This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

Red Hat

Number 12 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Compare with another vendor

Total vulnerabilities

2,461

Critical

86

High

844

Known Exploited

7

Exploit available

16

Network, no login needed

32.0%

Of 2,371 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)1,32761490683912
2025239977130230
20242956112159180
2023243584144100
2022201100
2021100001
20201053296157
2019700193957
2018120025421043
201731100030
2016000000
2015202000
2014600600
20131103710
2012200200
2011200200
2010402110
2009000000
2008000000
2007000000
2006110000

Top products

ProductTotalCritical/High
Red Hat Enterprise Linux 10632236
Red Hat Enterprise Linux 814352
Red Hat Enterprise Linux 614242
Red Hat build of Keycloak 26.48127
Red Hat Hardened Images6515
Red Hat Enterprise Linux 96322
Red Hat build of Keycloak 26.6546
Red Hat Ansible Automation Platform 2.5 for RHEL 84019
Red Hat Build of Keycloak386
Red Hat Enterprise Linux 73316

Top bug types

Bug typeTotalCritical/High
Memory Corruption550201
Information Disclosure7811
Improper Input Validation6626
Authentication Issues6527
Denial of Service6427
Path Traversal6228
Missing Authorization5814
Cross-Site Scripting555
Allocation of Resources Without Limits or Throttling5322
Command Injection4740

Known to be attacked

CVETitlePublishedSeverityEPSS
CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalationHigh63.8%
CVE-2017-12149Red Hat jbossas: Insecure DeserializationCritical90.7%
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityHigh5.0%
CVE-2015-3246Red Hat Libuser Race Condition VulnerabilityHigh8.5%
CVE-2010-1871Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityHigh83.4%
CVE-2010-1428Red Hat JBoss Information Disclosure VulnerabilityMedium52.7%
CVE-2010-0738Red Hat JBoss Authentication Bypass VulnerabilityLow73.8%

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-116468Keycloak-services: keycloak-services: delegated admin escalates to realm-admin via group moveMediumn/a
CVE-2026-125712Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsingHighn/a
CVE-2026-125709Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.Mediumn/a
CVE-2026-125707Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset tableMediumn/a
CVE-2026-125706Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsingMediumn/a
CVE-2026-125704Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserializationHighn/a
CVE-2026-125703Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handlingMediumn/a
CVE-2026-125672Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an optionMediumn/a
CVE-2026-125652Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry pointMedium0.2%
CVE-2026-124747Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file sizeHighn/a