Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loopCVE-2026-121611Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice indexCVE-2026-121601Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned underflowCVE-2026-119610Fix available8.2 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +3 more +5 moreGst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handlingCVE-2026-121629Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 morePodman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationCVE-2026-123876Fix available4.4 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rceCVE-2026-84503Fix available6.7 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 moreAnsible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)CVE-2026-1230376.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored busCVE-2026-120749Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailCVE-2026-1231517.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchCVE-2026-1219978.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthCVE-2026-1219968.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailCVE-2026-1219957.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthCVE-2026-1219948.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimatorCVE-2026-121259Fix available6.5 Medium
- gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreGst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tagsCVE-2026-119843Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: queue pointer corruption in if_output() leading to denial of serviceCVE-2026-120831Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosureCVE-2026-120830Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreHivex: hivex: denial of service via out-of-bounds read in big-data block processingCVE-2026-120740Fix available2.0 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 moreJson-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepCVE-2026-1201947.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace checkCVE-2026-119842Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computationCVE-2026-119727Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of serviceCVE-2026-119729Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failureCVE-2026-119728Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parserCVE-2026-119777Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loaderCVE-2026-119528Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-115455Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-114691Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-114690Fix available6.2 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)CVE-2026-1185935.9 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunkCVE-2026-118475Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shadingCVE-2026-112922Fix available3.3 Low
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: chunkreader message length permits chunk-size overflowCVE-2026-919206.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollbackCVE-2026-110133Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceCVE-2026-103963Fix available7.5 High
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of serviceCVE-2026-1175486.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive openCVE-2026-109411Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreGssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonCVE-2026-116497Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningCVE-2026-1154867.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuioCVE-2026-1154856.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgCVE-2026-1154847.6 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreLibslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestCVE-2026-115449Fix available3.5 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: freeipa uses subject cn as proof of certificate ownershipCVE-2026-1152215.4 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreGoose: goose: shell history and environment leak via terminal integrationCVE-2026-111079Fix available7.4 High
- Show moreLoading…