Red Hat Linux Security Advisories & CVEs
5187 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-102904] Information disclosure via extension uninstallation argument injection
Information disclosure via extension uninstallation argument injection. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-88. Affected products named by the advisory: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-81841] Information disclosure via unrevoked access tokens in paused shared dashboards
Information disclosure via unrevoked access tokens in paused shared dashboards. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-613. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-102314] UI misrepresentation in TabStrip
UI misrepresentation in TabStrip. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-102305] UI misrepresentation in SignIn
UI misrepresentation in SignIn. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-102320] Missing authorization in CORS
Missing authorization in CORS. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-102310] Missing authorization in Payments
Missing authorization in Payments. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-346.
Medium [CVE-2026-102325] Uninitialized resource in Skia
Uninitialized resource in Skia. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-908.
Medium [CVE-2026-102300] Uninitialized resource in WebGPU
Uninitialized resource in WebGPU. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-908.
Medium [CVE-2026-102303] Uninitialized resource in GPU
Uninitialized resource in GPU. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-908.
Medium [CVE-2026-102312] UI misrepresentation in Omnibox
UI misrepresentation in Omnibox. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-346.
Medium [CVE-2026-102830] Arbitrary code execution via crafted language pack
Arbitrary code execution via crafted language pack. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-94. Affected products named by the advisory: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-102824] Cryptographic fallback bypass via missing public key validation
Cryptographic fallback bypass via missing public key validation. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-358. Red Hat lists fixing advisory RHSA-2026:74586 with package openshell-main-0.1.2-0.2.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-102821] Denial of Service via unbounded memory exhaustion during stalled key renegotiation
Denial of Service via unbounded memory exhaustion during stalled key renegotiation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:74586 with package openshell-main-0.1.2-0.2.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-102820] Denial of Service via untrusted response length in shared memory
Denial of Service via untrusted response length in shared memory. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-12345] Arbitrary file deletion via race condition during temporary directory cleanup
Arbitrary file deletion via race condition during temporary directory cleanup. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:74870 with package python3-14-main-3.14.8-1.hum1, python3-12-main-3.12.15-1.hum1, python3-13-main-3.13.16-1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 8 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Hardened Images; Red Hat OpenShift Virtualization 4; and 4 more.
Medium [CVE-2026-95340] Web origin policy bypass via crafted HTML page
Web origin policy bypass via crafted HTML page. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-346.
Medium [CVE-2026-95342] Missing authorization in V8
Missing authorization in V8. Red Hat rates this low (CVSS 4.3). Weakness: CWE-862.
Medium [CVE-2026-95352] Web origin policy bypass via crafted extension in DevTools
Web origin policy bypass via crafted extension in DevTools. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-346.
Medium [CVE-2026-95332] Use of uninitialized variable in Tint
Use of uninitialized variable in Tint. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-457.
Medium [CVE-2026-95290] System access restriction bypass via missing authorization in NFC
System access restriction bypass via missing authorization in NFC. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-749.