Exploited vulnerabilities
Red Hat
9 Red Hat vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue9
Last 12 months2
In ransomware campaigns4
Last addition26 August 2026
The vulnerabilities9
- 26 August 2026CVE-2015-5287Automatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- 26 August 2026CVE-2015-3246LibuserRed Hat Libuser Race Condition Vulnerability
- 28 September 2023CVE-2018-14667JBoss RichFaces FrameworkRed Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
- 12 May 2023CVE-2021-3560PolkitRed Hat Polkit Incorrect Authorization Vulnerability
- 27 June 2022CVE-2021-4034PolkitRed Hat Polkit Out-of-Bounds Read and Write VulnerabilityRansomware
- 25 May 2022CVE-2010-1428JBossRed Hat JBoss Information Disclosure VulnerabilityRansomware
- 25 May 2022CVE-2010-0738JBossRed Hat JBoss Authentication Bypass VulnerabilityRansomware
- 10 December 2021CVE-2017-12149JBoss Application ServerRed Hat JBoss Application Server Remote Code Execution VulnerabilityRansomware
- 10 December 2021CVE-2010-1871JBoss Seam 2Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Red Hat included.