# Red Hat vulnerabilities

> Red Hat has 5,740 published vulnerabilities across 538 products in our catalogue. 93 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Enterprise Linux, with 2,039. If you run Red Hat software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/redhat

## At a glance

- **Published vulnerabilities:** 5,740
- **Known to be exploited:** 93
- **Products:** 538
- **Versions:** 9,928
- **Most recently added to the known-exploited list:** [CVE-2015-3246](https://www.precursorintelligence.com/what-is/cve-2015-3246), 26 August 2026. We keep watching the list.

## Which Red Hat products have the most vulnerabilities?

- [Enterprise Linux](https://www.precursorintelligence.com/product/redhat/enterprise_linux): 2,039 published vulnerabilities, 57 versions
- [Enterprise Linux Desktop](https://www.precursorintelligence.com/product/redhat/enterprise_linux_desktop): 1,947 published vulnerabilities, 21 versions
- [Enterprise Linux Server](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server): 1,913 published vulnerabilities, 18 versions
- [Enterprise Linux Workstation](https://www.precursorintelligence.com/product/redhat/enterprise_linux_workstation): 1,850 published vulnerabilities, 8 versions
- [Enterprise Linux Server Aus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_aus): 1,055 published vulnerabilities, 20 versions
- [Enterprise Linux Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_eus): 783 published vulnerabilities, 36 versions
- [Enterprise Linux Server Tus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_tus): 765 published vulnerabilities, 12 versions
- [Enterprise Linux Server Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_eus): 625 published vulnerabilities, 29 versions
- [Openshift Container Platform](https://www.precursorintelligence.com/product/redhat/openshift_container_platform): 267 published vulnerabilities, 761 versions
- [Linux](https://www.precursorintelligence.com/product/redhat/linux): 252 published vulnerabilities, 27 versions

Each product page lists its own known-exploited flaws.

## Which Red Hat vulnerabilities are being exploited?

93 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2015-3246](https://www.precursorintelligence.com/what-is/cve-2015-3246): Red Hat Libuser Race Condition Vulnerability. High, CVSS 7.2, chance of use in 30 days 8.5%, known exploited since 26 August 2026.
- [CVE-2015-5287](https://www.precursorintelligence.com/what-is/cve-2015-5287): Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability. Medium, CVSS 6.9, chance of use in 30 days 5.0%, known exploited since 26 August 2026.
- [CVE-2022-0492](https://www.precursorintelligence.com/what-is/cve-2022-0492): Linux Kernel Improper Authentication Vulnerability. High, CVSS 7.8, chance of use in 30 days 5.5%, known exploited since 2 June 2026.
- [CVE-2026-31431](https://www.precursorintelligence.com/what-is/cve-2026-31431): Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.4%, known exploited since 1 May 2026.
- [CVE-2018-14634](https://www.precursorintelligence.com/what-is/cve-2018-14634): Linux Kernel Integer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 15%, known exploited since 26 January 2026.
- [CVE-2025-32463](https://www.precursorintelligence.com/what-is/cve-2025-32463): Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability. Critical, CVSS 9.3, chance of use in 30 days 55%, known exploited since 29 September 2025.
- [CVE-2019-5418](https://www.precursorintelligence.com/what-is/cve-2019-5418): Rails Ruby on Rails Path Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 99%, known exploited since 7 July 2025.
- [CVE-2014-0497](https://www.precursorintelligence.com/what-is/cve-2014-0497): Adobe Flash Player Integer Underflow Vulnerablity. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 17 September 2024.
- [CVE-2014-0502](https://www.precursorintelligence.com/what-is/cve-2014-0502): Adobe Flash Player Double Free Vulnerablity. High, CVSS 8.8, chance of use in 30 days 25%, known exploited since 17 September 2024.
- [CVE-2013-0643](https://www.precursorintelligence.com/what-is/cve-2013-0643): Adobe Flash Player Incorrect Default Permissions Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 17 September 2024.
- [CVE-2013-0648](https://www.precursorintelligence.com/what-is/cve-2013-0648): Adobe Flash Player Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 17 September 2024.
- [CVE-2017-1000253](https://www.precursorintelligence.com/what-is/cve-2017-1000253): Linux Kernel PIE Stack Buffer Corruption Vulnerability. High, CVSS 7.8, chance of use in 30 days 11%, known exploited since 9 September 2024.
- [CVE-2024-1086](https://www.precursorintelligence.com/what-is/cve-2024-1086): Linux Kernel Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 28%, known exploited since 30 May 2024.
- [CVE-2023-4911](https://www.precursorintelligence.com/what-is/cve-2023-4911): GNU C Library Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 64%, known exploited since 21 November 2023.
- [CVE-2023-44487](https://www.precursorintelligence.com/what-is/cve-2023-44487): HTTP/2 Rapid Reset Attack Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 October 2023.
- [CVE-2023-5217](https://www.precursorintelligence.com/what-is/cve-2023-5217): Google Chromium libvpx Heap Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 49%, known exploited since 2 October 2023.
- [CVE-2018-14667](https://www.precursorintelligence.com/what-is/cve-2018-14667): Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 74%, known exploited since 28 September 2023.
- [CVE-2016-9079](https://www.precursorintelligence.com/what-is/cve-2016-9079): Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability. High, CVSS 7.5, chance of use in 30 days 88%, known exploited since 22 June 2023.
- [CVE-2023-32373](https://www.precursorintelligence.com/what-is/cve-2023-32373): Apple Multiple Products WebKit Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 12%, known exploited since 22 May 2023.
- [CVE-2016-3427](https://www.precursorintelligence.com/what-is/cve-2016-3427): Oracle Java SE and JRockit Unspecified Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 92%, known exploited since 12 May 2023.
- [CVE-2016-8735](https://www.precursorintelligence.com/what-is/cve-2016-8735): Apache Tomcat Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 12 May 2023.
- [CVE-2021-3560](https://www.precursorintelligence.com/what-is/cve-2021-3560): Red Hat Polkit Incorrect Authorization Vulnerability. High, CVSS 7.8, chance of use in 30 days 24%, known exploited since 12 May 2023.
- [CVE-2010-3904](https://www.precursorintelligence.com/what-is/cve-2010-3904): Linux Kernel Improper Input Validation Vulnerability. High, CVSS 7.8, chance of use in 30 days 16%, known exploited since 12 May 2023.
- [CVE-2015-5317](https://www.precursorintelligence.com/what-is/cve-2015-5317): Jenkins User Interface (UI) Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 23%, known exploited since 12 May 2023.
- [CVE-2014-0196](https://www.precursorintelligence.com/what-is/cve-2014-0196): Linux Kernel Race Condition Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 22%, known exploited since 12 May 2023.
- [CVE-2021-4034](https://www.precursorintelligence.com/what-is/cve-2021-4034): Red Hat Polkit Out-of-Bounds Read and Write Vulnerability. High, CVSS 7.8, chance of use in 30 days 95%, known exploited since 27 June 2022.
- [CVE-2018-17480](https://www.precursorintelligence.com/what-is/cve-2018-17480): Google Chromium V8 Out-of-Bounds Write Vulnerability. High, CVSS 8.8, chance of use in 30 days 36%, known exploited since 8 June 2022.
- [CVE-2016-1646](https://www.precursorintelligence.com/what-is/cve-2016-1646): Google Chromium V8 Out-of-Bounds Read Vulnerability. High, CVSS 8.8, chance of use in 30 days 48%, known exploited since 8 June 2022.
- [CVE-2016-5198](https://www.precursorintelligence.com/what-is/cve-2016-5198): Google Chromium V8 Out-of-Bounds Memory Vulnerability. High, CVSS 8.8, chance of use in 30 days 34%, known exploited since 8 June 2022.
- [CVE-2017-5030](https://www.precursorintelligence.com/what-is/cve-2017-5030): Google Chromium V8 Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 41%, known exploited since 8 June 2022.
- [CVE-2017-5070](https://www.precursorintelligence.com/what-is/cve-2017-5070): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 32%, known exploited since 8 June 2022.
- [CVE-2018-6065](https://www.precursorintelligence.com/what-is/cve-2018-6065): Google Chromium V8 Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 60%, known exploited since 8 June 2022.
- [CVE-2018-17463](https://www.precursorintelligence.com/what-is/cve-2018-17463): Google Chromium V8 Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 85%, known exploited since 8 June 2022.
- [CVE-2015-4495](https://www.precursorintelligence.com/what-is/cve-2015-4495): Mozilla Firefox Security Feature Bypass Vulnerability. High, CVSS 8.8, chance of use in 30 days 69%, known exploited since 25 May 2022.
- [CVE-2015-8651](https://www.precursorintelligence.com/what-is/cve-2015-8651): Adobe Flash Player Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 68%, known exploited since 25 May 2022.
- [CVE-2014-3153](https://www.precursorintelligence.com/what-is/cve-2014-3153): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 37%, known exploited since 25 May 2022.
- [CVE-2010-1428](https://www.precursorintelligence.com/what-is/cve-2010-1428): Red Hat JBoss Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 61%, known exploited since 25 May 2022.
- [CVE-2010-0738](https://www.precursorintelligence.com/what-is/cve-2010-0738): Red Hat JBoss Authentication Bypass Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 75%, known exploited since 25 May 2022.
- [CVE-2017-8291](https://www.precursorintelligence.com/what-is/cve-2017-8291): Artifex Ghostscript Type Confusion Vulnerability. High, CVSS 7.8, chance of use in 30 days 97%, known exploited since 24 May 2022.
- [CVE-2018-5002](https://www.precursorintelligence.com/what-is/cve-2018-5002): Adobe Flash Player Stack-based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 25%, known exploited since 23 May 2022.
- [CVE-2019-8720](https://www.precursorintelligence.com/what-is/cve-2019-8720): WebKitGTK Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 1.6%, known exploited since 23 May 2022.
- [CVE-2019-8506](https://www.precursorintelligence.com/what-is/cve-2019-8506): Apple Multiple Products Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 16%, known exploited since 4 May 2022.
- [CVE-2014-0160](https://www.precursorintelligence.com/what-is/cve-2014-0160): OpenSSL Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 4 May 2022.
- [CVE-2019-1003029](https://www.precursorintelligence.com/what-is/cve-2019-1003029): Jenkins Script Security Plugin Sandbox Bypass Vulnerability. Critical, CVSS 9.9, chance of use in 30 days 74%, known exploited since 25 April 2022.
- [CVE-2022-0847](https://www.precursorintelligence.com/what-is/cve-2022-0847): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 93%, known exploited since 25 April 2022.
- [CVE-2015-3113](https://www.precursorintelligence.com/what-is/cve-2015-3113): Adobe Flash Player Heap-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 13 April 2022.
- [CVE-2015-5122](https://www.precursorintelligence.com/what-is/cve-2015-5122): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 13 April 2022.
- [CVE-2015-5123](https://www.precursorintelligence.com/what-is/cve-2015-5123): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 19%, known exploited since 13 April 2022.
- [CVE-2013-2729](https://www.precursorintelligence.com/what-is/cve-2013-2729): Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 67%, known exploited since 28 March 2022.
- [CVE-2013-1690](https://www.precursorintelligence.com/what-is/cve-2013-1690): Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability. High, CVSS 8.8, chance of use in 30 days 69%, known exploited since 28 March 2022.
- [CVE-2012-2034](https://www.precursorintelligence.com/what-is/cve-2012-2034): Adobe Flash Player Memory Corruption Vulnerability. High, CVSS 7.5, chance of use in 30 days 7.7%, known exploited since 28 March 2022.
- [CVE-2019-1003030](https://www.precursorintelligence.com/what-is/cve-2019-1003030): Jenkins Matrix Project Plugin Remote Code Execution Vulnerability. Critical, CVSS 9.9, chance of use in 30 days 97%, known exploited since 25 March 2022.
- [CVE-2015-1427](https://www.precursorintelligence.com/what-is/cve-2015-1427): Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2012-1823](https://www.precursorintelligence.com/what-is/cve-2012-1823): PHP-CGI Query String Parameter Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2016-4171](https://www.precursorintelligence.com/what-is/cve-2016-4171): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 20%, known exploited since 25 March 2022.
- [CVE-2013-2251](https://www.precursorintelligence.com/what-is/cve-2013-2251): Apache Struts Improper Input Validation Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2019-11043](https://www.precursorintelligence.com/what-is/cve-2019-11043): PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability. High, CVSS 8.7, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2017-12615](https://www.precursorintelligence.com/what-is/cve-2017-12615): Apache Tomcat on Windows Remote Code Execution Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2017-12617](https://www.precursorintelligence.com/what-is/cve-2017-12617): Apache Tomcat Remote Code Execution Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2014-0130](https://www.precursorintelligence.com/what-is/cve-2014-0130): Ruby on Rails Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 54%, known exploited since 25 March 2022.
- [CVE-2016-0752](https://www.precursorintelligence.com/what-is/cve-2016-0752): Ruby on Rails Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 96%, known exploited since 25 March 2022.
- [CVE-2012-4681](https://www.precursorintelligence.com/what-is/cve-2012-4681): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 99%, known exploited since 3 March 2022.
- [CVE-2015-5119](https://www.precursorintelligence.com/what-is/cve-2015-5119): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 March 2022.
- [CVE-2015-3043](https://www.precursorintelligence.com/what-is/cve-2015-3043): Adobe Flash Player Memory Corruption Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 74%, known exploited since 3 March 2022.
- [CVE-2016-4117](https://www.precursorintelligence.com/what-is/cve-2016-4117): Adobe Flash Player Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 3 March 2022.
- [CVE-2015-2590](https://www.precursorintelligence.com/what-is/cve-2015-2590): Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 25%, known exploited since 3 March 2022.
- [CVE-2012-1723](https://www.precursorintelligence.com/what-is/cve-2012-1723): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 3 March 2022.
- [CVE-2011-3544](https://www.precursorintelligence.com/what-is/cve-2011-3544): Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 3 March 2022.
- [CVE-2017-11292](https://www.precursorintelligence.com/what-is/cve-2017-11292): Adobe Flash Player Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 12%, known exploited since 3 March 2022.
- [CVE-2016-7855](https://www.precursorintelligence.com/what-is/cve-2016-7855): Adobe Flash Player Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 25%, known exploited since 3 March 2022.
- [CVE-2015-7645](https://www.precursorintelligence.com/what-is/cve-2015-7645): Adobe Flash Player Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 65%, known exploited since 3 March 2022.
- [CVE-2013-0641](https://www.precursorintelligence.com/what-is/cve-2013-0641): Adobe Reader Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 32%, known exploited since 3 March 2022.
- [CVE-2013-0640](https://www.precursorintelligence.com/what-is/cve-2013-0640): Adobe Reader and Acrobat Memory Corruption Vulnerability. High, CVSS 7.8, chance of use in 30 days 87%, known exploited since 3 March 2022.
- [CVE-2012-1535](https://www.precursorintelligence.com/what-is/cve-2012-1535): Adobe Flash Player Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 70%, known exploited since 3 March 2022.
- [CVE-2016-5195](https://www.precursorintelligence.com/what-is/cve-2016-5195): Linux Kernel Race Condition Vulnerability. High, CVSS 7.0, chance of use in 30 days 84%, known exploited since 3 March 2022.
- [CVE-2013-1675](https://www.precursorintelligence.com/what-is/cve-2013-1675): Mozilla Firefox Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 6.7%, known exploited since 3 March 2022.
- [CVE-2015-4902](https://www.precursorintelligence.com/what-is/cve-2015-4902): Oracle Java SE Integrity Check Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 14%, known exploited since 3 March 2022.
- [CVE-2018-15982](https://www.precursorintelligence.com/what-is/cve-2018-15982): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 15 February 2022.
- [CVE-2018-1000861](https://www.precursorintelligence.com/what-is/cve-2018-1000861): Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 98%, known exploited since 10 February 2022.
- [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022.
- [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022.
- [CVE-2019-7609](https://www.precursorintelligence.com/what-is/cve-2019-7609): Kibana Arbitrary Code Execution. Critical, CVSS 10.0, chance of use in 30 days 95%, known exploited since 10 January 2022.
- [CVE-2017-12149](https://www.precursorintelligence.com/what-is/cve-2017-12149): Red Hat JBoss Application Server Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 91%, known exploited since 10 December 2021.
- [CVE-2010-1871](https://www.precursorintelligence.com/what-is/cve-2010-1871): Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 83%, known exploited since 10 December 2021.
- [CVE-2019-13272](https://www.precursorintelligence.com/what-is/cve-2019-13272): Linux Kernel Improper Privilege Management Vulnerability. High, CVSS 7.8, chance of use in 30 days 52%, known exploited since 10 December 2021.
- [CVE-2021-40438](https://www.precursorintelligence.com/what-is/cve-2021-40438): Apache HTTP Server-Side Request Forgery (SSRF). Critical, CVSS 9.0, chance of use in 30 days >99%, known exploited since 1 December 2021.
- [CVE-2016-4437](https://www.precursorintelligence.com/what-is/cve-2016-4437): Apache Shiro Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 93%, known exploited since 3 November 2021.
- [CVE-2019-5544](https://www.precursorintelligence.com/what-is/cve-2019-5544): VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 3 November 2021.
- [CVE-2018-4878](https://www.precursorintelligence.com/what-is/cve-2018-4878): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 3 November 2021.
- [CVE-2020-6418](https://www.precursorintelligence.com/what-is/cve-2020-6418): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 79%, known exploited since 3 November 2021.
- [CVE-2019-0211](https://www.precursorintelligence.com/what-is/cve-2019-0211): Apache HTTP Server Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 65%, known exploited since 3 November 2021.
- [CVE-2016-3718](https://www.precursorintelligence.com/what-is/cve-2016-3718): ImageMagick Server-Side Request Forgery (SSRF) Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 76%, known exploited since 3 November 2021.
- [CVE-2016-3715](https://www.precursorintelligence.com/what-is/cve-2016-3715): ImageMagick Arbitrary File Deletion Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 75%, known exploited since 3 November 2021.

## Which Red Hat flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2012-1823](https://www.precursorintelligence.com/what-is/cve-2012-1823): >99%, Critical (CVSS 9.8), known exploited
- [CVE-2011-3544](https://www.precursorintelligence.com/what-is/cve-2011-3544): 97%, Critical (CVSS 9.8), known exploited
- [CVE-2006-3918](https://www.precursorintelligence.com/what-is/cve-2006-3918): 95%, Medium (CVSS 4.3)
- [CVE-2012-1723](https://www.precursorintelligence.com/what-is/cve-2012-1723): 94%, Critical (CVSS 9.8), known exploited
- [CVE-2011-3923](https://www.precursorintelligence.com/what-is/cve-2011-3923): 89%, Critical (CVSS 9.8)
- [CVE-2010-1871](https://www.precursorintelligence.com/what-is/cve-2010-1871): 83%, High (CVSS 8.8), known exploited
- [CVE-2012-0053](https://www.precursorintelligence.com/what-is/cve-2012-0053): 82%, Medium (CVSS 4.3)
- [CVE-2007-5365](https://www.precursorintelligence.com/what-is/cve-2007-5365): 80%, High (CVSS 7.2)
- [CVE-2009-1386](https://www.precursorintelligence.com/what-is/cve-2009-1386): 80%, Medium (CVSS 5.0)

## All Red Hat products we track

445 products with at least one tracked version, most vulnerabilities first (the top 150 here; every product is on the page):

- [Enterprise Linux](https://www.precursorintelligence.com/product/redhat/enterprise_linux): 2,039 vulnerabilities, 57 versions
- [Enterprise Linux Desktop](https://www.precursorintelligence.com/product/redhat/enterprise_linux_desktop): 1,947 vulnerabilities, 21 versions
- [Enterprise Linux Server](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server): 1,913 vulnerabilities, 18 versions
- [Enterprise Linux Workstation](https://www.precursorintelligence.com/product/redhat/enterprise_linux_workstation): 1,850 vulnerabilities, 8 versions
- [Enterprise Linux Server Aus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_aus): 1,055 vulnerabilities, 20 versions
- [Enterprise Linux Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_eus): 783 vulnerabilities, 36 versions
- [Enterprise Linux Server Tus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_tus): 765 vulnerabilities, 12 versions
- [Enterprise Linux Server Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_eus): 625 vulnerabilities, 29 versions
- [Openshift Container Platform](https://www.precursorintelligence.com/product/redhat/openshift_container_platform): 267 vulnerabilities, 761 versions
- [Linux](https://www.precursorintelligence.com/product/redhat/linux): 252 vulnerabilities, 27 versions
- [Jboss Enterprise Application Platform](https://www.precursorintelligence.com/product/redhat/jboss_enterprise_application_platform): 235 vulnerabilities, 100 versions
- [Satellite](https://www.precursorintelligence.com/product/redhat/satellite): 223 vulnerabilities, 133 versions
- [Openstack](https://www.precursorintelligence.com/product/redhat/openstack): 213 vulnerabilities, 30 versions
- [Openshift](https://www.precursorintelligence.com/product/redhat/openshift): 177 vulnerabilities, 68 versions
- [Enterprise Linux Hpc Node](https://www.precursorintelligence.com/product/redhat/enterprise_linux_hpc_node): 149 vulnerabilities, 3 versions
- [Software Collections](https://www.precursorintelligence.com/product/redhat/software_collections): 137 vulnerabilities, 14 versions
- [Virtualization](https://www.precursorintelligence.com/product/redhat/virtualization): 128 vulnerabilities, 11 versions
- [Enterprise Linux for Ibm Z Systems](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_ibm_z_systems): 108 vulnerabilities, 25 versions
- [Enterprise Linux for Power Little Endian](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_power_little_endian): 103 vulnerabilities, 10 versions
- [Single Sign-on](https://www.precursorintelligence.com/product/redhat/single_sign-on): 101 vulnerabilities, 17 versions
- [Keycloak](https://www.precursorintelligence.com/product/redhat/keycloak): 95 vulnerabilities, 144 versions
- [Enterprise Linux for Power Little Endian Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_power_little_endian_eus): 89 vulnerabilities, 30 versions
- [Enterprise Linux Workstation Supplementary](https://www.precursorintelligence.com/product/redhat/enterprise_linux_workstation_supplementary): 86 vulnerabilities, 2 versions
- [Enterprise Linux Server Supplementary](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_supplementary): 84 vulnerabilities, 7 versions
- [Enterprise Linux Desktop Supplementary](https://www.precursorintelligence.com/product/redhat/enterprise_linux_desktop_supplementary): 84 vulnerabilities, 3 versions
- [Enterprise Linux Hpc Node Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_hpc_node_eus): 83 vulnerabilities, 14 versions
- [Enterprise Linux Server Supplementary Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_supplementary_eus): 83 vulnerabilities, 4 versions
- [Virtualization Host](https://www.precursorintelligence.com/product/redhat/virtualization_host): 83 vulnerabilities, 1 version
- [Enterprise Linux for Ibm Z Systems Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_ibm_z_systems_eus): 83 vulnerabilities, 32 versions
- [Fedora Core](https://www.precursorintelligence.com/product/redhat/fedora_core): 81 vulnerabilities, 14 versions
- [Libvirt](https://www.precursorintelligence.com/product/redhat/libvirt): 73 vulnerabilities, 264 versions
- [Enterprise Mrg](https://www.precursorintelligence.com/product/redhat/enterprise_mrg): 73 vulnerabilities, 16 versions
- [Linux Advanced Workstation](https://www.precursorintelligence.com/product/redhat/linux_advanced_workstation): 71 vulnerabilities, 1 version
- [Enterprise Linux for Scientific Computing](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_scientific_computing): 71 vulnerabilities, 2 versions
- [Ansible Tower](https://www.precursorintelligence.com/product/redhat/ansible_tower): 66 vulnerabilities, 95 versions
- [Enterprise Linux Server for Power Little Endian Update Services for Sap Solutions](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions): 60 vulnerabilities, 23 versions
- [Cloudforms](https://www.precursorintelligence.com/product/redhat/cloudforms): 48 vulnerabilities, 23 versions
- [Enterprise Linux Aus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_aus): 45 vulnerabilities, 15 versions
- [Enterprise Linux for Power Big Endian](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_power_big_endian): 45 vulnerabilities, 9 versions
- [Ansible](https://www.precursorintelligence.com/product/redhat/ansible): 45 vulnerabilities, 361 versions
- [Linux Desktop](https://www.precursorintelligence.com/product/redhat/linux_desktop): 44 vulnerabilities, 1 version
- [Linux Server](https://www.precursorintelligence.com/product/redhat/linux_server): 44 vulnerabilities, 1 version
- [Linux Workstation](https://www.precursorintelligence.com/product/redhat/linux_workstation): 44 vulnerabilities, 1 version
- [Enterprise Linux for Real Time](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_real_time): 43 vulnerabilities, 7 versions
- [Ceph Storage](https://www.precursorintelligence.com/product/redhat/ceph_storage): 43 vulnerabilities, 11 versions
- [Enterprise Linux Server Update Services for Sap Solutions](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_update_services_for_sap_solutions): 43 vulnerabilities, 12 versions
- [Cloudforms Management Engine](https://www.precursorintelligence.com/product/redhat/cloudforms_management_engine): 42 vulnerabilities, 29 versions
- [Jboss Fuse](https://www.precursorintelligence.com/product/redhat/jboss_fuse): 42 vulnerabilities, 10 versions
- [Enterprise Linux for Arm 64](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_arm_64): 40 vulnerabilities, 10 versions
- [Undertow](https://www.precursorintelligence.com/product/redhat/undertow): 37 vulnerabilities, 174 versions
- [Codeready Linux Builder](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder): 37 vulnerabilities, 4 versions
- [Enterprise Virtualization](https://www.precursorintelligence.com/product/redhat/enterprise_virtualization): 37 vulnerabilities, 10 versions
- [Enterprise Linux for Real Time for Nfv](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_real_time_for_nfv): 37 vulnerabilities, 5 versions
- [Openstack Platform](https://www.precursorintelligence.com/product/redhat/openstack_platform): 37 vulnerabilities, 10 versions
- [Jboss Enterprise Web Server](https://www.precursorintelligence.com/product/redhat/jboss_enterprise_web_server): 36 vulnerabilities, 8 versions
- [Openshift Application Runtimes](https://www.precursorintelligence.com/product/redhat/openshift_application_runtimes): 33 vulnerabilities, 1 version
- [Enterprise Linux for Arm 64 Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_arm_64_eus): 31 vulnerabilities, 14 versions
- [Storage](https://www.precursorintelligence.com/product/redhat/storage): 31 vulnerabilities, 3 versions
- [Jboss Core Services](https://www.precursorintelligence.com/product/redhat/jboss_core_services): 31 vulnerabilities, 1 version
- [Fedora](https://www.precursorintelligence.com/product/redhat/fedora): 27 vulnerabilities, 8 versions
- [Ansible Engine](https://www.precursorintelligence.com/product/redhat/ansible_engine): 27 vulnerabilities, 210 versions
- [Directory Server](https://www.precursorintelligence.com/product/redhat/directory_server): 26 vulnerabilities, 14 versions
- [Gluster Storage](https://www.precursorintelligence.com/product/redhat/gluster_storage): 26 vulnerabilities, 12 versions
- [Jboss Data Grid](https://www.precursorintelligence.com/product/redhat/jboss_data_grid): 25 vulnerabilities, 11 versions
- [Fuse](https://www.precursorintelligence.com/product/redhat/fuse): 25 vulnerabilities, 18 versions
- [Jboss Operations Network](https://www.precursorintelligence.com/product/redhat/jboss_operations_network): 24 vulnerabilities, 33 versions
- [Quay](https://www.precursorintelligence.com/product/redhat/quay): 24 vulnerabilities, 76 versions
- [Ansible Automation Platform](https://www.precursorintelligence.com/product/redhat/ansible_automation_platform): 23 vulnerabilities, 7 versions
- [Jboss Enterprise Brms Platform](https://www.precursorintelligence.com/product/redhat/jboss_enterprise_brms_platform): 23 vulnerabilities, 14 versions
- [Jboss Enterprise Portal Platform](https://www.precursorintelligence.com/product/redhat/jboss_enterprise_portal_platform): 22 vulnerabilities, 12 versions
- [Enterprise Linux for Real Time for Nfv Tus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_real_time_for_nfv_tus): 22 vulnerabilities, 5 versions
- [Process Automation](https://www.precursorintelligence.com/product/redhat/process_automation): 21 vulnerabilities, 1 version
- [Enterprise Linux Tus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_tus): 21 vulnerabilities, 8 versions
- [Jboss Enterprise Web Platform](https://www.precursorintelligence.com/product/redhat/jboss_enterprise_web_platform): 21 vulnerabilities, 5 versions
- [Enterprise Linux for Real Time Tus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_real_time_tus): 21 vulnerabilities, 5 versions
- [Openshift Service Mesh](https://www.precursorintelligence.com/product/redhat/openshift_service_mesh): 21 vulnerabilities, 8 versions
- [Build of Quarkus](https://www.precursorintelligence.com/product/redhat/build_of_quarkus): 21 vulnerabilities, 6 versions
- [Enterprise Linux Update Services for Sap Solutions](https://www.precursorintelligence.com/product/redhat/enterprise_linux_update_services_for_sap_solutions): 21 vulnerabilities, 10 versions
- [Integration Camel K](https://www.precursorintelligence.com/product/redhat/integration_camel_k): 20 vulnerabilities, 1 version
- [Openshift Container Platform for Power](https://www.precursorintelligence.com/product/redhat/openshift_container_platform_for_power): 20 vulnerabilities, 11 versions
- [Enterprise Linux for Power Big Endian Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_power_big_endian_eus): 20 vulnerabilities, 15 versions
- [Decision Manager](https://www.precursorintelligence.com/product/redhat/decision_manager): 20 vulnerabilities, 4 versions
- [Codeready Linux Builder Eus](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_eus): 19 vulnerabilities, 7 versions
- [Enterprise Virtualization Manager](https://www.precursorintelligence.com/product/redhat/enterprise_virtualization_manager): 19 vulnerabilities, 12 versions
- [Certificate System](https://www.precursorintelligence.com/product/redhat/certificate_system): 19 vulnerabilities, 10 versions
- [Resteasy](https://www.precursorintelligence.com/product/redhat/resteasy): 18 vulnerabilities, 122 versions
- [Data Grid](https://www.precursorintelligence.com/product/redhat/data_grid): 18 vulnerabilities, 10 versions
- [Wildfly](https://www.precursorintelligence.com/product/redhat/wildfly): 18 vulnerabilities, 49 versions
- [Jboss Bpm Suite](https://www.precursorintelligence.com/product/redhat/jboss_bpm_suite): 18 vulnerabilities, 13 versions
- [Jboss a-Mq](https://www.precursorintelligence.com/product/redhat/jboss_a-mq): 17 vulnerabilities, 5 versions
- [Jboss Enterprise Soa Platform](https://www.precursorintelligence.com/product/redhat/jboss_enterprise_soa_platform): 17 vulnerabilities, 10 versions
- [Ceph](https://www.precursorintelligence.com/product/redhat/ceph): 16 vulnerabilities, 329 versions
- [Developer Tools](https://www.precursorintelligence.com/product/redhat/developer_tools): 15 vulnerabilities, 1 version
- [Openshift Container Platform for Linuxone](https://www.precursorintelligence.com/product/redhat/openshift_container_platform_for_linuxone): 15 vulnerabilities, 12 versions
- [Automatic Bug Reporting Tool](https://www.precursorintelligence.com/product/redhat/automatic_bug_reporting_tool): 14 vulnerabilities, 67 versions
- [Codeready Linux Builder for Arm64 Eus](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_for_arm64_eus): 13 vulnerabilities, 8 versions
- [Codeready Linux Builder for Ibm Z Systems Eus](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_for_ibm_z_systems_eus): 13 vulnerabilities, 6 versions
- [Virtualization Manager](https://www.precursorintelligence.com/product/redhat/virtualization_manager): 13 vulnerabilities, 4 versions
- [Satellite Capsule](https://www.precursorintelligence.com/product/redhat/satellite_capsule): 13 vulnerabilities, 5 versions
- [Cloudforms 3.0 Management Engine](https://www.precursorintelligence.com/product/redhat/cloudforms_3.0_management_engine): 13 vulnerabilities, 9 versions
- [Enterprise Linux Server from Rhui](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_from_rhui): 12 vulnerabilities, 3 versions
- [Codeready Linux Builder for Power Little Endian Eus](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_for_power_little_endian_eus): 12 vulnerabilities, 9 versions
- [Spacewalk](https://www.precursorintelligence.com/product/redhat/spacewalk): 12 vulnerabilities, 3 versions
- [Codeready Linux Builder for Power Little Endian](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_for_power_little_endian): 11 vulnerabilities, 4 versions
- [Codeready Linux Builder for Ibm Z Systems](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_for_ibm_z_systems): 11 vulnerabilities, 4 versions
- [Subscription Asset Manager](https://www.precursorintelligence.com/product/redhat/subscription_asset_manager): 11 vulnerabilities, 6 versions
- [3scale API Management](https://www.precursorintelligence.com/product/redhat/3scale_api_management): 11 vulnerabilities, 11 versions
- [Openshift Origin](https://www.precursorintelligence.com/product/redhat/openshift_origin): 10 vulnerabilities, 10 versions
- [Ovirt-Engine](https://www.precursorintelligence.com/product/redhat/ovirt-engine): 10 vulnerabilities, 286 versions
- [Icedtea-Web](https://www.precursorintelligence.com/product/redhat/icedtea-web): 10 vulnerabilities, 20 versions
- [Network Satellite](https://www.precursorintelligence.com/product/redhat/network_satellite): 10 vulnerabilities, 12 versions
- [Shim](https://www.precursorintelligence.com/product/redhat/shim): 10 vulnerabilities, 28 versions
- [Icedtea](https://www.precursorintelligence.com/product/redhat/icedtea): 9 vulnerabilities, 116 versions
- [Enterprise Linux Hpc Node Supplementary](https://www.precursorintelligence.com/product/redhat/enterprise_linux_hpc_node_supplementary): 9 vulnerabilities, 2 versions
- [Advanced Cluster Management for Kubernetes](https://www.precursorintelligence.com/product/redhat/advanced_cluster_management_for_kubernetes): 9 vulnerabilities, 20 versions
- [Descision Manager](https://www.precursorintelligence.com/product/redhat/descision_manager): 9 vulnerabilities, 1 version
- [Mrg Realtime](https://www.precursorintelligence.com/product/redhat/mrg_realtime): 9 vulnerabilities, 2 versions
- [Jboss Wildfly Application Server](https://www.precursorintelligence.com/product/redhat/jboss_wildfly_application_server): 9 vulnerabilities, 12 versions
- [OpenSSL](https://www.precursorintelligence.com/product/redhat/openssl): 9 vulnerabilities, 3 versions
- [Certification](https://www.precursorintelligence.com/product/redhat/certification): 9 vulnerabilities, 2 versions
- [Spacewalk-Java](https://www.precursorintelligence.com/product/redhat/spacewalk-java): 9 vulnerabilities, 6 versions
- [Openshift Container Platform Ibm Z Systems](https://www.precursorintelligence.com/product/redhat/openshift_container_platform_ibm_z_systems): 8 vulnerabilities, 4 versions
- [Jboss Middleware Text-Only Advisories](https://www.precursorintelligence.com/product/redhat/jboss_middleware_text-only_advisories): 8 vulnerabilities, 1 version
- [Codeready Linux Builder Eus for Power Little Endian Eus](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_eus_for_power_little_endian_eus): 8 vulnerabilities, 3 versions
- [Integration Camel Quarkus](https://www.precursorintelligence.com/product/redhat/integration_camel_quarkus): 8 vulnerabilities, 1 version
- [Build of Keycloak](https://www.precursorintelligence.com/product/redhat/build_of_keycloak): 8 vulnerabilities, 14 versions
- [3scale](https://www.precursorintelligence.com/product/redhat/3scale): 8 vulnerabilities, 10 versions
- [Codeready Linux Builder for Arm64](https://www.precursorintelligence.com/product/redhat/codeready_linux_builder_for_arm64): 8 vulnerabilities, 3 versions
- [389 Directory Server](https://www.precursorintelligence.com/product/redhat/389_directory_server): 8 vulnerabilities, 321 versions
- [Openshift Container Platform for Ibm Z](https://www.precursorintelligence.com/product/redhat/openshift_container_platform_for_ibm_z): 8 vulnerabilities, 11 versions
- [Jboss Brms](https://www.precursorintelligence.com/product/redhat/jboss_brms): 8 vulnerabilities, 7 versions
- [Enterprise Linux Compute Node Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_compute_node_eus): 7 vulnerabilities, 7 versions
- [Conga](https://www.precursorintelligence.com/product/redhat/conga): 7 vulnerabilities, 2 versions
- [Gluster Storage Server for on-Premise](https://www.precursorintelligence.com/product/redhat/gluster_storage_server_for_on-premise): 7 vulnerabilities, 2 versions
- [Enterprise Linux for Ibm Z Systems Eus S390x](https://www.precursorintelligence.com/product/redhat/enterprise_linux_for_ibm_z_systems_eus_s390x): 7 vulnerabilities, 4 versions
- [Desktop](https://www.precursorintelligence.com/product/redhat/desktop): 7 vulnerabilities, 4 versions
- [Pagure](https://www.precursorintelligence.com/product/redhat/pagure): 7 vulnerabilities, 126 versions
- [Dogtag Certificate System](https://www.precursorintelligence.com/product/redhat/dogtag_certificate_system): 7 vulnerabilities, 2 versions
- [Icedtea6](https://www.precursorintelligence.com/product/redhat/icedtea6): 6 vulnerabilities, 19 versions
- [Amq](https://www.precursorintelligence.com/product/redhat/amq): 6 vulnerabilities, 3 versions
- [Enterprise Linux Server Supplementary Aus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_supplementary_aus): 6 vulnerabilities, 1 version
- [Tcpdump](https://www.precursorintelligence.com/product/redhat/tcpdump): 6 vulnerabilities, 28 versions
- [Jboss Middleware](https://www.precursorintelligence.com/product/redhat/jboss_middleware): 6 vulnerabilities, 1 version
- [Richfaces](https://www.precursorintelligence.com/product/redhat/richfaces): 6 vulnerabilities, 45 versions
- [Ansible Developer](https://www.precursorintelligence.com/product/redhat/ansible_developer): 6 vulnerabilities, 3 versions
- [Openshift Container Platform for Arm64](https://www.precursorintelligence.com/product/redhat/openshift_container_platform_for_arm64): 6 vulnerabilities, 9 versions
- [Ansible Inside](https://www.precursorintelligence.com/product/redhat/ansible_inside): 6 vulnerabilities, 3 versions
- [Jboss Portal](https://www.precursorintelligence.com/product/redhat/jboss_portal): 6 vulnerabilities, 11 versions
- [Enterprise Linux Resilient Storage](https://www.precursorintelligence.com/product/redhat/enterprise_linux_resilient_storage): 6 vulnerabilities, 2 versions
- [Jboss Application Server](https://www.precursorintelligence.com/product/redhat/jboss_application_server): 5 vulnerabilities, 6 versions

## Questions

### How many vulnerabilities does Red Hat have?

Our catalogue lists 5,740 published vulnerabilities across 538 products and 9,928 versions from Red Hat. The most recent Red Hat flaw added to the known-exploited list is CVE-2015-3246, on 26 August 2026.

### Which Red Hat vulnerabilities are being exploited?

93 Red Hat vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2015-3246, CVE-2015-5287 and CVE-2022-0492. The full list is on this page.

### Which Red Hat product has the most vulnerabilities?

Enterprise Linux, with 2,039 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Red Hat vulnerabilities?

Create a Precursor Intelligence account and track the Red Hat products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Red Hat?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

