Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2718 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 52 critical, 951 high, 1442 medium, 271 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Critical [CVE-2026-110152] Buffer overflow in ANGLE
Buffer overflow in ANGLE. Red Hat rates this important (CVSS 9.6). Weakness: CWE-122. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 3 more. Affected products named by the advisory: Red Hat package: webkitgtk3; Red Hat package: webkitgtk4; Red Hat package: webkit2gtk3.
High [CVE-2026-92817] Arbitrary code execution via improper session privilege validation
Arbitrary code execution via improper session privilege validation. Red Hat rates this important (CVSS 8.8). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: ignition.
High [CVE-2026-102599] Denial of Service via protocol revision mismatch during transport upgrade
Denial of Service via protocol revision mismatch during transport upgrade. Red Hat rates this important (CVSS 7.5). Weakness: CWE-248. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Hardened Images; Red Hat package: grafana.
High [CVE-2026-96956] SQL Server Elevation of Privilege Vulnerability
SQL Server Elevation of Privilege Vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: dotnet10.0; and 2 more. Affected products named by the advisory: Red Hat package: dotnet8.0; Red Hat package: dotnet9.0.
High [CVE-2026-109964] Arbitrary code execution via crafted PICT image
Arbitrary code execution via crafted PICT image. Red Hat rates this moderate (CVSS 7). Weakness: CWE-124. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
High [CVE-2026-109676] FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect. Red Hat rates this important (CVSS 8.8). Weakness: CWE-416. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Medium [CVE-2026-110247] Arbitrary code execution via integer overflow in libmime
Arbitrary code execution via integer overflow in libmime. Red Hat rates this important (CVSS 6.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: thunderbird.
Medium [CVE-2026-33374] Denial of Service via unbounded request body size in Prometheus rule conversion API
Denial of Service via unbounded request body size in Prometheus rule conversion API. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:87077 with package grafana12-4-main-12.4.12-0.5.hum1, grafana13-2-main-13.2.4-0.1.hum1, grafana13-1-main-13.1.8-0.3.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more.
Medium [CVE-2026-15577] Unauthorized configuration modification via status subresource
Unauthorized configuration modification via status subresource. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-425. Red Hat lists fixing advisory RHSA-2026:87077 with package grafana12-4-main-12.4.12-0.5.hum1, grafana13-2-main-13.2.4-0.1.hum1, grafana13-1-main-13.1.8-0.3.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more.
Medium [CVE-2026-95502] Denial of Service via oversized Git Sync responses
Denial of Service via oversized Git Sync responses. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:87077 with package grafana12-4-main-12.4.12-0.4.hum1, grafana13-2-main-13.2.4-0.1.hum1, grafana13-1-main-13.1.8-0.3.hum1. Affected products named by the advisory: Red Hat Hardened Images; Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 2 more.
Medium [CVE-2026-93294] Information disclosure via Azure Monitor resource proxy
Information disclosure via Azure Monitor resource proxy. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-918. Red Hat lists fixing advisory RHSA-2026:85295 with package grafana12-4-main-12.4.13-0.1.hum1, grafana13-2-main-13.2.4-0.1.hum1, grafana13-1-main-13.1.8-0.3.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more.
Medium [CVE-2026-109828] Information disclosure via uninitialized variable use in WAV parsing
Information disclosure via uninitialized variable use in WAV parsing. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat package: libsndfile.
Medium [CVE-2026-105460] stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt
stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: bluez.
Medium [CVE-2026-102342] Stored cross-site scripting via SVG animation elements
Stored cross-site scripting via SVG animation elements. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Satellite 6; Red Hat package: rust.
Medium [CVE-2026-109955] Security bypass via double path decoding
Security bypass via double path decoding. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-551. Red Hat lists fixing advisory RHSA-2026:84431 with package grafana13-1-main-13.1.7-0.2.hum1, grafana12-4-main-12.4.12-0.5.hum1, grafana13-2-main-13.2.3-0.2.hum1. Affected products named by the advisory: Red Hat Hardened Images; Migration Toolkit for Applications 8; Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 10; and 3 more. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces; Red Hat package: grafana.
Medium [CVE-2026-109953] FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin
FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-522. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Medium [CVE-2026-109951] FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name
FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Medium [CVE-2026-109952] FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-757. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Medium [CVE-2026-109950] FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Medium [CVE-2026-109948] FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection
FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-200. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.