Where
-Infinity
0

Vendor Risk Score

See how redhat compares to other vendors in security performance

View Risk Score →

Software

redhat enterprise linux
1045
redhat enterprise linux desktop
800
redhat enterprise linux server
747
redhat enterprise linux workstation
715
redhat enterprise linux server aus
508
redhat enterprise linux server tus
397
redhat enterprise linux eus
351
redhat enterprise linux server eus
300
redhat linux
236
redhat openshift container platform
154
redhat jboss enterprise application platform
136
redhat satellite
90
redhat fedora core
81
redhat openstack
78
redhat enterprise linux for ibm z systems
68
redhat linux advanced workstation
68
redhat single sign-on
62
redhat virtualization
61
redhat enterprise linux for power little endian
59
redhat enterprise linux for ibm z systems eus
55
redhat enterprise linux for power little endian eus
55
redhat software collections
53
redhat virtualization host
50
redhat enterprise linux server for power little endian update services for sap solutions
41
redhat enterprise linux for real time
36
redhat enterprise linux for arm 64
35
redhat enterprise mrg
35
redhat keycloak
33
redhat enterprise linux hpc node
32
redhat openshift
31
redhat enterprise linux for real time for nfv
30
redhat undertow
30
redhat enterprise linux for arm 64 eus
29
redhat build of keycloak
27
redhat jboss core services
27
redhat jboss fuse
23
redhat codeready linux builder
22
redhat fuse
22
redhat jboss enterprise web server
22
redhat ansible tower
20
redhat enterprise linux for power big endian
20
redhat enterprise linux for real time for nfv tus
19
redhat enterprise linux for real time tus
19
redhat enterprise linux server update services for sap solutions
19
redhat hardened images
19
redhat jboss data grid
19
redhat enterprise linux hpc node eus
18
redhat libvirt
18
redhat openshift application runtimes
18
redhat ansible automation platform
16

redhat Enterprise LinuxGnutls: gnutls: authentication bypass via nul character in username

Risk 90
Severity
9.8
First published (updated )

maven/org.keycloak/keycloak-servicesOrg.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabled

Risk 25
Severity
5.4
EPSS
0.03%
First published (updated )

Red Hat OpenShift Container PlatformOpenshift-controller-manager: openshift container platform: information disclosure via environment variable injection

Risk 16
Severity
4.3
EPSS
0.03%
First published (updated )

redhat Multicluster Engine For KubernetesAssisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

Risk 26
Severity
6.1
EPSS
0.01%
First published (updated )

redhat Enterprise LinuxLibxml2: libxml2: denial of service via crafted xsd-validated document

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SUSE Linux Enterprise ServerLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Risk 91
Severity
7.8
First published (updated )

Red Hat Red Hat QuayQuay: red hat quay: authentication bypass allows privileged actions without valid credentials

Risk 43
Severity
8.1
EPSS
0.05%
First published (updated )

redhat Enterprise LinuxNano: nano: format string vulnerability leads to denial of service

Risk 23
Severity
5.5
EPSS
0.02%
First published (updated )

redhat Enterprise LinuxBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Risk 23
Severity
5.5
EPSS
0.02%
First published (updated )

pypi/instructlabInstructlab: instructlab: path traversal allows arbitrary directory creation and file write

Risk 38
Severity
7.1
EPSS
0.02%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxBinutils: binutils: denial of service via crafted elf file

Risk 22
Severity
5
EPSS
0.01%
First published (updated )

redhat Enterprise LinuxBinutils: binutils: arbitrary code execution via malformed xcoff object file processing

Risk 51
Severity
7.8
EPSS
0.02%
First published (updated )

InstructLab InstructLabInstructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`

Risk 56
Severity
8.8
EPSS
0.13%
First published (updated )

redhat Enterprise LinuxGimp: gimp: denial of service via crafted pvr image file

Risk 31
Severity
5.5
First published (updated )

redhat Enterprise LinuxGimp: gimp: heap buffer overflow due to integer overflow in fits image loader

Risk 68
Severity
7.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxGimp: gimp: denial of service due to stack buffer overflow in tim image loader

Risk 31
Severity
5.5
First published (updated )

redhat Enterprise LinuxGimp: gimp: denial of service via specially crafted seattle filmworks file

Risk 41
Severity
6.1
First published (updated )

redhat Enterprise LinuxGimp: gimp: application crashes or information disclosure via crafted icns image files

Risk 51
Severity
7.1
First published (updated )

redhat Enterprise LinuxGimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing

Risk 51
Severity
7.8
EPSS
0.01%
First published (updated )

redhat Enterprise LinuxLibarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Risk 23
Severity
5.5
EPSS
0.02%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxTar: tar: hidden file injection via crafted archives

Risk 24
Severity
5.5
EPSS
0.03%
First published (updated )

redhat Enterprise LinuxLibtheora: libtheora: denial of service or information disclosure via malformed avi file processing

Risk 28
Severity
7.1
EPSS
0.01%
First published (updated )

maven/org.keycloak:keycloak-servicesKeycloak: org.keycloak.protocol.oidc.grants.ciba: keycloak: information disclosure via cors header injection due to unvalidated jwt azp claim

Risk 27
Severity
5.3
First published (updated )

redhat OpenShift AIOdh-dashboard: odh dashboard kubernetes service account exposure

Risk 59
Severity
9.9
EPSS
0.06%
First published (updated )

redhat Enterprise LinuxCorosync: corosync: denial of service via integer overflow in join message validation

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxCorosync: corosync: denial of service and information disclosure via crafted udp packet

Risk 54
Severity
8.2
First published (updated )

redhat Enterprise LinuxGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )

redhat Enterprise LinuxVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset

Risk 51
Severity
7.8
EPSS
0.01%
First published (updated )

redhat Enterprise LinuxVirtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

Risk 46
Severity
6.7
EPSS
0.01%
First published (updated )

redhat Enterprise LinuxLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Risk 61
Severity
9.8
EPSS
0.10%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203