Skip to contentRed Hat Enterprise Linux vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2765Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT componentCVE-2026-2764Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2763Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library componentCVE-2026-2762Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender componentCVE-2026-2761Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentCVE-2026-2760Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: ImageLib componentCVE-2026-2759Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: GC componentCVE-2026-2758Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the WebRTC: Audio/Video componentCVE-2026-2757Fix available9.8 Critical
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via duplicate content-length headersCVE-2026-2708Fix available3.7 Low
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 9 +2 moreValkey has Pre-Authentication DOS from malformed RESP requestCVE-2026-27623Fix available7.5 High
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 more +4 moreMalformed Valkey Cluster bus message can lead to Remote DoSCVE-2026-21863Fix available7.5 High
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moreValkey Affected by RESP Protocol Injection via Lua error_replyCVE-2025-67733Public exploitFix available8.5 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflowCVE-2025-14905Fix available7.2 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-2048Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-2047Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-2045Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP PGM File Parsing Uninitialized Memory Remote Code Execution VulnerabilityCVE-2026-2044Fix available7.8 High
- hdfgroup hdf5, red hat enterprise linux ai (rhel ai) 3 +1 moreHDF5 Affected by H5T__conv_struct_opt Heap Buffer OverflowCVE-2026-26200Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsingCVE-2026-2243Fix available5.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +11 more +13 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-2050Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-2049Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlibc: vdso getrandom acceleration may return predictable randomnessCVE-2025-05774.8 Medium
- gnome evolution data server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handlingCVE-2026-2604Fix available5.6 Medium
- rack, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +4 more +6 moreRack has a Directory Traversal via Rack:DirectoryCVE-2026-22860Fix available7.5 High
- ocaml, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIn OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization ...CVE-2026-28364Public exploitFix available7.9 High
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreLibsoup: libsoup: buffer overread due to integer underflow when handling zero-length resourcesCVE-2026-2369Fix available6.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewifi: iwlwifi: mld: cancel mlo_scan_start_wkCVE-2026-23185Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()CVE-2026-23111Public exploitFix available7.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosureCVE-2026-2443Fix available5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: memory corruption due to integer overflow in ico file handlingCVE-2026-2272Fix available4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via crafted psp image fileCVE-2026-2271Fix available3.3 Low
- gimp, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflowCVE-2026-2239Fix available2.8 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service due to malformed sftp messageCVE-2026-0968Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processingCVE-2026-0967Fix available2.2 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handlingCVE-2026-0965Fix available3.3 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp serversCVE-2026-0964Fix available5.0 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 9 +1 more +3 morePostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryCVE-2026-2007Fix available8.2 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary codeCVE-2026-2006Fix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary codeCVE-2026-2005Public exploitFix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20644Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20652Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...CVE-2026-20608Fix available5.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS...CVE-2026-20635Fix available4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS...CVE-2026-20636Fix available6.5 Medium
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entriesCVE-2026-26158Fix available7.0 High
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitizationCVE-2026-26157Public exploitFix available7.0 High
- Show moreLoading…