Skip to contentRed Hat Enterprise Linux 7 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failureCVE-2026-119728Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parserCVE-2026-119777Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loaderCVE-2026-119528Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-115455Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-114691Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-114690Fix available6.2 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)CVE-2026-1185935.9 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunkCVE-2026-118475Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shadingCVE-2026-112922Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollbackCVE-2026-110133Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceCVE-2026-103963Fix available7.5 High
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of serviceCVE-2026-1175486.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive openCVE-2026-109411Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreGssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonCVE-2026-116497Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningCVE-2026-1154867.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuioCVE-2026-1154856.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgCVE-2026-1154847.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: freeipa uses subject cn as proof of certificate ownershipCVE-2026-1152215.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePatch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-115207Fix available5.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-85518Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-114038Fix available5.1 Medium
- red hat enterprise linux 8, enterprise linux 10, enterprise linux 6 +2 more +4 moreGhostscript: reintroduction of .charkeys -dsafer bypass in rhel 8CVE-2026-112177Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_selected_pathCVE-2026-112261Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channelsCVE-2026-112258Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)CVE-2026-112257Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsingCVE-2026-112260Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: null pointer dereference in swatchbooker (sbz) palette importCVE-2026-1122595.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parserCVE-2026-1122146.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreRhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.serviceCVE-2026-1122106.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCVE-2026-89096Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreNautilus: nautilus: arbitrary file deletion via trash symlinkCVE-2026-1118026.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibarchive: libarchive: use-after-free via aliased mac metadata copyCVE-2026-17591Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: paa integer overflow out-of-bounds readCVE-2026-62438Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerabilityCVE-2026-62439Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingCVE-2026-85977Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodingCVE-2026-852316.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via assertion failure in fsiddCVE-2026-89098Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus methodCVE-2026-111581Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: missing slot-range validation permits out-of-gap device i/oCVE-2026-1115556.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap oob read/write via unchecked migration data offsetsCVE-2026-105958Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncationCVE-2026-105959Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- Show moreLoading…