Patchfirst
Patchfirst

Vendor

Red Hat

9 of 34 Red Hat CVEs in Patchfirst (26%) are in of vulnerabilities exploited in the wild, 4 of them used by ransomware.

CVEs
34
In CISA KEV
926%
Known ransomware use
4
Median days to KEV
3,915
from publication
Latest KEV listing
26 Aug 2026
Watch Red Hat Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • JBoss In KEV: 2 CVEs: 3
  • Polkit In KEV: 2 CVEs: 2
  • Automatic Bug Reporting Tool In KEV: 1 CVEs: 1
  • JBoss Application Server In KEV: 1 CVEs: 1
  • JBoss RichFaces Framework In KEV: 1 CVEs: 1
  • JBoss Seam 2 In KEV: 1 CVEs: 1
  • Libuser In KEV: 1 CVEs: 1
  • Red Hat Enterprise Linux 10 In KEV: 0 CVEs: 5
  • Red Hat Enterprise Linux 6 In KEV: 0 CVEs: 3
  • Red Hat Enterprise Linux 8 In KEV: 0 CVEs: 2

Top ATT&CK techniques

What attackers do with Red Hat CVEs
Open in ATT&CK Navigator

Counts are Red Hat CVEs linked to the technique. Each link’s provenance is on the CVE page.

Red Hat CVEs

34 CVEs, by priority
  1. CVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
    Red Hat · PolkitKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    94.9%Top 0.14%
    86.2priority
  2. CVE-2017-12149Red Hat JBoss Application Server Remote Code Execution Vulnerability
    Red Hat · JBoss Application ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    90.7%Top 0.2%
    79.8priority
  3. CVE-2010-1428Red Hat JBoss Information Disclosure Vulnerability
    Red Hat · JBossKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    52.7%Top 1%
    78.0priority
  4. CVE-2015-3246Red Hat Libuser Race Condition Vulnerability
    Red Hat · LibuserKEVPublic exploitHigh · 7.4
    8.5%Top 5%
    77.2priority
  5. CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
    Red Hat · Automatic Bug Reporting ToolKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    5.0%Top 7.8%
    76.9priority
  6. CVE-2010-0738Red Hat JBoss Authentication Bypass Vulnerability
    Red Hat · JBossKEVRansomwarePublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth
    73.8%Top 0.52%
    76.6priority
  7. CVE-2026-18963Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass
    Red Hat · Red Hat build of Keycloak 26.4Public exploitCritical · 9.1
    4.7%Top 8.2%
    75.4priority
  8. CVE-2026-4631Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
    Red Hat · Red Hat Enterprise Linux 10Public exploitCritical · 9.8
    15.5%Top 3.2%
    74.0priority
  9. CVE-2026-23536Feast: unauthenticated arbitrary file read
    Red Hat · Red Hat OpenShift AI (RHOAI)Public exploitHigh · 7.5
    2.4%Top 16%
    73.8priority
  10. CVE-2010-1871Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
    Red Hat · JBoss Seam 2KEVPublic exploitHigh · 8.8T1059Command and Scripting Interpreter1 report
    83.4%Top 0.32%
    73.0priority
  11. CVE-2026-4480Samba: samba: remote code execution in printing subsystem via unescaped job description
    Red Hat · Red Hat Enterprise Linux 10Public exploitCritical · 9.0
    13.9%Top 3.5%
    72.8priority
  12. CVE-2018-14667Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
    Red Hat · JBoss RichFaces FrameworkKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    74.2%Top 0.51%
    69.8priority
  13. CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
    Red Hat · Red Hat Enterprise Linux 9Public exploitHigh · 8.1
    99.5%Top 0.05%
    68.7priority
  14. CVE-2021-3560Red Hat Polkit Incorrect Authorization Vulnerability
    Red Hat · PolkitKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    23.7%Top 2.2%
    68.0priority
  15. CVE-2024-8883Keycloak: vulnerable redirect uri validation results in open redirec
    Red Hat · Red Hat Build of KeycloakPublic exploitMedium · 6.1
    2.1%Top 18%
    66.7priority
  16. CVE-2025-12548Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333
    Red Hat · Red Hat OpenShift Dev Spaces (RHOSDS) 3.22Public exploitCritical · 9.0
    1.3%Top 30%
    65.4priority
  17. CVE-2024-0582Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
    Red Hat · Red Hat Enterprise Linux 6Public exploitHigh · 7.8
    12.8%Top 3.7%
    65.4priority
  18. CVE-2017-7504HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default…
    Red Hat, Inc. · JBossPublic exploit
    38.9%Top 1.4%
    62.0priority
  19. CVE-2024-6409Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
    Red Hat · Red Hat Enterprise Linux 9High · 7.0
    27.9%Top 1.9%
    61.3priority
  20. CVE-2023-4320Satellite: arithmetic overflow in satellite
    Red Hat · Red Hat Satellite 6.15 for RHEL 8High · 7.6
    0.7%Top 49%
    60.6priority
  21. CVE-2023-3269Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal
    Red Hat · Red Hat Enterprise Linux 6Public exploitHigh · 7.8
    1.3%Top 30%
    59.6priority
  22. CVE-2025-6019Libblockdev: lpe from allow_active to root in libblockdev via udisks
    Red Hat · Red Hat Enterprise Linux 10Public exploitHigh · 7.0
    0.5%Top 59%
    53.9priority
  23. CVE-2020-10684A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively…
    Red Hat · AnsibleHigh · 7.9
    0.3%Top 73%
    46.6priority
  24. CVE-2024-3094Xz: malicious code in distributed source
    Red Hat · Red Hat Enterprise Linux 10Public exploitCritical · 10.0
    90.9%Top 0.19%
    35.0priority
  25. CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handling
    Red Hat · Red Hat Enterprise Linux 10Public exploitCritical · 9.8
    72.5%Top 0.56%
    31.7priority
  26. CVE-2018-1111DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw…
    Red Hat · dhcpPublic exploitHigh · 7.5
    97.9%Top 0.09%
    30.2priority
  27. CVE-2023-46847Squid: denial of service in http digest authentication
    Red Hat · Red Hat Enterprise Linux 6 Extended Lifecycle SupportHigh · 8.6
    78.5%Top 0.42%
    27.3priority
  28. CVE-2023-34966Samba: infinite loop in mdssvc rpc service for spotlight
    Red Hat · Red Hat Enterprise Linux 8High · 7.5
    62.4%Top 0.82%
    25.1priority
  29. CVE-2023-34967Samba: type confusion in mdssvc rpc service for spotlight
    Red Hat · Red Hat Enterprise Linux 8Medium · 5.3
    61.2%Top 0.84%
    23.5priority
  30. CVE-2023-1183Arbitrary file write
    Red Hat · Red Hat Enterprise Linux 6Medium · 5.0
    64.6%Top 0.76%
    23.3priority
  31. CVE-2026-87744A flaw was found in Quarkus REST Data Panache
    Red Hat · Red Hat build of Quarkus 3.27.6.redhatCritical · 9.1
    0.4%Top 67%
    15.1priority
  32. CVE-2026-105312A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an…
    Red Hat · StreamsHub Console for Apache Kafka®Critical · 9.9
    0.3%Top 73%
    14.3priority
  33. CVE-2026-96659A flaw was found in Foreman
    Red Hat · Red Hat Satellite 6.16 for RHEL 8Critical · 9.1
    0.3%Top 72%
    13.6priority
  34. CVE-2026-107935A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package
    Red Hat · Red Hat Build of Podman DesktopCritical · 9.3
    0.2%Top 85%
    12.0priority
↑ ↓ chooseEnter openEsc close