Known vulnerabilities in Red Hat build of Keycloak

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 70
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 70 known vulnerabilities: 1 critical, 9 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146636 - Uncontrolled Recursion
CVE-2026-13757		 CWE-674 Low
No
No
 26.4.15 01.09.2026 SB2026090153
SB2026090154
SB2026090155
and 4 more
#VU146635 - Weak password recovery mechanism
CVE-2026-18963		 CWE-640 High
Available
No
 26.4.15 01.09.2026 SB2026090152
SB2026090158
SB2026090159
#VU122300 - Use of Uninitialized Resource
CVE-2025-15281		 CWE-908 Medium
No
No
 26.2.14 04.02.2026 SB2026020432
SB2026020433
SB2026020439
and 17 more
#VU122299 - Integer overflow
CVE-2026-0861		 CWE-190 High
No
No
 26.2.14 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 19 more
#VU122298 - Use of Uninitialized Resource
CVE-2026-0915		 CWE-908 Low
No
No
 26.2.14 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 17 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 26.2.13 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 26.2.13 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 26.2.13 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU118800 - Deserialization of Untrusted Data
CVE-2025-13467		 CWE-502 Low
No
No
 26.2.11, 26.4.6 27.11.2025 SB2025112714
SB2025112715
SB2025112716
and 1 more
#VU118778 - Out-of-bounds read
CVE-2025-64720		 CWE-125 Medium
No
No
 26.2.13 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 40 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018		 CWE-122 Critical
Available
No
 26.2.13 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 46 more
#VU118581 - Configuration
CVE-2025-11538		 CWE-16 Medium
No
No
 26.4.4 18.11.2025 SB2025111839
SB2025111840
SB2025111841
#VU118578 - Improper Authentication
CVE-2025-12150		 CWE-287 Low
No
No
 26.4.4 18.11.2025 SB2025111839
SB2025111840
SB2025111841
#VU118576 - Protection Mechanism Failure
CVE-2025-10939		 CWE-693 Low
No
No
 26.4.4 18.11.2025 SB2025111839
SB2025111840
SB2025111841
#VU118575 - Session Fixation
CVE-2025-12390		 CWE-384 Low
No
No
 26.4.4 18.11.2025 SB2025111839
SB2025111840
SB2025111841
#VU118565 - Insufficient Session Expiration
CVE-2025-12110		 CWE-613 Low
No
No
 26.4.4 17.11.2025 SB2025111773
SB2025111840
SB2025111841
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 26.0.17, 26.2.11 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 26.0.17, 26.2.11 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU117486 - Improper input validation
CVE-2025-61748		 CWE-20 Low
No
No
 26.0.17, 26.2.11 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 19 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 26.2.11 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more


Showing elements 1 - 20 out of 70