Skip to contentRed Hat Enterprise Linux 8.8 Update Services For Sap Solutions vulnerabilities
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreSoupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of serviceCVE-2026-15709Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callbackCVE-2026-59692Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreGstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebufferCVE-2026-59691Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassCVE-2026-14476Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationCVE-2026-14474Fix available8.8 High
- 389ds 389-ds-base, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +21 more +23 more389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindCVE-2026-11610Fix available8.8 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CVE-2026-58016Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 moreGlib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveCVE-2026-58015Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"CVE-2026-58013Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()CVE-2026-58012Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeCVE-2026-58011Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()CVE-2026-58010Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageCVE-2026-12912Fix available7.3 High
- gnome yelp, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreYelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationsCVE-2026-13601Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreUSB: serial: io_ti: fix heap overflow in get_manuf_info()CVE-2026-53196Fix available6.8 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moredm log: fix out-of-bounds write due to region_count overflowCVE-2026-53059Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: fix possible UAF in icmpv6_rcv()CVE-2026-53006Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipc: limit next_id allocation to the valid ID rangeCVE-2026-52923Public exploitFix available7.8 High
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)CVE-2026-54513Fix available8.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreLibaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeCVE-2026-56208Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreDracut: dracut: root code execution via dhcp options command injection in networkmanager initrd moduleCVE-2026-16445Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePacemaker: pacemaker: denial of service via integer overflow in remote message decompressionCVE-2026-10649Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.12CVE-2026-12329Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12328Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreJIT miscompilation in the DOM: Core & HTML componentCVE-2026-12299Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12298Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape due to incorrect boundary conditions in the Networking componentCVE-2026-12297Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Security: Process Sandboxing componentCVE-2026-12296Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Navigation componentCVE-2026-12295Public exploitFix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Workers componentCVE-2026-12294Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-12292Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the Networking: HTTP componentCVE-2026-12291Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12290Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-12289Fix available8.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruptionCVE-2026-46331Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingCVE-2026-52722Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbCVE-2026-52720Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +12 more +14 moreGstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflowCVE-2026-53705Fix available7.6 High
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilationCVE-2026-8357Fix available5.4 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreAbrt: unsanitized systemd journal content written to dump directory files enables content injectionCVE-2026-542315.5 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +10 more +12 moreAbrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwritesCVE-2026-54230Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: chownproblemdir succeeds during active post-create event processing due to inadequate lockingCVE-2026-542297.0 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directoriesCVE-2026-542287.8 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowCVE-2026-11774Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +23 more +25 moreDracut: dracut: root code execution via dhcp options command injectionCVE-2026-6893Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +7 more +9 moreAnsible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chownCVE-2026-11837Public exploitFix available7.3 High
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parserCVE-2026-117885.9 Medium
- arm c1-premium, c1-ultra, cortex-a710 +45 more +47 moreArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...CVE-2025-10263Public exploitFix available9.1 Critical
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 moreHeap Use-After-Free in the PKCS7_verify() FunctionCVE-2026-45447Public exploitFix available8.8 High
- Show moreLoading…