AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Red Hat security advisories

821 advisories across Red Hat

Company profile
Medium 6.5Oct 26A flaw was found in the Infinispan Operator for Red Hat Data GridCVE-2026-92171no fix yetHigh 7.4Oct 23Red Hat, Inc.: CVE records (CNA): plaintext password storageCVE-2026-110975fixed in Red Hat +1High 7.6Oct 23Red Hat iscsiuio: out-of-bounds readCVE-2026-115484no fix yetMedium 6.3Oct 23Red Hat iscsiuio: out-of-bounds readCVE-2026-115485no fix yetHigh 7.1Oct 23Red Hat iscsiuio: out-of-bounds readCVE-2026-115486no fix yetMedium 5.5Oct 22Red Hat OpenShift client: attacker could write attacker-controlled contentCVE-2026-115424no fix yetMedium 5.5Oct 22Red Hat GNU patch: path traversalCVE-2026-115207no fix yetHigh 7.4Oct 22Red Hat Goose.: information disclosureCVE-2026-111079no fix yetMedium 6.8Oct 21Red Hat: improper certificate validationCVE-2026-114406no fix yetMedium 6.1Oct 21Red Hat OpenSCAP.: path traversalCVE-2026-85518no fix yetMedium 4.2Oct 21Red Hat Build of Keycloak: improper authenticationCVE-2026-114438no fix yetLow 3.3Oct 21Red Hat Confidential Compute Attestation: resource leakCVE-2026-114236no fix yetMedium 6.2Oct 21Red Hat libmodulemd.: resource exhaustionCVE-2026-92823no fix yetMedium 6.2Oct 21Red Hat libmodulemd.: out-of-bounds readCVE-2026-92824no fix yetMedium 6.2Oct 21Red Hat libmodulemd.: denial of serviceCVE-2026-92822no fix yetMedium 5.1Oct 21Red Hat device-mapper-multipath: out-of-bounds readCVE-2026-114038no fix yetMedium 5.0Oct 20Red Hat cockpit-machines: information disclosureCVE-2026-113495no fix yetMedium 5.0Oct 20A flaw was found in cockpit-machinesCVE-2026-113496no fix yetHigh 7.7Oct 20The StreamsHub Console operator acts as a confused deputyCVE-2026-105311fixed in 0.12.10 +1Critical 9.9Oct 20Red Hat StreamsHub Console for Apache Kafka: improper privilege managementCVE-2026-105312fixed in 0.12.10 +1High 8.8Oct 20Red Hat, Inc.: CVE records (CNA): authentication bypassCVE-2026-105949fixed in Red Hat +1High 7.3Oct 20Red Hat Enterprise Linux: code executionCVE-2026-112177no fix yetHigh 7.8Oct 19Red Hat GIMP: out-of-bounds readCVE-2026-112257no fix yetHigh 7.8Oct 19Red Hat GIMP: use after freeCVE-2026-112258no fix yetHigh 7.8Oct 19Red Hat GIMP. Opening a crafted XCF: use after freeCVE-2026-112261no fix yetHigh 7.1Oct 19Red Hat GIMP: out-of-bounds readCVE-2026-112260no fix yetMedium 5.5Oct 19Red Hat GIMP: null pointer dereferenceCVE-2026-112259no fix yetMedium 6.5Oct 19Red Hat GStreamer ASF demuxer: denial of serviceCVE-2026-112214no fix yetHigh 7.4Oct 19Red Hat: capture-replayCVE-2026-103314no fix yetHigh 7.4Oct 19Red Hat bootc: insufficient authenticity checkCVE-2026-16460no fix yetMedium 6.6Oct 16Red Hat parted: heap buffer overflowCVE-2026-89085no fix yetMedium 5.5Oct 16Red Hat parted. A heap-based buffer overflow exists: heap buffer overflowCVE-2026-89088no fix yetMedium 5.9Oct 16Red Hat nfs-utils: denial of serviceCVE-2026-89096no fix yetMedium 6.6Oct 16Red Hat Nautilus.: link followingCVE-2026-111802no fix yetLow 3.6Oct 16Red Hat libarchive: denial of serviceCVE-2026-17591no fix yetMedium 6.1Oct 16Red Hat GIMP: denial of serviceCVE-2026-62438no fix yetHigh 7.0Oct 16Red Hat GIMP. An integer overflow occurs: integer overflowCVE-2026-62439no fix yetMedium 6.5Oct 16Red Hat libtirpc. An authenticated remote attacker: denial of serviceCVE-2026-85231no fix yetMedium 5.3Oct 16Red Hat libtirpc: resource exhaustionCVE-2026-85977no fix yetMedium 5.5Oct 16Red Hat nfs-utils: denial of serviceCVE-2026-89098no fix yetLow 3.3Oct 16Red Hat libblockdev: argument injectionCVE-2026-111581no fix yetMedium 6.0Oct 16A flaw was found in luksmetaCVE-2026-111555no fix yetHigh 7.5Oct 16Red Hat spice-server: out-of-bounds readCVE-2026-105958no fix yetHigh 7.5Oct 16Red Hat spice-server: buffer overflowCVE-2026-105959no fix yetHigh 7.8Oct 16Red Hat cifs-utils. This flaw: privilege escalationCVE-2026-104715no fix yetHigh 7.1Oct 16Red Hat WildFly: improper access controlCVE-2026-84823no fix yetHigh 8.8Oct 15Red Hat JBoss Enterprise Application Platform 8.1: path traversalCVE-2026-85634no fix yetHigh 8.5Oct 15Red Hat Ansible Operator Plugins: template injectionCVE-2026-92982no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto: uninitialized pointerCVE-2026-86847no fix yetHigh 8.8Oct 14Red Hat DPDK lib/vhost vhost-crypto: race conditionCVE-2026-86848no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto. Integer overflow: integer overflowCVE-2026-86849no fix yetMedium 6.5Oct 14Red Hat DPDK nfp vDPA driver. Stack: memory corruptionCVE-2026-86856no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost: denial of serviceCVE-2026-86566no fix yetHigh 8.8Oct 14Red Hat DPDK lib/vhost: use after freeCVE-2026-86567no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto: use after freeCVE-2026-86845no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto: out-of-bounds writeCVE-2026-86846no fix yetMedium 5.7Oct 14Red Hat evolution-data-server: information disclosureCVE-2026-110777fixed in 3.62.1High 7.8Oct 14Red Hat DPDK lib/vhost: race conditionCVE-2026-86562no fix yetHigh 7.8Oct 14A flaw was found in DPDK lib/vhostCVE-2026-86563no fix yetHigh 8.2Oct 14Red Hat DPDK lib/vhost: out-of-bounds writeCVE-2026-86565no fix yet

The newest 60. Each project page has the full list.

About Red Hat

Red Hat, LLC is an American software company that provides open source software products to enterprises and is a subsidiary of IBM. Founded in 1993, Red Hat has its corporate headquarters in Raleigh, North Carolina, with other offices worldwide.

Elsewhere on Ibis: Acquisitions · Paydays