-1000253 | Linux Kernel PIE Stack Buffer Corruption Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability In CISA KEV | 9.3 | |
| Critical | CVE-2010-0738 | Red Hat JBoss Authentication Bypass Vulnerability In CISA KEVRansomware | 5.3 | |
| Critical | CVE-2019-7609 | Kibana Arbitrary Code Execution In CISA KEV | 10.0 | |
| Critical | CVE-2019-1003030 | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability In CISA KEV | 9.9 |
News
- PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malwarethehackernews,
- PHP2Shell exposes the weakness in coordinated vulnerability disclosurecsoonline,
- Neutralizing PHP2Shell: Stopping Critical PHP RCEs with VMware vDefend and Avi WAFvmware-security,
- Two critical PHP flaws put the web on alert as emergency patches arrivecsoonline,
- PHP2Shell Patches Land as First Exploitation Attempts Hit Sensorssecurityweek,
- PHP ships emergency patches for critical PHP2Shell flawsbleepingcomputer,