Red OS
9,025 CVEs tracked. 72 of them are in CISA KEV.
This hub aggregates every CVE we track for Red OS, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red OS CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 303 |
| 2024-11 | 247 |
| 2024-12 | 255 |
| 2025-01 | 193 |
| 2025-02 | 156 |
| 2025-03 | 207 |
| 2025-04 | 241 |
| 2025-05 | 287 |
| 2025-06 | 154 |
| 2025-07 | 394 |
| 2025-08 | 234 |
| 2025-09 | 176 |
| 2025-10 | 111 |
| 2025-11 | 103 |
| 2025-12 | 96 |
| 2026-01 | 122 |
| 2026-02 | 110 |
| 2026-03 | 219 |
| 2026-04 | 135 |
| 2026-05 | 28 |
| 2026-06 | 6 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 9,025 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical628
- High4,009
- Medium4,032
- Low356
Latest CVEs
The 15 most recently published vulnerabilities affecting Red OS.
- BDU:2026-08412Уязвимость параметра cli_history инструмента командной строки для взаимодействия с сервисами Amazon Web Services AWS CLI, позволяющая нарушителю вызвать отказ в обслуживании5.9
- CVE-2024-21944Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root o...5.3
- CVE-2026-46520ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions7.5
- CVE-2026-45664ImageMagick: Policy Bypass in MNG coder could5.3
- BDU:2026-07974Уязвимость функционала форматирования модуля парсера SQL для Python Sqlparse, позволяющая нарушителю вызвать отказ в обслуживании5.3
- CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions7.1
- CVE-2026-44881Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update9.9
- CVE-2026-44848Portainer: Missing authorization on Docker plugin endpoints allows host RCE8.8
- CVE-2026-44849Portainer: Endpoint security bypass via Swarm service create/update8.8
- CVE-2026-44850Portainer: Bind-mount restriction bypass via HostConfig.Mounts8.5
- CVE-2026-44882Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization8.1
- BDU:2026-07378Уязвимость функции skb_gro_receive() ядра операционных систем Linux, позволяющая нарушителю, позволяющая нарушителю получить root-привилегии7.8
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing7.8
- CVE-2026-9256NGINX ngx_http_rewrite_module vulnerability8.1
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logic7.1
Product grouping is registry-driven, with AI assist and human review. How it works