Red Hat Linux Security Advisories & CVEs
5472 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
High [CVE-2026-56852] Denial of Service via invalid UTF-8 input
Denial of Service via invalid UTF-8 input. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Red Hat lists fixing advisory RHSA-2026:49360 with package prometheus3-5-main-3.5.5-0.3.hum1, buildah-main-1.45.0-2.hum1, opentofu1-10-main-1.10.10-0.3.hum1, podman-main-6.0.2-2.1.hum1.
High [CVE-2026-11332 +1] argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)
argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332). Red Hat rates this important (CVSS 7.8). Weakness: CWE-88.
High [CVE-2026-59851] authentication bypass via missing GSSAPI principal check
authentication bypass via missing GSSAPI principal check. Red Hat rates this important (CVSS 8.8). Weakness: CWE-863. Red Hat lists fixing advisory RHSA-2026:42922 with package libssh-main-0.12.1-4.hum1.
High [CVE-2026-46681] @nevware21/ts-utils: @nevware21/ts-utils: Arbitrary Code Execution via Prototype Pollution
@nevware21/ts-utils: @nevware21/ts-utils: Arbitrary Code Execution via Prototype Pollution. Red Hat rates this important (CVSS 7.5). Weakness: CWE-915.
High [CVE-2026-16445] Root code execution via DHCP options command injection in NetworkManager initrd module
Root code execution via DHCP options command injection in NetworkManager initrd module. Red Hat rates this important (CVSS 7.5). Weakness: CWE-78. Red Hat lists fixing advisory RHSA-2026:40700 with package dracut-0:049-244.git20260529.el8_10, dracut-main-109-7.hum1. Affected product named by the advisory: Red Hat Enterprise Linux 8.
High [CVE-2026-16361] Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13
Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16360] Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153. Red Hat rates this important (CVSS 7.5). Weakness: CWE-120. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16412] Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153. Red Hat rates this important (CVSS 7.5). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16411] Memory safety bugs fixed in Firefox 153
Memory safety bugs fixed in Firefox 153. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825.
High [CVE-2026-16357] Incorrect boundary conditions in the Graphics component
Incorrect boundary conditions in the Graphics component. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16356] Sandbox escape due to use-after-free in the Disability Access APIs component
Sandbox escape due to use-after-free in the Disability Access APIs component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16355] JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-733. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16369] Integer overflow in the JavaScript: WebAssembly component
Integer overflow in the JavaScript: WebAssembly component. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16368] Incorrect boundary conditions in the JavaScript: WebAssembly component
Incorrect boundary conditions in the JavaScript: WebAssembly component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16367] Sandbox escape due to invalid pointer in the Disability Access APIs component
Sandbox escape due to invalid pointer in the Disability Access APIs component. Red Hat rates this important (CVSS 7.5).
High [CVE-2026-16354] Information disclosure in the Graphics: ImageLib component
Information disclosure in the Graphics: ImageLib component. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-201. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16353] Invalid pointer in the DOM: Bindings (WebIDL) component
Invalid pointer in the DOM: Bindings (WebIDL) component. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-476. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-16366] Privilege escalation in the DOM: Navigation component
Privilege escalation in the DOM: Navigation component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-270.
High [CVE-2026-16365] Privilege escalation in the DOM: Workers component
Privilege escalation in the DOM: Workers component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-266.
High [CVE-2026-16363] JIT miscompilation in the JavaScript: WebAssembly component
JIT miscompilation in the JavaScript: WebAssembly component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-733. Red Hat lists fixing advisory RHSA-2026:47101 with package firefox-0:140.13.0-1.el10_2, firefox-0:140.13.0-1.el8_10, firefox-0:140.13.0-1.el9_8, thunderbird-0:140.13.0-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.