Red Hat Linux Security Advisories & CVEs
465 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Low [CVE-2026-92240] Out-of-bounds read in IMAP response parser
Out-of-bounds read in IMAP response parser. Red Hat rates this low (CVSS 3.4). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:73130 with package thunderbird-0:140.16.0-1.el9_8, thunderbird-0:140.16.0-1.el8_10, thunderbird-0:140.16.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10.
Low [CVE-2026-91957] Use-after-free vulnerability in smartcard RDPDR device handler leading to denial of service or potential code execution
Use-after-free vulnerability in smartcard RDPDR device handler leading to denial of service or potential code execution. Red Hat rates this low (CVSS 3.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Low [CVE-2026-92079] Mitigation bypass in the Widget: Win32 component
Mitigation bypass in the Widget: Win32 component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-807.
Low [CVE-2026-92078] Denial-of-service in the Security component
Denial-of-service in the Security component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-770.
Low [CVE-2026-92077] Denial-of-service in the SVG component
Denial-of-service in the SVG component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-770.
Low [CVE-2026-92076] Incorrect boundary conditions in the Networking component
Incorrect boundary conditions in the Networking component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-120.
Low [CVE-2026-92075] Mitigation bypass in the Networking component
Mitigation bypass in the Networking component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-305.
Low [CVE-2026-92074] Mitigation bypass in the Popup Blocker component
Mitigation bypass in the Popup Blocker component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-807.
Low [CVE-2026-92073] Privilege escalation in the Enterprise Policies component
Privilege escalation in the Enterprise Policies component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-266.
Low [CVE-2026-92072] Incorrect boundary conditions in the Safe Browsing component
Incorrect boundary conditions in the Safe Browsing component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-125.
Low [CVE-2026-92071] Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-501.
Low [CVE-2026-92070] Information disclosure in the Networking component
Information disclosure in the Networking component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-201.
Low [CVE-2026-92069] Spoofing issue in the DOM: Navigation component
Spoofing issue in the DOM: Navigation component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-601.
Low [CVE-2026-92068] Site isolation issue in the Reader Mode component
Site isolation issue in the Reader Mode component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-653.
Low [CVE-2026-92067] Use-after-free in the Widget: Gtk component
Use-after-free in the Widget: Gtk component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-364.
Low [CVE-2026-92066] Sandbox escape in the Profile Backup component
Sandbox escape in the Profile Backup component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-653.
Low [CVE-2026-92065] Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-787.
Low [CVE-2026-92063] Denial-of-service in the Audio/Video component
Denial-of-service in the Audio/Video component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-770.
Low [CVE-2026-92062] Privilege escalation in the Session Restore component
Privilege escalation in the Session Restore component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-266.
Low [CVE-2026-92061] Incorrect boundary conditions in the Security: Process Sandboxing component
Incorrect boundary conditions in the Security: Process Sandboxing component. Red Hat rates this low (CVSS 3.4). Weakness: CWE-403.