What’s Vulnerable › Products
RedHat Enterprise Linux Server vulnerabilities
1891 known vulnerabilities, 59 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your RedHat Enterprise Linux Server version is affected
Exploited RedHat Enterprise Linux Server vulnerabilities
- CVE-2015-5287 — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability
- CVE-2014-0502 — Adobe Flash Player Double Free Vulnerablity
- CVE-2014-0497 — Adobe Flash Player Integer Underflow Vulnerablity
- CVE-2013-0648 — Adobe Flash Player Code Execution Vulnerability
- CVE-2013-0643 — Adobe Flash Player Incorrect Default Permissions Vulnerability
- CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability
- CVE-2016-9079 — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
- CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability
- CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
- CVE-2018-6065 — Google Chromium V8 Integer Overflow Vulnerability
- CVE-2018-17480 — Google Chromium V8 Out-of-Bounds Write Vulnerability
- CVE-2018-17463 — Google Chromium V8 Remote Code Execution Vulnerability
- CVE-2017-5070 — Google Chromium V8 Type Confusion Vulnerability
- CVE-2017-5030 — Google Chromium V8 Memory Corruption Vulnerability
- CVE-2016-5198 — Google Chromium V8 Out-of-Bounds Memory Vulnerability
- CVE-2016-1646 — Google Chromium V8 Out-of-Bounds Read Vulnerability
- CVE-2015-8651 — Adobe Flash Player Integer Overflow Vulnerability
- CVE-2015-4495 — Mozilla Firefox Security Feature Bypass Vulnerability
- CVE-2017-8291 — Artifex Ghostscript Type Confusion Vulnerability
- CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability
- CVE-2018-5002 — Adobe Flash Player Stack-based Buffer Overflow Vulnerability
- CVE-2019-8506 — Apple Multiple Products Type Confusion Vulnerability
- CVE-2014-0160 — OpenSSL Information Disclosure Vulnerability
- CVE-2015-5123 — Adobe Flash Player Use-After-Free Vulnerability
Latest RedHat Enterprise Linux Server vulnerabilities
- CVE-2025-6021 — Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 (CVSS 7.5)
- CVE-2025-2784 — Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content (CVSS 6.5)
- CVE-2024-12085 — Rsync: info leak via uninitialized stack contents (CVSS 7.5)
- CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability (CVSS 7.8) — exploited
- CVE-2024-0409 — Xorg-x11-server: selinux context corruption (CVSS 7.8)
- CVE-2024-0408 — Xorg-x11-server: selinux unlabeled glx pbuffer (CVSS 5.5)
- CVE-2023-6816 — Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer (CVSS 9.8)
- CVE-2023-5455 — Ipa: invalid csrf protection (CVSS 6.5)
- CVE-2023-5869 — Postgresql: buffer overrun from integer overflow in array modification (CVSS 8.8)
- CVE-2023-46847 — Squid: denial of service in http digest authentication (CVSS 7.5)
- CVE-2023-3972 — Insights-client: unsafe handling of temporary files and directories (CVSS 7.8)
- CVE-2023-5367 — Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty (CVSS 7.8)
- CVE-2023-3899 — Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration (CVSS 7.8)
- CVE-2023-0179 — (CVSS 7.8)
- CVE-2023-0494 — (CVSS 7.8)
- CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability (CVSS 8.8) — exploited
- CVE-2022-4254 — (CVSS 8.8)
- CVE-2015-1931 — (CVSS 5.5)
- CVE-2014-0148 — (CVSS 5.5)
- CVE-2014-0147 — (CVSS 6.2)
- CVE-2014-0144 — (CVSS 8.6)
- CVE-2022-2739 — (CVSS 5.3)
- CVE-2022-2738 — (CVSS 7.5)
- CVE-2022-1227 — (CVSS 8.8)
- CVE-2022-0330 — (CVSS 7.8)