Skip to contentRed Hat Enterprise Linux vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-8947Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-8946Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Use-After-Free in MSL decoder.CVE-2026-46523Fix available6.2 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustionCVE-2026-46522Public exploitFix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensionsCVE-2026-46520Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in MNG coder couldCVE-2026-45664Fix available5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in PSD decoderCVE-2026-45031Fix available5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top defineCVE-2026-45359Fix available5.7 Medium
- docker engine, moby docker engine, docker docker/daemon +20 more +22 moreDocker: `PUT /containers/{id}/archive` executes container binary on the hostCVE-2026-41567Public exploitFix available7.2 High
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: CPU Exhaustion in Avro DecoderCVE-2026-46385Fix available8.7 High
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: Integer Overflow in Avro DecoderCVE-2026-46384Fix available8.7 High
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3 +1 moreChromaDB Python project has a pre-authentication code injection vulnerabilityCVE-2026-45829Public exploitEPSS 15.1%10.0 Critical
- vim, red hat enterprise linux 10, enterprise linux 10.2 extended update support +9 more +11 moreVim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionCVE-2026-43961Fix available7.8 High
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 moreImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...CVE-2025-54518Fix available7.3 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreA buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools...CVE-2026-34253Fix available8.2 High
- cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 morelibyang: lyb_read_string() integer overflow → heap buffer overflowCVE-2026-44673Fix available7.5 High
- svelte devalue, red hat build of podman desktop, enterprise linux 10 +1 more +3 moreSvelte devalue: DoS via sparse array deserializationCVE-2026-42570Fix available7.5 High
- io.opentelemetry opentelemetry-api, opentelemetry-extension-trace-propagators, open-telemetry opentelemetry-java +17 more +19 moreopentelemetry-java: Unbounded Memory Allocation in W3C Baggage PropagationCVE-2026-45292Fix available5.3 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePostgreSQL discloses MD5-hashed passwords via covert timing channelCVE-2026-6478Fix available6.5 Medium
- postgresql, red hat discovery 2, enterprise linux 10 +17 more +19 morePostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryCVE-2026-6477Fix available8.8 High
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparoundCVE-2026-6473Fix available8.8 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- f5 nginx open source, nginx plus, dos +26 more +28 moreNGINX ngx_http_rewrite_module vulnerabilityCVE-2026-42945Public exploitFix availableEPSS 68.0%9.2 Critical
- microsoft .net, .net 10.0, .net 8.0 +11 more +13 more.NET Elevation of Privilege VulnerabilityCVE-2026-35433Fix available7.3 High
- microsoft .net, .net 10.0, .net 8.0 +17 more +19 more.NET Elevation of Privilege VulnerabilityCVE-2026-32177Fix available7.3 High
- protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +20 more +22 moreprotobufjs: Code injection through bytes field defaults in generated toObject codeCVE-2026-44293Fix available7.7 High
- protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +13 more +15 moreprotobufjs: Denial of service through unbounded protobuf recursionCVE-2026-44289Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Profile Backup componentCVE-2026-8401Fix available9.8 Critical
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 moreAn attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE...CVE-2026-42006Fix available4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +3 more +5 moreWhen safe filter is used with variable expansion, all following pipelines on the same string are...CVE-2026-27851Fix available7.4 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the JavaScript Engine componentCVE-2026-8391Fix available5.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-83907.3 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-8389Public exploit8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- microsoft .net, .net 10.0, .net 8.0 +8 more +10 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-42899Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28901Fix available4.3 Medium
- apple macos, safari, red hat enterprise linux 6 +13 more +15 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2026-28946Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28947Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-43658Fix available7.5 High
- apple ipados, macos, safari +18 more +20 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28905Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28883Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28904Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28953Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28903Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28942Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28902Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28955Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28847Fix available8.8 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesCVE-2026-45109Fix available7.5 High
- Show moreLoading…