Skip to contentRed Hat Enterprise Linux vulnerabilities
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via signed integer overflow in fli file processingCVE-2026-59088Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocationCVE-2026-59087Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +2 more +4 moreUdisks2: udisks2: local privilege escalation via as-user option spoofingCVE-2026-7867Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreGstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadersCVE-2026-18649Public exploitFix available7.5 High
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: size_t underflow in singleoptionhelpCVE-2026-18839Fix available2.2 Low
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnCVE-2026-71227Fix available5.1 Medium
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 moreLibkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio pathCVE-2026-71226Fix available7.3 High
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundariesCVE-2026-71225Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibvirt: information disclosure via world-readable storage volume images during clone/convertCVE-2026-63623Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreDhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapiCVE-2026-18103Fix available4.9 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1CVE-2026-68743Fix available5.5 Medium
- microsoft stunnel, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreStunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log messageCVE-2026-70368Fix available6.5 Medium
- microsoft stunnel, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreStunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only servicesCVE-2026-70367Fix available5.4 Medium
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: off-by-one in poptstuffargsCVE-2026-18739Fix available2.5 Low
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: nss responder uninitialized heap disclosure in initgroups replyCVE-2026-68744Fix available3.3 Low
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +6 more +8 moreGimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)CVE-2026-42169Fix available7.3 High
- gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 moreTar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escapeCVE-2026-18477Fix available4.4 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked accountCVE-2026-186515.4 Medium
- gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 moreTar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwriteCVE-2026-18508Fix available4.4 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddrCVE-2026-68742Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: remote code execution via crafted paa fileCVE-2026-6695Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp file-png plugin: denial of service via oversized apng trns chunkCVE-2026-6694Fix available5.5 Medium
- gnome gnome-remote-desktop, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 more +4 moreGnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of serviceCVE-2026-18358Fix available7.5 High
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status checkCVE-2026-117707.5 High
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsingCVE-2026-15722Fix available7.5 High
- redhatinsights yggdrasil-worker-package-manager, red hat enterprise linux 10 +1 moreYggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injectionCVE-2026-181577.8 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreAnsible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissionsCVE-2026-685635.5 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreAnsible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tamperingCVE-2026-685626.2 Medium
- red hat certificate system 10, certificate system 10.4 eus for rhel-8, certificate system 11 +6 more +8 moreDogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirectsCVE-2026-18369Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePcp: pcp: arbitrary file creation via path traversal in pmproxy logger servletCVE-2026-16531Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePcp: pcp: remote denial of service and information leakageCVE-2026-16530Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePcp: pcp: denial of service due to signed integer overflowCVE-2026-16529Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rulesCVE-2026-16527Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePcp: pcp: privilege escalation to root via linux_sockets pmda vulnerabilityCVE-2026-16526Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePcp: pcp linux_sockets pmda: arbitrary command execution via command injectionCVE-2026-16524Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreBinutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processingCVE-2026-18220Public exploit7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreCriu: criu: container escape via rseq critical section hijack during checkpoint/restoreCVE-2026-18107Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exportCVE-2026-16313Fix available7.6 High
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 moreDogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slashCVE-2026-180476.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containersCVE-2026-17072Fix available3.3 Low
- samba, red hat ceph storage 9.2, enterprise linux 10 +7 more +9 moreSamba: ctdb fails to do integrity checking of received packetsCVE-2026-58224Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributesCVE-2026-58222Public exploitFix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: dns signing dos via tkey name cache exhaustionCVE-2026-58218Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crashCVE-2026-58216Fix available5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesCVE-2026-66759Fix available7.1 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi imagesCVE-2026-66757Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits imagesCVE-2026-66758Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreBinutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of serviceCVE-2026-15003Fix available5.6 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()CVE-2026-66338Fix available5.4 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()CVE-2026-663376.5 Medium
- Show moreLoading…