Skip to contentRed Hat Enterprise Linux 9.6 Extended Update Support vulnerabilities
- apple macos, safari, red hat enterprise linux 6 +13 more +15 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2026-28946Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28947Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-43658Fix available7.5 High
- apple ipados, macos, safari +18 more +20 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28905Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28883Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28904Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28953Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28903Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...CVE-2026-28942Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...CVE-2026-28902Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28955Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...CVE-2026-28847Fix available8.8 High
- python urllib3, red hat exploit intelligence, external secrets operator for red hat openshift +48 more +50 moreurllib3: Decompression-bomb safeguards bypassed in parts of the streaming APICVE-2026-44432Fix available8.9 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +11 more +13 moreCockpit: cockpit: arbitrary command execution via crafted links in system logs uiCVE-2026-4802Public exploitFix available8.0 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4892CVE-2026-4892Fix available8.4 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4891CVE-2026-4891Fix available5.3 Medium
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4890CVE-2026-4890Fix available7.5 High
- shlomif xml::libxml, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreXML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequencesCVE-2026-8177Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +26 more +28 morenetfilter: flowtable: strictly check for maximum number of actionsCVE-2026-43329Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +108 more +110 moreQuadratic string concatenation in consumePhrase in net/mailCVE-2026-42499Fix available7.5 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 moreQuadratic string concatentation in consumeComment in net/mailCVE-2026-39820Fix available7.5 High
- go standard library net/http, golang go, http2 +106 more +108 moreInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814Fix available7.5 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the WebRTC componentCVE-2026-8094Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2CVE-2026-8092Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-8091Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Networking componentCVE-2026-8090Fix available7.3 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionCVE-2026-42216Fix available8.8 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreOpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APICVE-2026-41142Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moretcp: fix potential race in tcp_v6_syn_recv_sock()CVE-2026-43198Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredlm: validate length in dlm_search_rsb_treeCVE-2026-43125Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 morenetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiryCVE-2026-43114Fix available9.4 Critical
- linux, linux kernel, red hat enterprise linux 10 +24 more +26 morefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepathCVE-2026-43112Fix available8.8 High
- beaugunderson ip-address, red hat confidential compute attestation, cryostat 4 +38 more +40 moreip-address: XSS in Address6 HTML-emitting methodsCVE-2026-42338Fix available5.3 Medium
- redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreredis-server RESTORE invalid memory access may allow remote code executionCVE-2026-25243Public exploitFix available7.7 High
- redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreredis-server Lua use-after-free may allow remote code executionCVE-2026-23631Public exploitFix available6.1 Medium
- redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreredis-server use-after-free in unblock client flow may allow remote code executionCVE-2026-23479Public exploitFix available7.7 High
- apache http server, red hat jboss core services for rhel 8, jboss core services on rhel 7 +15 more +17 moreApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()CVE-2026-28780Fix available9.8 Critical
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +19 more +21 morenet-imap: Command Injection via unvalidated Symbol inputsCVE-2026-42258Fix available5.8 Medium
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154Public exploitFix available7.5 High
- prometheus, red hat custom metric autoscaler operator for red hat openshift, file integrity operator +52 more +54 morePrometheus Azure AD remote write OAuth client secret exposed via config APICVE-2026-42151Fix available7.5 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: security bypass due to incorrect name constraint handlingCVE-2026-42011Fix available7.4 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreGnutls: gnutls: authentication bypass via nul character in usernameCVE-2026-42010Fix available7.1 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyCVE-2026-33846Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()CVE-2026-43038Fix available9.8 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moreip6_tunnel: clear skb2->cb[] in ip4ip6_err()CVE-2026-43037Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 moresmb: client: validate the whole DACL before rewriting it in cifsaclCVE-2026-31709Fix available8.8 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- Show moreLoading…