Read the docs

Red Hat

Records7414All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical793CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

8 records in Openshift Container Platform For Arm64 · all components

TI-2023-05177 CVE-2023-5625 · GHSA-326p-894x-j8c7

Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

Priority MEDIUM 41

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0098 Published 2023-11-01 Fixed in 0.30.2-4.el9, 0.30.2-4.el8ost +1 CWE-770
TI-2022-03955 CVE-2022-4318 · GHSA-cm9x-c3rh-7rc4

Cri-o: /etc/passwd tampering privesc

Priority LOW 36

A vulnerability was found in cri-o.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0029 Published 2023-09-25 Fixed in 1.24.4-10.rhaos4.11.git1ed5ac5.el8, 1.25.2-9.rhaos4.12.git0a083f9.el9 +1 CWE-538
TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4

Glib: integer overflow in in g_escape_uri_string()

Priority LOW 34

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00346 Published 2025-11-26 Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190
TI-2023-02895 CVE-2023-3089 · GHSA-wj5p-x3cr-46w8

Ocp & fips mode

Priority LOW 33

A compliance problem was found in the Red Hat OpenShift Container Platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2023-07-05 Partial fix · 4.12.0 CWE-693
TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf

Path traversal in containers/storage

Priority LOW 32

A vulnerability was found in Podman, Buildah, and CRI-O.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01325 Published 2024-10-15 Partial fix · 1.55.1, 8100020241101101019.afee755d +181 CWE-22
TI-2024-01604 CVE-2024-1725 · GHSA-fg9q-5cw2-p6r9

Kubevirt-csi: persistentvolume allows access to hcp's root node

Priority LOW 32

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00631 Published 2024-03-07 Fixed in v4.13.0-202404200313.p0.g9d909f7.assembly.stream.el8, v4.14.0-202404161544.p0.g48fafc4.assembly.stream.el8 +2 CWE-501
Open these records in search →