Red Hat Linux Security Advisories & CVEs
11611 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-91711] Out of bounds write in ServiceWorker
Out of bounds write in ServiceWorker. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787.
High [CVE-2026-91745] Use after free in V8
Use after free in V8. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-91736] Use after free in DOM
Use after free in DOM. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-91741] Type confusion in CacheStorage
Type confusion in CacheStorage. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843.
High [CVE-2026-91748] Race condition in Extensions
Race condition in Extensions. Red Hat rates this important (CVSS 8). Weakness: CWE-368.
High [CVE-2026-91720] Uninitialized resource in ANGLE
Uninitialized resource in ANGLE. Red Hat rates this important (CVSS 7.4). Weakness: CWE-824.
High [CVE-2026-91731] Type confusion in Compositing
Type confusion in Compositing. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843.
High [CVE-2026-91727] Incorrect reference resolution in Extensions
Incorrect reference resolution in Extensions. Red Hat rates this important (CVSS 8.8). Weakness: CWE-386.
High [CVE-2026-91712] Race condition in Extensions
Race condition in Extensions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-368.
High [CVE-2026-91724] Use after free in Input
Use after free in Input. Red Hat rates this important (CVSS 8.2). Weakness: CWE-825.
High [CVE-2026-91728] Integer overflow in V8
Integer overflow in V8. Red Hat rates this important (CVSS 8.8). Weakness: CWE-190.
High [CVE-2026-91734] Incorrect authorization in Core
Incorrect authorization in Core. Red Hat rates this important (CVSS 8.8). Weakness: CWE-551.
High [CVE-2026-19774] Arbitrary Code Execution via A2DP Stack-based Buffer Overflow
Arbitrary Code Execution via A2DP Stack-based Buffer Overflow. Red Hat rates this important (CVSS 8). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: bluez.
High [CVE-2026-85234] Denial of Service due to out-of-bounds read/write in remap engine
Denial of Service due to out-of-bounds read/write in remap engine. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-91990] Denial of Service via memory amplification in multipart parsing
Denial of Service via memory amplification in multipart parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; Migration Toolkit for Applications 8; OpenShift Lightspeed; and 9 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; and 5 more.
High [CVE-2026-91964] Remote code execution via heap buffer overflow in Server Redirection PDU
Remote code execution via heap buffer overflow in Server Redirection PDU. Red Hat rates this important (CVSS 8.8). Weakness: CWE-120. Red Hat lists fixing advisory RHSA-2026:75570 with package freerdp-2:3.10.3-12.el10_2.14. Affected product named by the advisory: Red Hat Enterprise Linux 10.
High [CVE-2026-91963] Remote code execution via uninitialized heap memory disclosure
Remote code execution via uninitialized heap memory disclosure. Red Hat rates this important (CVSS 8.8). Weakness: CWE-824. Red Hat lists fixing advisory RHSA-2026:75570 with package freerdp-2:3.10.3-12.el10_2.14. Affected product named by the advisory: Red Hat Enterprise Linux 10.
High [CVE-2026-91955] Denial of Service via crafted desktop dimensions
Denial of Service via crafted desktop dimensions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
High [CVE-2026-91950] Out-of-bounds read leads to denial of service or information disclosure
Out-of-bounds read leads to denial of service or information disclosure. Red Hat rates this important (CVSS 7.1). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:75570 with package freerdp-2:3.10.3-12.el10_2.14. Affected product named by the advisory: Red Hat Enterprise Linux 10.
High [CVE-2026-91948] Arbitrary code execution via oversized channel messages in SHOW_PROTOCOL
Arbitrary code execution via oversized channel messages in SHOW_PROTOCOL. Red Hat rates this important (CVSS 7.5). Weakness: CWE-124. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.