Red Hat vulnerabilities93 known to be exploited.
Red Hat has 5,740 published vulnerabilities across 538 products in our catalogue. 93 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Enterprise Linux, with 2,039. If you run Red Hat software, patch the exploited flaws first.
The most recent Red Hat flaw added to the known-exploited list is CVE-2015-3246, on 26 August 2026. We keep watching the known-exploited list.
Which Red Hat products have the most vulnerabilities?
Enterprise Linux leads with 2,039 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Red Hat vulnerabilities are being exploited?
93 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.2Red Hat Libuser Race Condition Vulnerability
Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.
- 6.9Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name.
- 7.8Linux Kernel Improper Authentication Vulnerability
Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
- 7.8Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
- 7.8Linux Kernel Integer Overflow Vulnerability
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their...
- 9.3Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability.
- 7.5Rails Ruby on Rails Path Traversal Vulnerability
Rails Ruby on Rails contains a path traversal vulnerability in Action View.
- 9.8Adobe Flash Player Integer Underflow Vulnerablity
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
Which Red Hat flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote...
- 97%
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect...
- 95%CVE-2006-3918Medium
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an...
- 94%
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers...
- 89%CVE-2011-3923Critical
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
- 83%
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to...
- 82%CVE-2012-0053Medium
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values...
- 80%CVE-2007-5365High
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code...
- 80%CVE-2009-1386Medium
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
All Red Hat products we track.
445 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Enterprise Linuxenterprise_linux2,039 vulnerabilities57 versions
- Enterprise Linux Desktopenterprise_linux_desktop1,947 vulnerabilities21 versions
- Enterprise Linux Serverenterprise_linux_server1,913 vulnerabilities18 versions
- Enterprise Linux Workstationenterprise_linux_workstation1,850 vulnerabilities8 versions
- Enterprise Linux Server Ausenterprise_linux_server_aus1,055 vulnerabilities20 versions
- Enterprise Linux Eusenterprise_linux_eus783 vulnerabilities36 versions
- Enterprise Linux Server Tusenterprise_linux_server_tus765 vulnerabilities12 versions
- Enterprise Linux Server Eusenterprise_linux_server_eus625 vulnerabilities29 versions
- Openshift Container Platformopenshift_container_platform267 vulnerabilities761 versions
- Linuxlinux252 vulnerabilities27 versions
- Jboss Enterprise Application Platformjboss_enterprise_application_platform235 vulnerabilities100 versions
- Satellitesatellite223 vulnerabilities133 versions
- Openstackopenstack213 vulnerabilities30 versions
- Openshiftopenshift177 vulnerabilities68 versions
- Enterprise Linux Hpc Nodeenterprise_linux_hpc_node149 vulnerabilities3 versions
- Software Collectionssoftware_collections137 vulnerabilities14 versions
- Virtualizationvirtualization128 vulnerabilities11 versions
- Enterprise Linux for Ibm Z Systemsenterprise_linux_for_ibm_z_systems108 vulnerabilities25 versions
- Enterprise Linux for Power Little Endianenterprise_linux_for_power_little_endian103 vulnerabilities10 versions
- Single Sign-onsingle_sign-on101 vulnerabilities17 versions
- Keycloakkeycloak95 vulnerabilities144 versions
- Enterprise Linux for Power Little Endian Eusenterprise_linux_for_power_little_endian_eus89 vulnerabilities30 versions
- Enterprise Linux Workstation Supplementaryenterprise_linux_workstation_supplementary86 vulnerabilities2 versions
- Enterprise Linux Desktop Supplementaryenterprise_linux_desktop_supplementary84 vulnerabilities3 versions
This directory lists the 445 Red Hat products with at least one tracked version, of 538 in our catalogue.
Running Red Hat? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.
- Matched to
- Libuser on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 5,740 published vulnerabilities across 538 products and 9,928 versions from Red Hat. The most recent Red Hat flaw added to the known-exploited list is CVE-2015-3246, on 26 August 2026.
93 Red Hat vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2015-3246, CVE-2015-5287 and CVE-2022-0492. The full list is on this page.
Enterprise Linux, with 2,039 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Red Hat products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.