Skip to contentRed Hat Enterprise Linux 7 vulnerabilities
- postgresql, red hat discovery 2, enterprise linux 10 +17 more +19 morePostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryCVE-2026-6477Fix available8.8 High
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparoundCVE-2026-6473Fix available8.8 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Profile Backup componentCVE-2026-8401Fix available9.8 Critical
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 moreAn attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE...CVE-2026-42006Fix available4.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the JavaScript Engine componentCVE-2026-8391Fix available5.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-83907.3 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-8389Public exploit8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28901Fix available4.3 Medium
- apple macos, safari, red hat enterprise linux 6 +13 more +15 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2026-28946Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28947Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-43658Fix available7.5 High
- apple ipados, macos, safari +18 more +20 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28905Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28883Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28904Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28953Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28903Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28942Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28902Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28955Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28847Fix available8.8 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesCVE-2026-45109Fix available7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesCVE-2026-44575Fix available7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass through dynamic route parameter injectionCVE-2026-44574Fix available8.1 High
- python urllib3, red hat exploit intelligence, external secrets operator for red hat openshift +48 more +50 moreurllib3: Decompression-bomb safeguards bypassed in parts of the streaming APICVE-2026-44432Fix available8.9 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +11 more +13 moreCockpit: cockpit: arbitrary command execution via crafted links in system logs uiCVE-2026-4802Public exploitFix available8.0 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreCVE-2026-5172CVE-2026-5172Public exploitFix available7.3 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4892CVE-2026-4892Fix available8.4 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4891CVE-2026-4891Fix available5.3 Medium
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4890CVE-2026-4890Fix available7.5 High
- shlomif xml::libxml, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreXML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequencesCVE-2026-8177Fix available7.5 High
- libexpat project libexpat, red hat discovery 2, enterprise linux 10 +11 more +13 moreIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...CVE-2026-45186Fix available2.9 Low
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreDoS attack via DOMNode::C14N()CVE-2026-7263Fix available6.3 Medium
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGlobal buffer over-read in mb_convert_encoding() with attacker-supplied encodingCVE-2026-6104Fix available6.3 Medium
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSQL injection in pdo_firebird via NUL bytes in quoted stringsCVE-2025-14179Fix available7.4 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morerxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentCVE-2026-43500Public exploitFix availableEPSS 94.1%7.8 High
- linux, linux kernel, red hat enterprise linux 10 +26 more +28 morenetfilter: flowtable: strictly check for maximum number of actionsCVE-2026-43329Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- go standard library net/http, golang go, http2 +106 more +108 moreInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814Fix available7.5 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the WebRTC componentCVE-2026-8094Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.2CVE-2026-80938.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2CVE-2026-8092Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-8091Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Networking componentCVE-2026-8090Fix available7.3 High
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSigned integer overflow in metaphone()CVE-2026-7568Fix available6.3 Medium
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreNULL pointer dereference in SOAP apache:Map decoder with missing <value>CVE-2026-7262Fix available2.9 Low
- php, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-After-Free in SOAP using Apache mapCVE-2026-6722Fix available9.5 Critical
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionCVE-2026-42216Fix available8.8 High
- Show moreLoading…