Skip to contentRed Hat Enterprise Linux 6 vulnerabilities
- debian linux, openbsd openssh, canonical ubuntu linux +39 more +41 moreVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...CVE-2026-3497Fix available2.7 Low
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: authentication bypass via digest authentication replay attackCVE-2026-3099Fix available5.8 Medium
- giflib, red hat ai inference server 3.2, ai inference server 3.3 +18 more +20 moreGiflib contains a double-free vulnerability that is the result of a shallow copy in...CVE-2026-23868Fix available5.1 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick has an integer overflow in DIB coder can result in out of bounds read or writeCVE-2026-28693Fix available8.1 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick has an uninitialized pointer dereference in JBIG decoderCVE-2026-28691Fix available7.5 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linkerCVE-2026-3442Fix available6.1 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: gnu binutils: information disclosure via specially crafted xcoff object fileCVE-2026-3441Fix available6.1 Medium
- python-markdown markdown, red hat external secrets operator for red hat openshift, multicluster engine for kubernetes +27 more +29 morePython-Markdown has an Uncaught ExceptionCVE-2025-69534Fix available7.5 High
- linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 moreNfs-utils: rpc.mountd in the nfs-utils privilege escalationCVE-2025-12801Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocationCVE-2026-3196Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)CVE-2026-3195Fix available7.4 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 moreOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeCVE-2026-27622Fix available8.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGvfs: gvfs ftp backend: information disclosure via untrusted pasv responsesCVE-2026-28295Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file pathsCVE-2026-28296Fix available4.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has Out-of-bounds WriteCVE-2026-26965Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has Out-of-bounds WriteCVE-2026-26955Fix available8.8 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick - Command Injection via SVG DecoderCVE-2026-56379Fix available9.2 Critical
- freedesktop udisks, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreUdisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus apiCVE-2026-26104Fix available5.5 Medium
- freedesktop udisks, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreUdisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus apiCVE-2026-26103Fix available7.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 148 and Thunderbird 148CVE-2026-28079.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27999.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27988.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27979.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-2796Public exploit9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27959.8 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreInformation disclosure due to uninitialized memory in Firefox and Firefox Focus for AndroidCVE-2026-27947.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreMemory allocation with excessive without limits in the internal SVG decoderCVE-2026-25985Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick's policy bypass through path traversal allows reading restricted content despite secured policyCVE-2026-25965Fix available8.6 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensionsCVE-2026-25794Fix available8.2 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2793Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2792Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the DOM: Core & HTML componentCVE-2026-2778Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 morePrivilege escalation in the Messaging System componentCVE-2026-2777Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry component in External SoftwareCVE-2026-2776Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: HTML Parser componentCVE-2026-2775Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the Audio/Video componentCVE-2026-2774Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-2773Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Audio/Video: Playback componentCVE-2026-2772Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUndefined behavior in the DOM: Core & HTML componentCVE-2026-2771Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-2770Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Storage: IndexedDB componentCVE-2026-2769Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Storage: IndexedDB componentCVE-2026-2768Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-2767Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-2766Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2765Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT componentCVE-2026-2764Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2763Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library componentCVE-2026-2762Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender componentCVE-2026-2761Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentCVE-2026-2760Fix available10.0 Critical
- Show moreLoading…