CVE Tools
Track your stack

Red Hat Hardened Images

270 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Hardened Images, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Hardened Images CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Hardened Images CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-065
2025-075
2025-080
2025-096
2025-101
2025-111
2025-128
2026-0112
2026-025
2026-0324
2026-0431
2026-0513
2026-0627
2026-0719
2026-0820
2026-0939
2026-1031
2026-1123

Severity

How the 270 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical52%
  • High10037%
  • Medium13450%
  • Low3111%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Hardened Images.

  1. CVE-2026-121885Podman: untrusted image labels allow auto-update to restart arbitrary systemd units6.5
  2. CVE-2026-124747Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file size7.5
  3. CVE-2026-125709Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.4.2
  4. CVE-2026-122056Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service5.9
  5. CVE-2026-112314Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries7.5
  6. CVE-2026-112321Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths7.5
  7. CVE-2026-112320Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching7.5
  8. CVE-2026-112319Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation6.5
  9. CVE-2026-112318Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers6.5
  10. CVE-2026-112316Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failure6.5
  11. CVE-2026-112317Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error path5.3
  12. CVE-2026-112315Krb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failure5.3
  13. CVE-2026-119079Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding7.5
  14. CVE-2026-112323Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests7.5
  15. CVE-2026-112322Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup7.5

Product grouping is registry-driven, with AI assist and human review. How it works