Skip to contentRed Hat Enterprise Linux 7 vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredrm/amd/display: Do not skip unrelated mode changes in DSC validationCVE-2026-31488Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morecan: isotp: fix tx.buf use-after-free in isotp_sendmsg()CVE-2026-31474Fix available7.8 High
- ubuntu libefiboot, red hat enterprise linux 10, enterprise linux 7 +4 more +6 moreEfivar: efivar: denial of service due to stack overflow in device path node parsingCVE-2026-6862Fix available5.5 Medium
- gnu emacs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEmacs: emacs: memory corruption vulnerability when processing svg cssCVE-2026-6861Fix available6.1 Medium
- packagekit, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as rootCVE-2026-41651Public exploitFix available8.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: binutils: arbitrary code execution via malformed xcoff object file processingCVE-2026-6846Fix available7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesCVE-2026-6844Fix available5.5 Medium
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreNano: nano: format string vulnerability leads to denial of serviceCVE-2026-6843Fix available5.5 Medium
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreBinutils: binutils: denial of service via crafted elf fileCVE-2026-6845Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissionsCVE-2026-6842Fix available2.5 Low
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 moreApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationCVE-2026-40542Fix available7.3 High
- oracle graalvm, graalvm for jdk, jdk +31 more +33 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-34282Fix available7.5 High
- oracle graalvm, graalvm for jdk, jdk +33 more +35 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-22016Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibxpm: libxpm: denial of service via out-of-bounds read in xpm file parsingCVE-2026-4367Fix available5.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150CVE-2026-6786Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150CVE-2026-6785Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 150 and Thunderbird 150CVE-2026-67847.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the JavaScript Engine componentCVE-2026-6754Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC componentCVE-2026-6753Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC componentCVE-2026-6752Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs componentCVE-2026-6751Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-6750Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentCVE-2026-6749Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs componentCVE-2026-6748Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the WebRTC componentCVE-2026-6747Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-6746Fix available7.5 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)CVE-2026-40244Fix available8.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processingCVE-2026-6507Fix available7.5 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 moreIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could...CVE-2025-545027.1 High
- samba rsync, red hat discovery 2, enterprise linux 10 +24 more +26 moreIn rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...CVE-2026-41035Fix available7.4 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processingCVE-2026-6384Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via specially crafted seattle filmworks fileCVE-2026-40919Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via crafted pvr image fileCVE-2026-40918Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: application crashes or information disclosure via crafted icns image filesCVE-2026-40917Fix available5.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service due to stack buffer overflow in tim image loaderCVE-2026-40916Fix available5.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: heap buffer overflow due to integer overflow in fits image loaderCVE-2026-40915Fix available5.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreSssd: out-of-bounds read in the sssdCVE-2026-6245Fix available5.5 Medium
- mozilla thin-vec, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreUse-After-Free and Double-Free in IntoIter::drop when element drop panicsCVE-2026-6654Fix available5.1 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreXorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory accessCVE-2026-34003Fix available7.8 High
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingCVE-2026-34002Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreXorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionCVE-2026-34001Fix available7.8 High
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.CVE-2026-34000Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreXorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handlingCVE-2026-33999Fix available7.8 High
- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +21 more +23 moreIncomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()CVE-2026-4786Fix available7.0 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()CVE-2026-33908Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has a Heap Buffer Overflow via MVG decoderCVE-2026-33901Fix available7.5 High
- python pillow, red hat lightspeed core, openshift lightspeed +27 more +29 morePillow is vulnerable to a FITS GZIP decompression bombCVE-2026-40192Fix available8.7 High
- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +22 more +24 moreUse-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressureCVE-2026-6100Fix available9.1 Critical
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morenet: bonding: fix use-after-free in bond_xmit_broadcast()CVE-2026-31419Fix available7.8 High
- Show moreLoading…