What’s Vulnerable › Products
Red Hat Enterprise Linux vulnerabilities
1951 known vulnerabilities, 27 confirmed exploited in the wild (CISA KEV), 236 published in the last 12 months.
Check whether your Red Hat Enterprise Linux version is affected
Exploited Red Hat Enterprise Linux vulnerabilities
- CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
- CVE-2015-5287 — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- CVE-2015-3246 — Red Hat Libuser Race Condition Vulnerability
- CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
- CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2025-31277 — Apple Multiple Products Buffer Overflow Vulnerability
- CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
- CVE-2017-1000253 — Linux Kernel PIE Stack Buffer Corruption Vulnerability
- CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
- CVE-2023-5217 — Google Chromium libvpx Heap Buffer Overflow Vulnerability
- CVE-2018-14667 — Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
- CVE-2016-9079 — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
- CVE-2023-32373 — Apple Multiple Products WebKit Use-After-Free Vulnerability
- CVE-2014-0196 — Linux Kernel Race Condition Vulnerability
- CVE-2010-3904 — Linux Kernel Improper Input Validation Vulnerability
- CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
- CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability
- CVE-2022-0847 — Linux Kernel Privilege Escalation Vulnerability
- CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
- CVE-2016-5195 — Linux Kernel Race Condition Vulnerability
- CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
- CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
- CVE-2019-13272 — Linux Kernel Improper Privilege Management Vulnerability
Latest Red Hat Enterprise Linux vulnerabilities
- CVE-2026-104046 — Sssd: sssd: denial of service via incomplete identity provider authentication requests (CVSS 6.2)
- CVE-2026-104045 — Sssd: sssd: denial of service via race condition in autofs responder (CVSS 4.7)
- CVE-2026-104048 — Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation (CVSS 8.1)
- CVE-2026-104047 — Sssd: sssd: information disclosure via query injection in entra id lookups (CVSS 5.3)
- CVE-2026-88252 — Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion (CVSS 5.5)
- CVE-2026-104040 — Sssd: sssd: information disclosure via odata injection in entra id lookups (CVSS 6.1)
- CVE-2026-102560 — Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth (CVSS 9.8)
- CVE-2026-102559 — Libsoup: libsoup: heap buffer overflow during websocket client-frame masking (CVSS 8.6)
- CVE-2026-102558 — Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth (CVSS 8.6)
- CVE-2026-102555 — Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding (CVSS 8.2)
- CVE-2026-102557 — Libsoup: libsoup: heap buffer overflow during websocket message reassembly (CVSS 8.6)
- CVE-2026-102556 — Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion (CVSS 8.6)
- CVE-2026-90462 — Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization (CVSS 5.4)
- CVE-2026-90996 — Sssd: sssd: denial of service in nss responder via crafted zero-length requests (CVSS 5.5)
- CVE-2026-90995 — Sssd: sssd: local denial of service due to null pointer dereference in pam responder (CVSS 5.5)
- CVE-2026-71224 — Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk (CVSS 4.7)
- CVE-2026-71222 — Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing (CVSS 6.3)
- CVE-2026-71221 — Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta (CVSS 7.0)
- CVE-2026-71220 — Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit (CVSS 7.0)
- CVE-2026-71219 — Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal (CVSS 4.7)
- CVE-2026-82343 — Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling (CVSS 6.1)
- CVE-2026-82330 — Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check (CVSS 6.1)
- CVE-2026-82328 — Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count (CVSS 6.1)
- CVE-2026-82324 — Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 (CVSS 6.1)
- CVE-2026-80101 — Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation (CVSS 4.4)