Skip to contentRed Hat Enterprise Linux 6 vulnerabilities
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +23 more +25 moreDracut: dracut: root code execution via dhcp options command injectionCVE-2026-6893Fix available7.5 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationCVE-2026-118846.5 Medium
- redhat 389 directory server, red hat directory server 11, directory server 12 +6 more +8 more389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsingCVE-2026-117934.9 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)CVE-2026-117923.3 Low
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of serviceCVE-2026-117904.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crashCVE-2026-117894.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parserCVE-2026-117885.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingCVE-2026-117875.0 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()CVE-2026-117861.9 Low
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handlerCVE-2026-117854.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morenet: gro: don't merge zcopy skbsCVE-2026-46323Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entryCVE-2026-46316Public exploitFix available9.3 Critical
- arm c1-premium, c1-ultra, cortex-a710 +45 more +47 moreArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...CVE-2025-10263Public exploitFix available9.1 Critical
- hmbrand dbi, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreDBI versions before 1.648 for Perl saved errors in a limited-sized bufferCVE-2026-9698Fix available9.8 Critical
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)CVE-2026-45696Fix available8.3 High
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 moreHeap Use-After-Free in the PKCS7_verify() FunctionCVE-2026-45447Public exploitFix available8.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditionsCVE-2026-116116.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madviseCVE-2026-46309Fix available7.0 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_xml2enc heap overflowCVE-2026-42536Public exploitFix available7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`CVE-2026-44185Fix available7.3 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_proxy_html buffer overflowCVE-2026-34355Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensionsCVE-2026-49218Fix available7.5 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()CVE-2026-50263Fix available5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesCVE-2026-50262Fix available5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformatCVE-2026-50264Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()CVE-2026-50261Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()CVE-2026-50260Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexingCVE-2026-50259Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levelsCVE-2026-50258Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()CVE-2026-50257Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatchCVE-2026-50256Fix available7.8 High
- red hat multicluster engine for kubernetes, enterprise linux 10, enterprise linux 6 +16 more +18 moreNetworkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendCVE-2026-10805Fix available6.7 Medium
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morenetfilter: nft_inner: Fix IPv6 inner_thoff desyncCVE-2026-46244Fix available9.1 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-10702Public exploit4.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreIncorrect boundary conditions in the Graphics: Text componentCVE-2026-107017.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +6 more +8 moreRrdtool: rrdtool: stack buffer overflow allows local code execution or denial of serviceCVE-2026-43958Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moresmb: client: reject userspace cifs.spnego descriptionsCVE-2026-46243Public exploitFix available7.1 High
- red hat ai inference server 3.3, enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePoppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationCVE-2026-10118Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreHeap-buffer-overflow write in planar bitmap decoderCVE-2026-45700Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPSCVE-2026-44420Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusionCVE-2026-44422Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: libsoup: http request smuggling via unsigned to signed conversion errorCVE-2026-6324Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chainCVE-2026-10028Fix available4.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALLCVE-2026-46227Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pathCVE-2026-46189Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()CVE-2026-46181Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreRDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()CVE-2026-46176Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 morewifi: mac80211: use safe list iteration in radar detect workCVE-2026-46166Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morewifi: mac80211: drop stray 'static' from fast-RX rx_resultCVE-2026-46152Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 moreRDMA/mana: Validate rx_hash_key_lenCVE-2026-46145Fix available7.8 High
- Show moreLoading…