Skip to contentRed Hat Enterprise Linux 8.6 Telecommunications Update Service vulnerabilities
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High
- go toolchain cmd/go, golang go, red hat enterprise linux 10 +30 more +32 moreArbitrary file write using cgo pkg-config directive in cmd/goCVE-2025-61731Fix available7.8 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a heap-buffer-overflow in urb_select_configurationCVE-2026-22859Fix available5.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a global-buffer-overflow in crypto_base64_decodeCVE-2026-22858Fix available5.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreFreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_callCVE-2026-22855Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +15 more +17 moreVsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsingCVE-2025-14242Fix available6.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147CVE-2026-0891Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the IPC componentCVE-2026-0882Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to integer overflow in the Graphics componentCVE-2026-0880Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics componentCVE-2026-0879Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-0878Fix available8.0 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: Security componentCVE-2026-0877Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreLibsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationCVE-2026-0719Fix available8.6 High
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- apple ipados, macos, safari +20 more +22 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2025-43511Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +15 more +17 moreLibsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)CVE-2025-14523Fix available8.2 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruptionCVE-2025-14087Fix available5.6 Medium
- the webkitgtk team webkitgtk, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreWebkitgtk: processing maliciously crafted web content may lead to an unexpected process crashCVE-2025-66287Fix available8.8 High
- the webkitgtk team webkitgtk, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreWebkit: webkitgtk: remote user-assisted information disclosure via file drag-and-dropCVE-2025-13947Public exploitFix available7.4 High
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()CVE-2025-13601Fix available7.7 High
- the webkitgtk team webkitgtk, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreWebkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dosCVE-2025-13502Fix available7.5 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-freeCVE-2025-61662Fix available7.8 High
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: remote dos via unbounded tcp upstream bufferingCVE-2025-590895.9 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvCVE-2025-590888.6 High
- apple ipados, macos, safari +20 more +22 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2025-43457Fix available6.5 Medium
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removalCVE-2025-62230Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 moreXorg: xmayland: use-after-free in xpresentnotify structure creationCVE-2025-62229Fix available7.3 High
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsCVE-2025-11561Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-7493Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: out-of-bounds read in cookie date handling of libsoup http libraryCVE-2025-11021Fix available7.5 High
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 moreLibtiff: libtiff write-what-whereCVE-2025-9900Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- storaged-project udisks, red hat enterprise linux 10, enterprise linux 6 +14 more +16 moreUdisks: out-of-bounds read in udisks daemonCVE-2025-8067Public exploitFix available8.5 High
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-6020CVE-2025-8941Fix available7.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS...CVE-2025-43214Fix available6.5 Medium
- apple ipados, macos, safari +30 more +32 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,...CVE-2025-31277In KEVPublic exploitFix available8.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...CVE-2025-43213Fix available6.5 Medium
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrCVE-2025-7425Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufCVE-2025-7345Fix available7.5 High
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1, discovery 2 +33 more +35 moreLinux-pam: linux-pam directory traversalCVE-2025-6020Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +10 more +12 moreLibblockdev: lpe from allow_active to root in libblockdev via udisksCVE-2025-6019Public exploitFix available7.0 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionCVE-2025-49180Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionCVE-2025-49179Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignoreCVE-2025-49178Fix available5.5 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionCVE-2025-49176Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsCVE-2025-49175Fix available6.1 Medium
- Show moreLoading…