Red Hat
12,849 CVEs tracked since 1999. Since Oct 2021, 25 of them reached CISA KEV.
Red Hat CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-10 | 23 | 0 |
| 2021-11 | 30 | 0 |
| 2021-12 | 37 | 3 |
| 2022-01 | 72 | 1 |
| 2022-02 | 53 | 1 |
| 2022-03 | 78 | 2 |
| 2022-04 | 49 | 0 |
| 2022-05 | 49 | 0 |
| 2022-06 | 44 | 0 |
| 2022-07 | 36 | 0 |
| 2022-08 | 130 | 0 |
| 2022-09 | 58 | 0 |
| 2022-10 | 51 | 0 |
| 2022-11 | 45 | 0 |
| 2022-12 | 97 | 0 |
| 2023-01 | 65 | 0 |
| 2023-02 | 59 | 1 |
| 2023-03 | no snapshot | |
| 2023-04 | 37 | 1 |
| 2023-05 | 38 | 0 |
| 2023-06 | 65 | 2 |
| 2023-07 | 72 | 0 |
| 2023-08 | 70 | 1 |
| 2023-09 | 84 | 2 |
| 2023-10 | 78 | 2 |
| 2023-11 | 66 | 0 |
| 2023-12 | 56 | 0 |
| 2024-01 | 77 | 2 |
| 2024-02 | 79 | 0 |
| 2024-03 | 68 | 0 |
| 2024-04 | 210 | 0 |
| 2024-05 | 431 | 0 |
| 2024-06 | 120 | 0 |
| 2024-07 | 220 | 0 |
| 2024-08 | 121 | 0 |
| 2024-09 | 170 | 0 |
| 2024-10 | 212 | 0 |
| 2024-11 | 148 | 3 |
| 2024-12 | 196 | 2 |
| 2025-01 | 128 | 0 |
| 2025-02 | 300 | 0 |
| 2025-03 | 166 | 0 |
| 2025-04 | 130 | 0 |
| 2025-05 | 218 | 0 |
| 2025-06 | 259 | 1 |
| 2025-07 | 294 | 0 |
| 2025-08 | 79 | 0 |
| 2025-09 | 267 | 0 |
| 2025-10 | 337 | 0 |
| 2025-11 | 84 | 0 |
| 2025-12 | 211 | 0 |
| 2026-01 | 111 | 0 |
| 2026-02 | 46 | 0 |
| 2026-03 | 89 | 0 |
| 2026-04 | 73 | 1 |
| 2026-05 | 95 | 0 |
| 2026-06 | 132 | 0 |
| 2026-07 | 164 | 0 |
| 2026-08 | 228 | 0 |
| 2026-09 | 265 | 0 |
| 2026-10 | 241 | 0 |
| 2026-11 | 0 |
Products
The products that kept showing up in Red Hat's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat.
- CVE-2026-104045Sssd: sssd: denial of service via race condition in autofs responder4.7
- CVE-2026-104046Sssd: sssd: denial of service via incomplete identity provider authentication requests6.2
- CVE-2026-104048Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation6.8
- CVE-2026-104047Sssd: sssd: information disclosure via query injection in entra id lookups5.3
- CVE-2026-88252Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion4.7
- CVE-2026-104039Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder4.7
- CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidation5.5
- CVE-2026-104031Sssd: sssd: denial of service via memory exhaustion in autofs responder5.5
- CVE-2026-104029Sssd: sssd: denial of service via out-of-bounds read in autofs responder3.3
- CVE-2026-104030Sssd: sssd: denial of service via out-of-bounds read during passkey parsing5.5
- CVE-2026-12542Foreman: command injection in foreman-tail5.3
- CVE-2026-96659Foreman: excessive permissions for viewer role on preview9.1
- CVE-2026-96658Foreman: foreman: arbitrary code execution via safemode sandbox bypass8.8
- CVE-2026-12544Foreman: ssti and insecure deserialization in foreman-rake configuration7.7
- CVE-2026-12541Foreman: command injection in foreman-rake database tasks8.2
The record
- Peak rank
- #1 in Feb 2014
- Busiest month shown
- May 2024, 431 CVEs
- Months with a KEV entry
- 15 since Oct 2021
- Monthly snapshots
- 291 since 1999