Skip to contentRed Hat Enterprise Linux 6 vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morewifi: mac80211: remove station if connection prep failsCVE-2026-46125Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()CVE-2026-46117Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteCVE-2026-46116Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell commandCVE-2026-44604Fix available7.0 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moresmb: client: validate dacloffset before building DACL pointersCVE-2026-46195Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morenet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnelsCVE-2026-46099Fix available8.1 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreALSA: aloop: Fix peer runtime UAF during format-change stopCVE-2026-46090Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreselinux: fix overlayfs mmap() and mprotect() access checksCVE-2026-46054Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creationCVE-2026-46033Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moregfs2: Fix use-after-free in iomap inline data write pathCVE-2026-45984Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresmb: client: fix potential UAF and double free in smb2_open_file()CVE-2026-45972Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreRDMA/iwcm: Fix workqueue list corruption by removing work_listCVE-2026-45898Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreRDMA/rxe: Fix double free in rxe_srq_from_initCVE-2026-45852Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morerxrpc: Fix potential UAF after skb_unshare() failureCVE-2026-45998Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypassCVE-2026-44421Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassCVE-2026-40033Fix available8.6 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreSamba: samba: remote code execution in printing subsystem via unescaped job descriptionCVE-2026-4480Public exploitFix availableEPSS 28.7%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: remote code execution in samrCVE-2026-4408Public exploitFix availableEPSS 46.9%9.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: denial of service against ad dc wins serverCVE-2026-3238Fix available7.5 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 moreSamba: group policy certificate enrollment uses http:// without validationCVE-2026-3012Fix available8.0 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreSamba: vfs_worm does not block directory modificationCVE-2026-2340Fix available6.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: missing access check on reparse point operationsCVE-2026-1933Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVE-2026-43501Public exploitFix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet/rds: reset op_nents when zerocopy page pin failsCVE-2026-43494Public exploitFix available7.8 High
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionCVE-2026-8632Fix available8.5 High
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionCVE-2026-8631Fix available9.3 Critical
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)CVE-2026-9064Fix available7.5 High
- memcached, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIn memcached before 1.6.42, username data for SASL password database authentication has a timing...CVE-2026-47783Fix available8.1 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreSIG(0) validation during query flood may lead to undefined behaviorCVE-2026-5947Fix available7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +9 more +11 moreInvalid handling of CLASS != INCVE-2026-5946Fix available7.5 High
- mate-desktop atril, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 morePDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopenCVE-2026-46529Public exploitFix available8.4 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreUnbounded name compression in certain cases causes degradation of serviceCVE-2026-44390Fix available6.9 Medium
- rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 moreRsync < 3.4.3 Integer Overflow Information DisclosureCVE-2026-43618Fix available6.1 Medium
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCrash during DNSSEC validation of malicious contentCVE-2026-42959Fix available8.7 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreHeap overflow with multiple NSID, COOKIE, PADDING EDNS optionsCVE-2026-42944Fix available8.7 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreJostle logic bypass degrades resolution performanceCVE-2026-42534Fix available6.9 Medium
- nlnet labs unbound, red hat data grid 8, enterprise linux 10 +10 more +12 moreLong list of incoming EDNS options degrades performanceCVE-2026-41292Fix available6.6 Medium
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreHeap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationCVE-2026-3593Fix available7.4 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 morePossible arbitrary code execution during DNSSEC validationCVE-2026-33278Fix available9.1 Critical
- isc bind, bind 9, red hat enterprise linux 10 +9 more +11 moreBIND 9 server memory exhaustion during GSS-API TKEY negotiationCVE-2026-3039Fix available7.5 High
- rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 moreRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File WriteCVE-2026-29518Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 151CVE-2026-89738.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSame-origin policy bypass in the DOM: Networking componentCVE-2026-89489.1 Critical
- mozilla firefox, firefox focus, red hat enterprise linux 10 +4 more +6 moreSandbox escape in Firefox and Firefox Focus for AndroidCVE-2026-89457.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8975Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-8947Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-8946Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Use-After-Free in MSL decoder.CVE-2026-46523Fix available6.2 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustionCVE-2026-46522Public exploitFix available7.5 High
- Show moreLoading…