Red Hat Linux Security Advisories & CVEs
514 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Critical [CVE-2026-91722] Use after free in Input
Use after free in Input. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91738] Improper input validation in ANGLE
Improper input validation in ANGLE. Red Hat rates this important (CVSS 9.6). Weakness: CWE-1286.
Critical [CVE-2026-91729] Arbitrary code execution via use-after-free in DigitalCredentials
Arbitrary code execution via use-after-free in DigitalCredentials. Red Hat rates this critical (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91716] Use after free in Auth
Use after free in Auth. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91718] Use after free in Core
Use after free in Core. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91710] Use after free in WebAppInstalls
Use after free in WebAppInstalls. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91735] Incorrect authorization in WebUI
Incorrect authorization in WebUI. Red Hat rates this important (CVSS 9). Weakness: CWE-266.
Critical [CVE-2026-91743] Race condition in Core
Race condition in Core. Red Hat rates this important (CVSS 9). Weakness: CWE-368.
Critical [CVE-2026-91749] Use after free in Workers
Use after free in Workers. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91721] Use after free in Internals
Use after free in Internals. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-91949] FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass. Red Hat rates this critical (CVSS 9.3). Weakness: CWE-358. Red Hat lists fixing advisory RHSA-2026:74471 with package freerdp-2:3.10.3-12.el10_2.13, freerdp-2:3.10.3-3.el10_0.18. Affected product named by the advisory: Red Hat Enterprise Linux 10.
Critical [CVE-2026-90558] sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers
sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers. Red Hat rates this critical. Weakness: CWE-120.
Critical [CVE-2026-88011] Identity spoofing via dot-form header alias
Identity spoofing via dot-form header alias. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-444. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Critical [CVE-2026-88008] Incorrect authorization due to HTTP/2 protocol confusion
Incorrect authorization due to HTTP/2 protocol confusion. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-358. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Critical [CVE-2026-88007] Traefik HTTP/3 Backend NTLM Connection Reuse
Traefik HTTP/3 Backend NTLM Connection Reuse. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-863. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Critical [CVE-2026-88879] Identity spoofing via HTTP header alias
Identity spoofing via HTTP header alias. Red Hat rates this critical (CVSS 9.6). Weakness: CWE-444. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Critical [CVE-2026-88877] Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
Traefik v3.7.0 Authentication Bypass via from-to-www-redirect. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-639.
Critical [CVE-2026-87528] Type confusion in Rust
Type confusion in Rust. Red Hat rates this important (CVSS 9.6). Weakness: CWE-843.
Critical [CVE-2026-87637] Use after free in Extensions
Use after free in Extensions. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825.
Critical [CVE-2026-87470] Improper quantity validation in Tint
Improper quantity validation in Tint. Red Hat rates this important (CVSS 9.6). Weakness: CWE-1284.