Skip to contentRed Hat Enterprise Linux 6 vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: fix UAF with retry loopCVE-2026-52950Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morenet: skbuff: fix missing zerocopy reference in pskb_carve helpersCVE-2026-52943Public exploitFix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresctp: purge outqueue on stale COOKIE-ECHO handlingCVE-2026-52924Public exploitFix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipc: limit next_id allocation to the valid ID rangeCVE-2026-52923Public exploitFix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parserCVE-2026-12892Fix available4.4 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreDnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validationCVE-2026-12969Fix available5.3 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +8 more +10 moreOpenssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel terminationCVE-2026-55654Fix available3.7 Low
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +21 more +23 moreOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionsCVE-2026-55655Fix available5.0 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +23 more +25 moreOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of serviceCVE-2026-55653Fix available4.3 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserverCVE-2026-12549Fix available4.8 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey repliesCVE-2026-12725Fix available5.9 Medium
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morebpf: Free reuseport cBPF prog after RCU grace period.CVE-2026-52910Public exploitFix available7.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()CVE-2026-117915.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreDracut: dracut: root code execution via dhcp options command injection in networkmanager initrd moduleCVE-2026-16445Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreCifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcallCVE-2026-12505Fix available7.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()CVE-2026-125285.4 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePacemaker: pacemaker: denial of service via integer overflow in remote message decompressionCVE-2026-10649Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.12CVE-2026-12329Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12328Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 152 and Thunderbird 152CVE-2026-123268.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreJIT miscompilation in the DOM: Core & HTML componentCVE-2026-12299Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12298Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape due to incorrect boundary conditions in the Networking componentCVE-2026-12297Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Security: Process Sandboxing componentCVE-2026-12296Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Navigation componentCVE-2026-12295Public exploitFix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Workers componentCVE-2026-12294Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the Graphics: WebGPU componentCVE-2026-122939.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-12292Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the Networking: HTTP componentCVE-2026-12291Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12290Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-12289Fix available8.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruptionCVE-2026-46331Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +6 more +8 moreGstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusionCVE-2026-52718Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingCVE-2026-52722Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbCVE-2026-52720Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsingCVE-2026-52721Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +5 more +7 moreGstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoderCVE-2026-52719Fix available7.1 High
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilationCVE-2026-8357Fix available5.4 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreHeap use-after-free in ODF number-format blank-width parsingCVE-2026-6040Fix available5.4 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreAbrt: unsanitized systemd journal content written to dump directory files enables content injectionCVE-2026-542315.5 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +10 more +12 moreAbrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwritesCVE-2026-54230Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: chownproblemdir succeeds during active post-create event processing due to inadequate lockingCVE-2026-542297.0 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directoriesCVE-2026-542287.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreQemu-kvm: heap buffer overflow in virtio-blk scsi request handlingCVE-2026-48914Fix available6.7 Medium
- vim, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreVim: Arbitrary Code Execution via Python Omni-CompletionCVE-2026-52860Fix available7.5 High
- vim, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 moreVim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory nameCVE-2026-47162Fix available7.3 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowCVE-2026-11774Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreKrb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds readCVE-2026-11850Fix available5.0 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick: Out-of-bounds write in ICON decoder due to incorrect loopCVE-2026-53461Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass can trigger out-of-Memory conditionCVE-2026-53460Fix available7.5 High
- Show moreLoading…