Complete feed
Security advisories & CVEs
1904 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-71498] Information disclosure via out-of-bounds read with malformed UTF-8 input
Information disclosure via out-of-bounds read with malformed UTF-8 input. Red Hat rates this moderate (CVSS 5.1). Weakness: CWE-125.
Medium [CVE-2026-70631] Information disclosure via uninitialized heap memory read in TIFF decoder
Information disclosure via uninitialized heap memory read in TIFF decoder. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-70630] Information disclosure via uninitialized heap memory read in Screenpresso decoder
Information disclosure via uninitialized heap memory read in Screenpresso decoder. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824.
Medium [CVE-2026-70629] Information disclosure via uninitialized heap memory read in RSCC decoder
Information disclosure via uninitialized heap memory read in RSCC decoder. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-71497] Cross-site scripting via malformed HTML tag names
Cross-site scripting via malformed HTML tag names. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-1289. Affected products named by the advisory: Cryostat 4; Migration Toolkit for Applications 8; OpenShift Developer Tools and Services; Red Hat AMQ Broker 7; and 12 more. Affected products named by the advisory: Red Hat build of Apache Camel - HawtIO 4; Red Hat build of Apicurio Registry 3; Red Hat build of Quarkus Native builder; Red Hat Enterprise Linux 10; and 8 more.
Medium [CVE-2026-61632] Information disclosure via path traversal in b64 extension
Information disclosure via path traversal in b64 extension. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-22. Affected products named by the advisory: Red Hat Developer Hub; Red Hat OpenShift Container Platform 4; Self-service automation portal 2.
Medium [CVE-2026-19167] Cross-origin data leakage via integer overflow in GPU
Cross-origin data leakage via integer overflow in GPU. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-190.
Medium [CVE-2026-19146] Google Chrome (Android): Information disclosure via uninitialized GPU memory use
Google Chrome (Android): Information disclosure via uninitialized GPU memory use. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-824.
Medium [CVE-2026-19139] OS-level privilege escalation due to a race condition via a malicious file
OS-level privilege escalation due to a race condition via a malicious file. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-367.
Medium [CVE-2026-71439] Denial of Service via Radar Diagrams 'ticks' parameter
Denial of Service via Radar Diagrams 'ticks' parameter. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1050.
Medium [CVE-2026-71438] Prototype pollution vulnerability via configuration APIs
Prototype pollution vulnerability via configuration APIs. Red Hat rates this moderate (CVSS 4). Weakness: CWE-915. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces.
Medium [CVE-2026-50159] CSS injection allows altering page elements via diagram input
CSS injection allows altering page elements via diagram input. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-79.
Medium [CVE-2026-71437] Prototype pollution vulnerability allows potential arbitrary code execution
Prototype pollution vulnerability allows potential arbitrary code execution. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-915.
Medium [CVE-2026-64654] Terminal escape sequence injection allows command execution
Terminal escape sequence injection allows command execution. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-78.
Medium [CVE-2026-64653] Path traversal via unescaped URL variables
Path traversal via unescaped URL variables. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-22.
Medium [CVE-2026-43630] Information disclosure via out-of-bounds read
Information disclosure via out-of-bounds read. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-70639] Denial of Service in Android JNI wrapper via malicious model file
Denial of Service in Android JNI wrapper via malicious model file. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2025-49506] Information disclosure via timing attack in password validation
Information disclosure via timing attack in password validation. Red Hat rates this low (CVSS 5.9). Weakness: CWE-208. Red Hat lists fixing advisory RHSA-2026:58474 with package apr-util-main-1.6.5-1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: apr-util.
Medium [CVE-2026-32327] Denial of Service via XML stack recursion attack
Denial of Service via XML stack recursion attack. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-776. Red Hat lists fixing advisory RHSA-2026:58474 with package apr-util-main-1.6.5-1.hum1.
Medium [CVE-2026-57818] Authorization Code Replay via Race Condition
Authorization Code Replay via Race Condition. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-639. Affected products named by the advisory: Red Hat build of Apache Camel for Spring Boot 4; Red Hat JBoss Enterprise Application Platform 7; Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat JBoss Web Server 5.