redhat has 2,349 CVEs on record between 2010 and 2026. Disclosure cadence is accelerating: 1424 in the last 90 days against 480 in the 90 before. The busiest recent month was October 2026 with 639. The median CVSS is 6.8 (medium), with 124 rated critical. 0% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 2722 days (6 cases). The dominant weakness classes are CWE-125 (149) and CWE-787 (133). Most affected products: Red Hat Enterprise Linux 9 (281), Red Hat Enterprise Linux 10 (178), Linux (72).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- 2722 d median(6)
- Last 90 days
- 1424 prev 480
Weakness classes
Products
- Red Hat Enterprise Linux 9 281
- Red Hat Enterprise Linux 10 178
- Linux 72
- Red Hat Enterprise Linux BaseOS (v. 10) 55
- Red Hat OpenShift AI (RHOAI) 50
- build_of_keycloak 49
Worst active — by depth score
CVE-2017-12149Critical· 9.8In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserializatio…100CVE-2021-40438Critical· 9.0A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user99CVE-2026-31431High· 7.8In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in op…88CVE-2010-1428High· 7.5The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allow…82CVE-2024-11394High· 8.8transformers: Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2024-11394)74
redhat vulnerabilities
CVEs affecting redhat, newest first. Open any entry for full detail, references, and exploit status.
2349 CVEsRSS
CVE-2026-101614Medium· 4.9mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101614)
A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. This issue results in a complete Denial of…
CVE-2026-101613Medium· 4.9mysql: mysql: Denial of service via DDL component (CVE-2026-101613)
A flaw was found in the Data Definition Language (DDL) component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repea…
CVE-2026-101618Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)
A flaw was found in MySQL. A high-privileged remote attacker with network access can exploit this vulnerability in the InnoDB component to cause a Denial of Service (DoS). Successful exploitation allows the attacker to trigger a hang or re…
CVE-2026-101617Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)
A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue leads to a complete De…
CVE-2026-101616Medium· 6.5mysql: MySQL: Denial of Service via JSON component (CVE-2026-101616)
A flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitatio…
CVE-2026-101622Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101621Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)
A flaw was found in the InnoDB component of MySQL. A high-privileged remote attacker with network access could exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in an unauthorized hang or repeatab…
CVE-2026-101619Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)
A flaw was found in the InnoDB component of MySQL. A high-privileged attacker with network access could exploit this vulnerability to trigger an unexpected hang or crash of the database server. A successful attack can result in a complete …
CVE-2026-101624Medium· 4.9mysql: mysql: Denial of service via InnoDB storage engine (CVE-2026-101624)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101623Medium· 4.9mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)
A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory f…
CVE-2026-101627Medium· 4.4mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101637Medium· 5.5mysql: mysql: Denial of Service via InnoDB component (CVE-2026-101637)
A flaw was found in MySQL's InnoDB component. A high-privileged remote attacker with network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a Denial of Service (DoS). Additionally, explo…
CVE-2026-101679High· 7.5mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101721Medium· 4.9mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)
A flaw was found in mysql. A remote attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service (DoS). By targeting the server component services, the attacker can cause the database to hang…
CVE-2026-101720Medium· 5.3mysql: mysql: unauthorized data modification via connection handling (CVE-2026-101720)
A flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data…
CVE-2026-101724Medium· 4.9mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101722Medium· 4.3mysql: mysql: unauthorized read access via connection handling (CVE-2026-101722)
A flaw was found in the MySQL connection handling component. A remote attacker with low privileges and network access can exploit this vulnerability using multiple protocols. Successful exploitation results in unauthorized read access to a…
CVE-2026-101729Medium· 4.9mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)
A flaw was found in the MySQL replication component. A high-privileged remote attacker with network access can exploit this vulnerability to trigger a hang or repeatable crash. Successful exploitation results in a complete Denial of Servic…
CVE-2026-101727Medium· 4.9mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)
A flaw was found in MySQL within the Server Replication component. A remote attacker with high privileges and network access can exploit this vulnerability to trigger an unexpected hang or repeatable crash. This issue results in a complete…
CVE-2026-101726Medium· 6.5mysql: mysql: Denial of Service via the C API (CVE-2026-101726)
A flaw was found in the C API component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for c…
CVE-2026-101730Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the database server to hang or repeatedly crash. This issue results in a comple…
CVE-2026-101728Medium· 6.5mysql: mysql: Denial of Service in Pluggable Auth (CVE-2026-101728)
A flaw was found in MySQL's Pluggable Auth component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. Successful exploitation allows the attacker to cause the …
CVE-2026-101725Medium· 6.5mysql: From CVEorg collector (CVE-2026-101725)
A flaw was found in the C API component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for c…
CVE-2026-101733Medium· 6.5mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)
A flaw was found in the MySQL JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network using multiple protocols. A successful attack can cause the server to hang or repeatedly cra…
CVE-2026-101732Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)
A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory f…
CVE-2026-101731Medium· 4.9mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)
A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of servic…
CVE-2026-101748Medium· 6.5mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)
A flaw was found in the audit component of MySQL. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. Successful exploitation allows the attacker to cause a hang o…
CVE-2026-101749Medium· 4.9mysql: mysql: Denial of Service via security encryption component (CVE-2026-101749)
A flaw was found in MySQL. A remote attacker with high privileges and network access can exploit this vulnerability in the security encryption component to cause a Denial of Service (DoS). Successful exploitation can lead to a complete han…
CVE-2026-101747Medium· 6.5mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101751Medium· 4.9mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)
A flaw was found in MySQL. An authenticated, remote attacker with high privileges could cause a complete Denial of Service (DoS) by exploiting a vulnerability in the Group Replication component over the network. Successful exploitation cau…