Red Hat vulnerabilities

CVEs per yearBy the year they were published

1. 20122
2. 201311
3. 20146
4. 201879
5. 201970
6. 2020106
7. 20211
8. 20223
9. 2023249
10. 2024298
11. 2025295
12. 20261,330

Known exploitedNewest addition to KEV first

• CVE-2023-4911

  Glibc: buffer overflow in ld.so leading to privilege escalation

  glibc

  ExploitedHigh7.8

Newest CVEs

• CVE-2026-50240

  Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount

  Red Hat · Builds for Red Hat OpenShift

  High8.8
• CVE-2026-123876

  Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation

  Red Hat · Red Hat Enterprise Linux 10

  Medium4.4
• CVE-2026-120749

  Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus

  Red Hat · Red Hat Enterprise Linux 10

  Medium6.2
• CVE-2026-83494

  Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)

  Red Hat · Red Hat OpenShift AI (RHOAI)

  Not scored
• CVE-2026-83493

  Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master

  Red Hat · Red Hat OpenShift AI (RHOAI)

  Critical9.1
• CVE-2026-9797

  Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator

  Red Hat · Red Hat Build of Keycloak

  Medium6.5
• CVE-2026-97848

  Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization

  Red Hat · Red Hat build of Keycloak 26.4

  Medium6.5
• CVE-2026-97367

  Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover

  Red Hat · Red Hat build of Keycloak 26.4

  Medium6.4
• CVE-2026-96547

  Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles

  Red Hat · Red Hat build of Keycloak 26.4

  Medium6.5
• CVE-2026-96460

  Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2

  Red Hat · Red Hat build of Keycloak 26.6

  Medium5.4