Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-18008] Inappropriate implementation in Settings
Inappropriate implementation in Settings. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-18009] Insufficient validation of untrusted input in Passwords
Insufficient validation of untrusted input in Passwords. Red Hat rates this low (CVSS 4.3). Weakness: CWE-290.
Medium [CVE-2026-18005] Inappropriate implementation in WebXR
Inappropriate implementation in WebXR. Red Hat rates this low (CVSS 4.3). Weakness: CWE-825.
Medium [CVE-2026-18002] Insufficient validation of untrusted input in Google Lens
Insufficient validation of untrusted input in Google Lens. Red Hat rates this low (CVSS 5). Weakness: CWE-1289.
Medium [CVE-2026-17999] Incorrect security UI in PictureInPicture
Incorrect security UI in PictureInPicture. Red Hat rates this low (CVSS 4.3). Weakness: CWE-368.
Medium [CVE-2026-17998] Incorrect security UI in Extensions
Incorrect security UI in Extensions. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-17995] Out of bounds read in Dawn
Out of bounds read in Dawn. Red Hat rates this low (CVSS 4.3). Weakness: CWE-125.
Medium [CVE-2026-17994] Inappropriate implementation in Media
Inappropriate implementation in Media. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-17989] Type Confusion in V8
Type Confusion in V8. Red Hat rates this low (CVSS 4.3). Weakness: CWE-843.
Medium [CVE-2026-17990] Insufficient validation of untrusted input in WebAuthn
Insufficient validation of untrusted input in WebAuthn. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1286.
Medium [CVE-2026-17991] Insufficient validation of untrusted input in AI
Insufficient validation of untrusted input in AI. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1286.
Medium [CVE-2026-17987] Insufficient validation of untrusted input in Notifications
Insufficient validation of untrusted input in Notifications. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1286.
Medium [CVE-2026-17983] Incorrect security UI in Global Media Controls
Incorrect security UI in Global Media Controls. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-17984] Inappropriate implementation in Browser
Inappropriate implementation in Browser. Red Hat rates this low (CVSS 4.3). Weakness: CWE-346.
Medium [CVE-2026-17981] Inappropriate implementation in Blink
Inappropriate implementation in Blink. Red Hat rates this low (CVSS 4.3). Weakness: CWE-346.
Medium [CVE-2026-17982] Insufficient validation of untrusted input in Cast
Insufficient validation of untrusted input in Cast. Red Hat rates this low (CVSS 4.3). Weakness: CWE-346.
Medium [CVE-2026-17978] Side-channel information leakage in WebCodecs
Side-channel information leakage in WebCodecs. Red Hat rates this low (CVSS 4.3). Weakness: CWE-205.
Medium [CVE-2026-17975] Inappropriate implementation in IME
Inappropriate implementation in IME. Red Hat rates this low (CVSS 4.3). Weakness: CWE-497.
Medium [CVE-2026-17977] Policy bypass in CSS
Policy bypass in CSS. Red Hat rates this low (CVSS 4.3). Weakness: CWE-346.
Medium [CVE-2026-17971] Inappropriate implementation in Frame
Inappropriate implementation in Frame. Red Hat rates this low (CVSS 6.3). Weakness: CWE-125.