RH
Vendor security profile141 actively exploited CVEs
Red Hat
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1.225
Critical66
CISA KEV141
Public exploit277
Patch rate%22
Avg. CVSS6.7
12-month vulnerability rate
10
7
10
5
25
32
32
75
110
231
246
128
CVE KEV
CVE severity distribution
1.225toplam CVE
Critical66 (5%)
High502 (41%)
Medium587 (48%)
Low65 (5%)
Uncertain5 (0%)
Patch and exploitation view
%22
Verified patch
%12
CISA KEV
%23
Public exploit
216Patch available
51Partial
3Workaround
13Vendor: no patch
942Unknown
Latest vulnerabilities
3.3
CVE-2026-110036
Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices
RH
Patch status unknown
3.7
CVE-2026-88834
Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds
RH
Patch status unknown
5.5
CVE-2026-88838
Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
RH
Patch status unknown
6.5
CVE-2026-88833
Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service
RH
Patch status unknown
5.5
CVE-2026-105460
Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()
RH
Patch status unknown
4.7
CVE-2026-109976
Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection
RH
Patch status unknown
5.9
CVE-2026-109833
Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service
RH
Patch status unknown
7.5
CVE-2026-109832
Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
RH
Patch status unknown
2.5
CVE-2026-109854
M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding
RH
Patch status unknown
7.4
CVE-2026-83535
Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison
RH
Patch status unknownEPSS %0