Red Hat
CVEs currently on EVULNABLE's Priority Feed for Red Hat, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 2 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 2 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 9 Red Hat CVEs in EVULNABLE's ranked feed.
#1 91 Immediate CVE-2017-12149 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Red Hat — Red Hat JBoss Application Server Remote Code Execution Vulnerability KEV + ransomware, EPSS 90.7%
EVRS 91/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 90 Immediate CVE-2021-4034 KEV since 2022 · listed over a yearRansomwareCISA KEV Red Hat — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability KEV + ransomware, EPSS 94.9%
EVRS 90/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 81 Urgent CVE-2010-1871 KEV since 2021 · listed over a yearCISA KEV Red Hat — Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability KEV, EPSS 83.4%
EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.834.
#4 81 Urgent CVE-2010-0738 KEV since 2022 · listed over a yearRansomwareCISA KEV Red Hat — Red Hat JBoss Authentication Bypass Vulnerability KEV + ransomware, EPSS 74.7%
EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#5 80 Urgent CVE-2018-14667 KEV since 2023 · listed over a yearCISA KEV Red Hat — Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability KEV, EPSS 74.2%
EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.742.
#6 80 Urgent CVE-2010-1428 KEV since 2022 · listed over a yearRansomwareCISA KEV Red Hat — Red Hat JBoss Information Disclosure Vulnerability KEV + ransomware, EPSS 61.5%
EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#7 75 Urgent CVE-2021-3560 KEV since 2023 · listed over a yearCISA KEV Red Hat — Red Hat Polkit Incorrect Authorization Vulnerability KEV, EPSS 23.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.237.
#8 75 Urgent CVE-2015-3246 CISA federal deadline · Overdue by 38 daysCISA KEV Red Hat — Red Hat Libuser Race Condition Vulnerability KEV, EPSS 8.5%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.085.
#9 75 Urgent CVE-2015-5287 CISA federal deadline · Overdue by 38 daysCISA KEV Red Hat — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability KEV, EPSS 5.0%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.050.