Red Hat Linux Security Advisories & CVEs
11563 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Critical [CVE-2026-91729] Arbitrary code execution via use-after-free in DigitalCredentials
Arbitrary code execution via use-after-free in DigitalCredentials. Red Hat rates this critical (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91716] Use after free in Auth
Use after free in Auth. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91718] Use after free in Core
Use after free in Core. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91710] Use after free in WebAppInstalls
Use after free in WebAppInstalls. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91735] Incorrect authorization in WebUI
Incorrect authorization in WebUI. Red Hat rates this important (CVSS 9). Weakness: CWE-266.
Critical [CVE-2026-91743] Race condition in Core
Race condition in Core. Red Hat rates this important (CVSS 9). Weakness: CWE-368.
Critical [CVE-2026-91749] Use after free in Workers
Use after free in Workers. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91721] Use after free in Internals
Use after free in Internals. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91949] FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass. Red Hat rates this critical (CVSS 9.3). Weakness: CWE-358. Red Hat lists fixing advisory RHSA-2026:74471 with package freerdp-2:3.10.3-12.el10_2.13, freerdp-2:3.10.3-3.el10_0.18. Affected product named by the advisory: Red Hat Enterprise Linux 10.
High [CVE-2026-92000] Denial of Service via crafted ZIP archives with zero declared uncompressed size
Denial of Service via crafted ZIP archives with zero declared uncompressed size. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:74609 with package cluster-observability-operator/monitoring-console-plugin-rhel9:1790854525, cluster-observability-operator/distributed-tracing-console-plugin-rhel9:1790854443, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1790854528, cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1790854526. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 5 more. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; Self-service automation portal 2; Red Hat package: mozjs60; and 1 more.
High [CVE-2026-91732] Missing authorization in AppManifest
Missing authorization in AppManifest. Red Hat rates this important (CVSS 7.2). Weakness: CWE-346.
High [CVE-2026-91715] Type confusion in ServiceWorker
Type confusion in ServiceWorker. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843.
High [CVE-2026-91711] Out of bounds write in ServiceWorker
Out of bounds write in ServiceWorker. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787.
High [CVE-2026-91745] Use after free in V8
Use after free in V8. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-91736] Use after free in DOM
Use after free in DOM. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-91741] Type confusion in CacheStorage
Type confusion in CacheStorage. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843.
High [CVE-2026-91748] Race condition in Extensions
Race condition in Extensions. Red Hat rates this important (CVSS 8). Weakness: CWE-368.
High [CVE-2026-91720] Uninitialized resource in ANGLE
Uninitialized resource in ANGLE. Red Hat rates this important (CVSS 7.4). Weakness: CWE-824.
High [CVE-2026-91731] Type confusion in Compositing
Type confusion in Compositing. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843.
High [CVE-2026-91727] Incorrect reference resolution in Extensions
Incorrect reference resolution in Extensions. Red Hat rates this important (CVSS 8.8). Weakness: CWE-386.