Red Hat Enterprise Linux Els vulnerabilities

4 CVEs affecting Red Hat Enterprise Linux Els, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34486, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability, published 2026-04-09. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2026-08-04. EPSS: 6.6% chance of exploitation in the next 30 days. Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20,…
CVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerability, published 2025-07-30. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-03-20. EPSS: 1.6% chance of exploitation in the next 30 days. The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously…
CVE-2025-62231, published 2025-10-30. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends…
CVE-2025-62230, published 2025-10-30. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related…