Threat database

1,587 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	–	EPSS 0.1%	CVE-2026-23216Red Hat Security Advisory: kernel security update HighEPSS 0.1%2026-06-11GCVE DatabaseCVE-2026-23216 The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) Bug Fix(es) and Enhancement(s): * [RHEL 8.10.z] Add an .sbat section to the x86 kernel (JIRA:RHEL-182788) * Incorrect message "NFS: Server wrote zero bytes" is shown in the logs (JIRA:RHEL-147665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 0.1%Vulnerability Red Hat Product Security	GCVE Database	2026-06-11
High	7.4	EPSS 0.4%	CVE-2026-41035Red Hat Security Advisory: rsync security update High7.4EPSS 0.4%2026-06-11GCVE DatabaseCVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable. EPSS 0.4%Report on CVE-2026-41035 Vulnerability Red Hat Product Security #bundesamt-f-r-sicherheit-in-de #cwe-130 #cwe-805	GCVE Database	2026-06-11
High	8.0	EPSS 0.6%	CVE-2026-44168Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update High8.0EPSS 0.6%2026-06-10GCVE DatabaseCVE-2026-44168 This update includes the following RPMs: mariadb10.11: * mariadb10.11-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-backup-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-client-utils-10.11.18-1.hum1 (noarch) * mariadb10.11-common-10.11.18-1.hum1 (noarch) * mariadb10.11-connect-engine-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-cracklib-password-check-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-devel-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-embedded-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-embedded-devel-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-errmsg-10.11.18-1.hum1 (noarch) * mariadb10.11-gssapi-server-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-oqgraph-engine-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-pam-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-rocksdb-engine-10.11.18-1.hum1 (x86_64) * mariadb10.11-s3-engine-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-server-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-server-galera-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-server-utils-10.11.18-1.hum1 (noarch) * mariadb10.11-sphinx-engine-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-test-10.11.18-1.hum1 (aarch64, x86_64) * mariadb10.11-10.11.18-1.hum1.src (src) EPSS 0.6%Report on CVE-2026-44168 Vulnerability Red Hat Product Security #cwe-78	GCVE Database	2026-06-10
High	7.5	EPSS 32%	CVE-2026-49975Red Hat Security Advisory: mod_http2 security update High7.5EPSS 32%2026-06-10GCVE DatabaseCVE-2026-49975 The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 32%Report on CVE-2026-49975 Vulnerability Red Hat Product Security #microsoft-security-response-ce #cwe-789 #bundesamt-f-r-sicherheit-in-de	GCVE Database	2026-06-10
Medium	–	EPSS 0.1%	CVE-2026-31508Red Hat Security Advisory: kernel security update MediumEPSS 0.1%2026-06-10GCVE DatabaseCVE-2026-31508 The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 0.1%Vulnerability Red Hat Product Security	GCVE Database	2026-06-10
High	–	EPSS 2.8%	CVE-2026-25639Red Hat Security Advisory: Red Hat Migration Toolkit for Containers HighEPSS 2.8%2026-06-10GCVE DatabaseCVE-2026-25639 The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API. EPSS 2.8%Vulnerability Red Hat Product Security	GCVE Database	2026-06-10
Critical	9.8	EPSS 0.7%	CVE-2026-29167Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Critical9.8EPSS 0.7%2026-06-10GCVE DatabaseCVE-2026-29167 This update includes the following RPMs: httpd: * httpd-2.4.68-1.hum1 (aarch64, x86_64) * httpd-core-2.4.68-1.hum1 (aarch64, x86_64) * httpd-devel-2.4.68-1.hum1 (aarch64, x86_64) * httpd-filesystem-2.4.68-1.hum1 (noarch) * httpd-manual-2.4.68-1.hum1 (noarch) * httpd-tools-2.4.68-1.hum1 (aarch64, x86_64) * mod_ldap-2.4.68-1.hum1 (aarch64, x86_64) * mod_lua-2.4.68-1.hum1 (aarch64, x86_64) * mod_proxy_html-2.4.68-1.hum1 (aarch64, x86_64) * mod_session-2.4.68-1.hum1 (aarch64, x86_64) * mod_ssl-2.4.68-1.hum1 (aarch64, x86_64) * httpd-2.4.68-1.hum1.src (src) EPSS 0.7%Report on CVE-2026-29167 Vulnerability Red Hat Product Security	GCVE Database	2026-06-10
High	–	EPSS 0.8%	CVE-2026-42154Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update HighEPSS 0.8%2026-06-10GCVE DatabaseCVE-2026-42154 This update includes the following RPMs: jaeger: * jaeger-2.19.0-1.hum1 (aarch64, x86_64) * jaeger-2.19.0-1.hum1.src (src) EPSS 0.8%Vulnerability Red Hat Product Security #bit-prometheus-2026-42154 #bitnami #cleanstart-2026-ni09803	GCVE Database	2026-06-10
Critical	9.3	EPSS 0.3%	CVE-2025-14813Red Hat Security Advisory: RHOAI 2.25.7 · Red Hat OpenShift AI Critical9.3EPSS 0.3%2026-06-10GCVE DatabaseCVE-2025-14813 Release of RHOAI 2.25.7 provides these changes: EPSS 0.3%Report on CVE-2025-14813 Vulnerability Red Hat Product Security	GCVE Database	2026-06-10
Critical	–	EPSS 1.2%	CVE-2025-62718Red Hat Security Advisory: Red Hat Quay 3.15.5 CriticalEPSS 1.2%2026-06-09GCVE DatabaseCVE-2025-62718 Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins. EPSS 1.2%Vulnerability Red Hat Product Security	GCVE Database	2026-06-09
High	7.1	EPSS 0.5%	CVE-2026-32590Red Hat Security Advisory: Red Hat Quay 3.17.3 High7.1EPSS 0.5%2026-06-09GCVE DatabaseCVE-2026-32590 Quay 3.17.3 EPSS 0.5%Report on CVE-2026-32590 Vulnerability Red Hat Product Security #cwe-502 #ghsa-mvqc-wfv6-7764	GCVE Database	2026-06-09
Medium	5.9	EPSS 0.6%	CVE-2026-40356Red Hat Security Advisory: krb5 security update Medium5.9EPSS 0.6%2026-06-09GCVE DatabaseCVE-2026-40356 Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 0.6%Report on CVE-2026-40356 Vulnerability Red Hat Product Security	GCVE Database	2026-06-09
High	–	EPSS 0.4%	CVE-2026-31613Red Hat Security Advisory: kernel security update HighEPSS 0.4%2026-06-08GCVE DatabaseCVE-2026-31613 The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 0.4%Vulnerability Red Hat Product Security #microsoft-security-response-ce	GCVE Database	2026-06-08
Critical	9.1	EPSS 0.4%	CVE-2025-41118Red Hat Security Advisory: Multicluster Global Hub 1.7.1 security update Critical9.1EPSS 0.4%2026-06-08GCVE DatabaseCVE-2025-41118 Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster. EPSS 0.4%Report on CVE-2025-41118 Vulnerability Red Hat Product Security #cwe-732 #cwe-201	GCVE Database	2026-06-08
Critical	9.8	EPSS 0.6%	CVE-2026-33815Red Hat Security Advisory: RHTAS 1.3.5 · Red Hat Trusted Artifact Signer Release Critical9.8EPSS 0.6%2026-06-08GCVE DatabaseCVE-2026-33815 The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21 EPSS 0.6%Report on CVE-2026-33815 Vulnerability Red Hat Product Security #ghsa-xgrm-4fwx-7qm8 #go #cwe-129	GCVE Database	2026-06-08
High	7.5	EPSS 0.6%	CVE-2026-4660Red Hat Security Advisory: RHTAS 1.3.5 · Red Hat Trusted Artifact Signer Release High7.5EPSS 0.6%2026-06-08GCVE DatabaseCVE-2026-4660 The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21 EPSS 0.6%Report on CVE-2026-4660 Vulnerability Red Hat Product Security #cwe-200 #cwe-22	GCVE Database	2026-06-08
High	7.5	EPSS 0.4%	CVE-2026-37457Red Hat Security Advisory: frr10 security update High7.5EPSS 0.4%2026-06-08GCVE DatabaseCVE-2026-37457 Two denial of service vulnerabilities have been identified in FRRouting (frr10) used in Red Hat Enterprise Linux 9. These vulnerabilities involve crafted FlowSpec components and crafted BGP UPDATE messages that can cause service disruption. Red Hat has released security updates to address these issues in version 10.4.3-3.el9_8 of the frr10 package. The vulnerabilities are rated with high severity by Red Hat Product Security. EPSS 0.4%Report on CVE-2026-37457 Vulnerability Red Hat Product Security	GCVE Database	2026-06-08
High	8.7	EPSS 0.8%	CVE-2026-42944Red Hat Security Advisory: unbound security update High8.7EPSS 0.8%2026-06-08GCVE DatabaseCVE-2026-42944 A heap overflow vulnerability exists in Unbound DNS resolver when processing multiple NSID, cookie, and padding EDNS options. This flaw can cause the Unbound service to crash, resulting in denial of service (DoS). The vulnerability affects certain versions of Unbound as shipped by Red Hat. No mitigation is currently available that meets Red Hat's criteria for ease of use and stability. EPSS 0.8%Report on CVE-2026-42944 Vulnerability Red Hat Product Security #cwe-197 #cwe-787 #cwe-131	GCVE Database	2026-06-08

Page 49 of 163 · 2 duplicate CVE records merged