{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Red Hat vulnerabilities","home_page_url":"https://patchfirst.co/vendor/red-hat/","feed_url":"https://patchfirst.co/feed/vendor/red-hat.json","description":"New and newly exploited Red Hat CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-105312","url":"https://patchfirst.co/cve/CVE-2026-105312/","title":"CVE-2026-105312: A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an…","content_text":"Red Hat · StreamsHub Console for Apache Kafka®. Not in CISA KEV. EPSS 0.3% (higher than 27% of CVEs). CVSS 9.9 CRITICAL. Priority 14.3 of 100.","summary":"A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-20T17:17:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.3,"kev":null,"epss":{"score":0.00336,"percentile":0.27024},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"StreamsHub Console for Apache Kafka®","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-87744","url":"https://patchfirst.co/cve/CVE-2026-87744/","title":"CVE-2026-87744: A flaw was found in Quarkus REST Data Panache","content_text":"Red Hat · Red Hat build of Quarkus 3.27.6.redhat. Not in CISA KEV. EPSS 0.4% (higher than 32.8% of CVEs). CVSS 9.1 CRITICAL. Priority 15.1 of 100.","summary":"A flaw was found in Quarkus REST Data Panache","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-16T00:17:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00387,"percentile":0.32753},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.27.6.redhat","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-107935","url":"https://patchfirst.co/cve/CVE-2026-107935/","title":"CVE-2026-107935: A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package","content_text":"Red Hat · Red Hat Build of Podman Desktop. Not in CISA KEV. EPSS 0.2% (higher than 15% of CVEs). CVSS 9.3 CRITICAL. Priority 12.0 of 100.","summary":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package","date_published":"2026-10-09T00:00:00.000Z","date_modified":"2026-10-12T10:16:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12,"kev":null,"epss":{"score":0.00239,"percentile":0.14993},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Build of Podman Desktop","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-96659","url":"https://patchfirst.co/cve/CVE-2026-96659/","title":"CVE-2026-96659: A flaw was found in Foreman","content_text":"Red Hat · Red Hat Satellite 6.16 for RHEL 8. Not in CISA KEV. EPSS 0.3% (higher than 28.3% of CVEs). CVSS 9.1 CRITICAL. Priority 13.6 of 100.","summary":"A flaw was found in Foreman","date_published":"2026-10-01T00:00:00.000Z","date_modified":"2026-10-16T13:33:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.6,"kev":null,"epss":{"score":0.00347,"percentile":0.28251},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2015-3246#kev","url":"https://patchfirst.co/cve/CVE-2015-3246/","title":"[KEV] CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability","content_text":"Red Hat · Libuser. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 8.5% (higher than 95% of CVEs). CVSS 7.4 HIGH. Public exploit code exists. Priority 77.2 of 100.","summary":"Red Hat Libuser Race Condition Vulnerability","date_published":"2026-08-26T00:00:00.000Z","date_modified":"2026-10-02T11:33:29.000Z","tags":["kev","public-exploit"],"_patchfirst":{"reason":"kev","priority":77.2,"kev":{"dateAdded":"2026-08-26","ransomware":false},"epss":{"score":0.08503,"percentile":0.95031},"cvss":{"score":7.4,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Libuser","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2015-5287#kev","url":"https://patchfirst.co/cve/CVE-2015-5287/","title":"[KEV] CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","content_text":"Red Hat · Automatic Bug Reporting Tool. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 5.0% (higher than 92.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 76.9 of 100.","summary":"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","date_published":"2026-08-26T00:00:00.000Z","date_modified":"2026-08-27T04:16:38.000Z","tags":["kev","public-exploit","T1078","T1068"],"_patchfirst":{"reason":"kev","priority":76.9,"kev":{"dateAdded":"2026-08-26","ransomware":false},"epss":{"score":0.05003,"percentile":0.92227},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Automatic Bug Reporting Tool","techniqueIds":["T1078","T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-18963","url":"https://patchfirst.co/cve/CVE-2026-18963/","title":"CVE-2026-18963: Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass","content_text":"Red Hat · Red Hat build of Keycloak 26.4. Not in CISA KEV. EPSS 4.7% (higher than 91.8% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 75.4 of 100.","summary":"Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass","date_published":"2026-08-18T00:00:00.000Z","date_modified":"2026-10-23T16:38:40.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":75.4,"kev":null,"epss":{"score":0.04682,"percentile":0.91768},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-4480","url":"https://patchfirst.co/cve/CVE-2026-4480/","title":"CVE-2026-4480: Samba: samba: remote code execution in printing subsystem via unescaped job description","content_text":"Red Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 13.9% (higher than 96.5% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. Priority 72.8 of 100.","summary":"Samba: samba: remote code execution in printing subsystem via unescaped job description","date_published":"2026-05-26T00:00:00.000Z","date_modified":"2026-09-01T12:04:44.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":72.8,"kev":null,"epss":{"score":0.1393,"percentile":0.96538},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-4631","url":"https://patchfirst.co/cve/CVE-2026-4631/","title":"CVE-2026-4631: Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection","content_text":"Red Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 74.0 of 100.","summary":"Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection","date_published":"2026-04-07T00:00:00.000Z","date_modified":"2026-10-15T18:54:51.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":74,"kev":null,"epss":{"score":0.1548,"percentile":0.96802},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-23536","url":"https://patchfirst.co/cve/CVE-2026-23536/","title":"CVE-2026-23536: Feast: unauthenticated arbitrary file read","content_text":"Red Hat · Red Hat OpenShift AI (RHOAI). Not in CISA KEV. EPSS 2.4% (higher than 84.1% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 73.8 of 100.","summary":"Feast: unauthenticated arbitrary file read","date_published":"2026-03-20T00:00:00.000Z","date_modified":"2026-07-15T01:18:22.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.8,"kev":null,"epss":{"score":0.02409,"percentile":0.84072},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-12548","url":"https://patchfirst.co/cve/CVE-2025-12548/","title":"CVE-2025-12548: Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333","content_text":"Red Hat · Red Hat OpenShift Dev Spaces (RHOSDS) 3.22. Not in CISA KEV. EPSS 1.3% (higher than 70.4% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. Priority 65.4 of 100.","summary":"Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333","date_published":"2026-01-13T00:00:00.000Z","date_modified":"2026-09-21T16:12:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.4,"kev":null,"epss":{"score":0.01297,"percentile":0.70357},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.22","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-6019","url":"https://patchfirst.co/cve/CVE-2025-6019/","title":"CVE-2025-6019: Libblockdev: lpe from allow_active to root in libblockdev via udisks","content_text":"Red Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. Priority 53.9 of 100.","summary":"Libblockdev: lpe from allow_active to root in libblockdev via udisks","date_published":"2025-06-19T00:00:00.000Z","date_modified":"2026-06-30T11:10:04.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":53.9,"kev":null,"epss":{"score":0.0048,"percentile":0.41439},"cvss":{"score":7,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-12084","url":"https://patchfirst.co/cve/CVE-2024-12084/","title":"CVE-2024-12084: Rsync: heap buffer overflow in rsync due to improper checksum length handling","content_text":"Red Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 72.5% (higher than 99.44% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.7 of 100.","summary":"Rsync: heap buffer overflow in rsync due to improper checksum length handling","date_published":"2025-01-15T00:00:00.000Z","date_modified":"2026-10-21T16:06:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.7,"kev":null,"epss":{"score":0.72514,"percentile":0.9944},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-8883","url":"https://patchfirst.co/cve/CVE-2024-8883/","title":"CVE-2024-8883: Keycloak: vulnerable redirect uri validation results in open redirec","content_text":"Red Hat · Red Hat Build of Keycloak. Not in CISA KEV. EPSS 2.1% (higher than 81.8% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. Priority 66.7 of 100.","summary":"Keycloak: vulnerable redirect uri validation results in open redirec","date_published":"2024-09-19T00:00:00.000Z","date_modified":"2026-08-04T11:08:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.7,"kev":null,"epss":{"score":0.02112,"percentile":0.81782},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Build of Keycloak","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-6409","url":"https://patchfirst.co/cve/CVE-2024-6409/","title":"CVE-2024-6409: Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9","content_text":"Red Hat · Red Hat Enterprise Linux 9. Not in CISA KEV. EPSS 27.9% (higher than 98.1% of CVEs). CVSS 7.0 HIGH. Priority 61.3 of 100.","summary":"Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9","date_published":"2024-07-08T00:00:00.000Z","date_modified":"2026-10-15T02:04:32.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.3,"kev":null,"epss":{"score":0.27935,"percentile":0.98097},"cvss":{"score":7,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-6387","url":"https://patchfirst.co/cve/CVE-2024-6387/","title":"CVE-2024-6387: Openssh: regresshion - race condition in ssh allows rce/dos","content_text":"Red Hat · Red Hat Enterprise Linux 9. Not in CISA KEV. EPSS 99.5% (higher than 99.95% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 68.7 of 100.","summary":"Openssh: regresshion - race condition in ssh allows rce/dos","date_published":"2024-07-01T00:00:00.000Z","date_modified":"2026-10-15T02:04:17.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.7,"kev":null,"epss":{"score":0.99506,"percentile":0.99946},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-3094","url":"https://patchfirst.co/cve/CVE-2024-3094/","title":"CVE-2024-3094: Xz: malicious code in distributed source","content_text":"Red Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 90.9% (higher than 99.81% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 35.0 of 100.","summary":"Xz: malicious code in distributed source","date_published":"2024-03-29T00:00:00.000Z","date_modified":"2026-08-04T07:05:54.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":35,"kev":null,"epss":{"score":0.909,"percentile":0.99806},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-0582","url":"https://patchfirst.co/cve/CVE-2024-0582/","title":"CVE-2024-0582: Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap","content_text":"Red Hat · Red Hat Enterprise Linux 6. Not in CISA KEV. EPSS 12.8% (higher than 96.3% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 65.4 of 100.","summary":"Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap","date_published":"2024-01-16T00:00:00.000Z","date_modified":"2025-11-20T07:09:06.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.4,"kev":null,"epss":{"score":0.12836,"percentile":0.96288},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-4320","url":"https://patchfirst.co/cve/CVE-2023-4320/","title":"CVE-2023-4320: Satellite: arithmetic overflow in satellite","content_text":"Red Hat · Red Hat Satellite 6.15 for RHEL 8. Not in CISA KEV. EPSS 0.7% (higher than 51.3% of CVEs). CVSS 7.6 HIGH. Priority 60.6 of 100.","summary":"Satellite: arithmetic overflow in satellite","date_published":"2023-12-18T00:00:00.000Z","date_modified":"2025-11-20T18:27:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":60.6,"kev":null,"epss":{"score":0.00653,"percentile":0.51267},"cvss":{"score":7.6,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Satellite 6.15 for RHEL 8","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-46847","url":"https://patchfirst.co/cve/CVE-2023-46847/","title":"CVE-2023-46847: Squid: denial of service in http digest authentication","content_text":"Red Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support. Not in CISA KEV. EPSS 78.5% (higher than 99.58% of CVEs). CVSS 8.6 HIGH. Priority 27.3 of 100.","summary":"Squid: denial of service in http digest authentication","date_published":"2023-11-03T00:00:00.000Z","date_modified":"2026-08-07T01:10:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":27.3,"kev":null,"epss":{"score":0.78513,"percentile":0.99584},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-14667#kev","url":"https://patchfirst.co/cve/CVE-2018-14667/","title":"[KEV] CVE-2018-14667: Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","content_text":"Red Hat · JBoss RichFaces Framework. In CISA KEV since 2023-09-28. ENISA EUVD lists it as exploited. EPSS 74.2% (higher than 99.49% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","date_published":"2023-09-28T00:00:00.000Z","date_modified":"2026-06-17T01:41:24.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2023-09-28","ransomware":false},"epss":{"score":0.74202,"percentile":0.99486},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"JBoss RichFaces Framework","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-34966","url":"https://patchfirst.co/cve/CVE-2023-34966/","title":"CVE-2023-34966: Samba: infinite loop in mdssvc rpc service for spotlight","content_text":"Red Hat · Red Hat Enterprise Linux 8. Not in CISA KEV. EPSS 62.4% (higher than 99.18% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.","summary":"Samba: infinite loop in mdssvc rpc service for spotlight","date_published":"2023-07-20T00:00:00.000Z","date_modified":"2025-11-20T17:28:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.1,"kev":null,"epss":{"score":0.62402,"percentile":0.99183},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-34967","url":"https://patchfirst.co/cve/CVE-2023-34967/","title":"CVE-2023-34967: Samba: type confusion in mdssvc rpc service for spotlight","content_text":"Red Hat · Red Hat Enterprise Linux 8. Not in CISA KEV. EPSS 61.2% (higher than 99.16% of CVEs). CVSS 5.3 MEDIUM. Priority 23.5 of 100.","summary":"Samba: type confusion in mdssvc rpc service for spotlight","date_published":"2023-07-20T00:00:00.000Z","date_modified":"2025-11-20T17:29:02.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.5,"kev":null,"epss":{"score":0.61199,"percentile":0.9916},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-3269","url":"https://patchfirst.co/cve/CVE-2023-3269/","title":"CVE-2023-3269: Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal","content_text":"Red Hat · Red Hat Enterprise Linux 6. Not in CISA KEV. EPSS 1.3% (higher than 70.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 59.6 of 100.","summary":"Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal","date_published":"2023-07-11T00:00:00.000Z","date_modified":"2025-03-05T18:54:16.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":59.6,"kev":null,"epss":{"score":0.01304,"percentile":0.7049},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-1183","url":"https://patchfirst.co/cve/CVE-2023-1183/","title":"CVE-2023-1183: Arbitrary file write","content_text":"Red Hat · Red Hat Enterprise Linux 6. Not in CISA KEV. EPSS 64.6% (higher than 99.24% of CVEs). CVSS 5.0 MEDIUM. Priority 23.3 of 100.","summary":"Arbitrary file write","date_published":"2023-07-10T00:00:00.000Z","date_modified":"2025-02-13T16:39:16.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.3,"kev":null,"epss":{"score":0.64635,"percentile":0.99239},"cvss":{"score":5,"severity":"MEDIUM","version":"3.1"},"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-3560#kev","url":"https://patchfirst.co/cve/CVE-2021-3560/","title":"[KEV] CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability","content_text":"Red Hat · Polkit. In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 23.7% (higher than 97.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts. Priority 68.0 of 100.","summary":"Red Hat Polkit Incorrect Authorization Vulnerability","date_published":"2023-05-12T00:00:00.000Z","date_modified":"2026-06-17T04:05:20.000Z","tags":["kev","public-exploit","T1068","T1078"],"_patchfirst":{"reason":"kev","priority":68,"kev":{"dateAdded":"2023-05-12","ransomware":false},"epss":{"score":0.23708,"percentile":0.97817},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Polkit","techniqueIds":["T1068","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-4034#kev","url":"https://patchfirst.co/cve/CVE-2021-4034/","title":"[KEV] CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","content_text":"Red Hat · Polkit. In CISA KEV since 2022-06-27, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.9% (higher than 99.86% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Named in 3 threat reports. Priority 86.2 of 100.","summary":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","date_published":"2022-06-27T00:00:00.000Z","date_modified":"2026-08-15T04:17:57.000Z","tags":["kev","ransomware","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":86.2,"kev":{"dateAdded":"2022-06-27","ransomware":true},"epss":{"score":0.94921,"percentile":0.9986},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Polkit","techniqueIds":["T1068"],"reportCount":3,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2010-1428#kev","url":"https://patchfirst.co/cve/CVE-2010-1428/","title":"[KEV] CVE-2010-1428: Red Hat JBoss Information Disclosure Vulnerability","content_text":"Red Hat · JBoss. In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 52.7% (higher than 99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.0 of 100.","summary":"Red Hat JBoss Information Disclosure Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-10-02T14:55:25.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":78,"kev":{"dateAdded":"2022-05-25","ransomware":true},"epss":{"score":0.52654,"percentile":0.98967},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"JBoss","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2010-0738#kev","url":"https://patchfirst.co/cve/CVE-2010-0738/","title":"[KEV] CVE-2010-0738: Red Hat JBoss Authentication Bypass Vulnerability","content_text":"Red Hat · JBoss. In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 73.8% (higher than 99.48% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth. Priority 76.6 of 100.","summary":"Red Hat JBoss Authentication Bypass Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-10-02T14:55:30.000Z","tags":["kev","ransomware","public-exploit","T1190","T1211"],"_patchfirst":{"reason":"kev","priority":76.6,"kev":{"dateAdded":"2022-05-25","ransomware":true},"epss":{"score":0.73815,"percentile":0.99476},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Red Hat","product":"JBoss","techniqueIds":["T1190","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-12149#kev","url":"https://patchfirst.co/cve/CVE-2017-12149/","title":"[KEV] CVE-2017-12149: Red Hat JBoss Application Server Remote Code Execution Vulnerability","content_text":"Red Hat · JBoss Application Server. In CISA KEV since 2021-12-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 90.7% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.","summary":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","date_published":"2021-12-10T00:00:00.000Z","date_modified":"2026-10-07T17:58:24.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2021-12-10","ransomware":true},"epss":{"score":0.90713,"percentile":0.99803},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Red Hat","product":"JBoss Application Server","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2010-1871#kev","url":"https://patchfirst.co/cve/CVE-2010-1871/","title":"[KEV] CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","content_text":"Red Hat · JBoss Seam 2. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 83.4% (higher than 99.68% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.0 of 100.","summary":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","date_published":"2021-12-10T00:00:00.000Z","date_modified":"2026-06-16T23:19:29.000Z","tags":["kev","public-exploit","T1059"],"_patchfirst":{"reason":"kev","priority":73,"kev":{"dateAdded":"2021-12-10","ransomware":false},"epss":{"score":0.83397,"percentile":0.99681},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"JBoss Seam 2","techniqueIds":["T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-10684","url":"https://patchfirst.co/cve/CVE-2020-10684/","title":"CVE-2020-10684: A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively…","content_text":"Red Hat · Ansible. Not in CISA KEV. EPSS 0.3% (higher than 26.7% of CVEs). CVSS 7.9 HIGH. Priority 46.6 of 100.","summary":"A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively…","date_published":"2020-03-24T00:00:00.000Z","date_modified":"2024-08-04T11:06:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":46.6,"kev":null,"epss":{"score":0.00334,"percentile":0.26738},"cvss":{"score":7.9,"severity":"HIGH","version":"3.1"},"vendor":"Red Hat","product":"Ansible","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-1111","url":"https://patchfirst.co/cve/CVE-2018-1111/","title":"CVE-2018-1111: DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw…","content_text":"Red Hat · dhcp. Not in CISA KEV. EPSS 97.9% (higher than 99.91% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.2 of 100.","summary":"DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw…","date_published":"2018-05-17T00:00:00.000Z","date_modified":"2024-08-05T03:51:48.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.2,"kev":null,"epss":{"score":0.97862,"percentile":0.99908},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"Red Hat","product":"dhcp","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2017-7504","url":"https://patchfirst.co/cve/CVE-2017-7504/","title":"CVE-2017-7504: HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default…","content_text":"Red Hat, Inc. · JBoss. Not in CISA KEV. EPSS 38.9% (higher than 98.6% of CVEs). Public exploit code exists. Priority 62.0 of 100.","summary":"HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default…","date_published":"2017-05-19T00:00:00.000Z","date_modified":"2024-08-05T16:04:11.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":62,"kev":null,"epss":{"score":0.38878,"percentile":0.98586},"cvss":null,"vendor":"Red Hat, Inc.","product":"JBoss","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}