Red Hat Linux Security Advisories & CVEs
5489 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-17840] Incorrect security UI in Passwords
Incorrect security UI in Passwords. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1021.
Medium [CVE-2026-17833] Inappropriate implementation in Passwords
Inappropriate implementation in Passwords. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-17831] Insufficient validation of untrusted input in Passwords
Insufficient validation of untrusted input in Passwords. Red Hat rates this moderate (CVSS 6.6). Weakness: CWE-79.
Medium [CVE-2026-17829] Insufficient policy enforcement in Passwords
Insufficient policy enforcement in Passwords. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-17820] Insufficient policy enforcement in Autofill
Insufficient policy enforcement in Autofill. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-17819] Inappropriate implementation in WebAppInstalls
Inappropriate implementation in WebAppInstalls. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-17815] Insufficient policy enforcement in GuestView
Insufficient policy enforcement in GuestView. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-17812] Inappropriate implementation in DigitalCredentials
Inappropriate implementation in DigitalCredentials. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79.
Medium [CVE-2026-17809] Insufficient validation of untrusted input in Extensions
Insufficient validation of untrusted input in Extensions. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1286.
Medium [CVE-2026-17805] Insufficient policy enforcement in Glic
Insufficient policy enforcement in Glic. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-1021.
Medium [CVE-2026-17800] Side-channel information leakage in MediaRecording
Side-channel information leakage in MediaRecording. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-201.
Medium [CVE-2026-17803] Insufficient validation of untrusted input in Save to Drive
Insufficient validation of untrusted input in Save to Drive. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1286.
Medium [CVE-2026-17802] Side-channel information leakage in GPU
Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Upstream bug(s): Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory. Red Hat severity: Moderate — CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N). Weakness: CWE-205.
Medium [CVE-2026-17799] Insufficient validation of untrusted input in Safe Browsing
Insufficient validation of untrusted input in Safe Browsing. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-1289.
Medium [CVE-2026-17798] Inappropriate implementation in Cast
Inappropriate implementation in Cast. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-17796] Side-channel information leakage in WebXR
Side-channel information leakage in WebXR. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-205.
Medium [CVE-2026-17794] Insufficient validation of untrusted input in Mobile
Insufficient validation of untrusted input in Mobile. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-290.
Medium [CVE-2026-17793] Inappropriate implementation in Messages
Inappropriate implementation in Messages. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-17792] Inappropriate implementation in Credential Management
Inappropriate implementation in Credential Management. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-303.
Medium [CVE-2026-17791] Insufficient validation of untrusted input in Payments
Insufficient validation of untrusted input in Payments. Red Hat rates this moderate (CVSS 4.6). Weakness: CWE-1021.