Known Vulnerabilities for Shim by Red Hat Bootloader Team
Listed below are 10 of the newest known vulnerabilities associated with "Shim" by "Red Hat Bootloader Team".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111434 json | Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-108334 json | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate tha... | Not Provided | 2026-10-15 | 2026-10-23 |
| CVE-2026-87044 json | The Mbed TLS crypto shim driver in drivers/crypto/crypto_mbedtls_shim.c drives PSA multipart cipher and AEAD operations. In m... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-74338 json | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPF_LSM_CGROUP programs at load ti... | Not Provided | 2026-08-15 | 2026-10-30 |
| CVE-2026-71458 json | URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→40... | Not Provided | 2026-09-23 | 2026-11-05 |
| CVE-2026-64459 json | In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Co... | Not Provided | 2026-07-25 | 2026-08-17 |
| CVE-2026-64378 json | In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() an... | Not Provided | 2026-07-25 | 2026-10-19 |
| CVE-2026-62337 json | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encod... | Not Provided | 2026-10-30 | 2026-11-02 |
| CVE-2026-54144 json | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the ru... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-53970 json | ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that ... | Not Provided | 2026-08-14 | 2026-08-18 |