Red Hat Red Hat Enterprise Linux 6

• CVE-2026-26158 High 7.0 Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries 0.2%
• CVE-2026-26157 High 7.0 Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization 0.7%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1801 Medium 5.3 Libsoup: libsoup: http request smuggling via malformed chunk headers 0.4%
• CVE-2026-1760 Medium 5.3 Libsoup: soupserver: denial of service via http request smuggling 0.5%
• CVE-2026-1761 High 8.6 Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 1.1%
• CVE-2026-1757 Medium 6.2 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 0.2%
• CVE-2026-1539 Medium 5.8 Libsoup: libsoup: credential leakage via http redirects 0.3%
• CVE-2026-1536 Medium 5.8 Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header 0.3%
• CVE-2026-1489 Medium 5.4 Glib: glib: memory corruption via integer overflow in unicode case conversion 0.4%
• CVE-2026-1485 Low 2.8 Glib: glib: local denial of service via buffer underflow in content type parsing 0.2%
• CVE-2026-1484 Medium 4.2 Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode() 0.3%
• CVE-2026-1467 Medium 5.8 Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured 0.4%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-9615 Low 3.3 Networkmanager: networkmanager file access 0.2%
• CVE-2026-0988 Low 3.7 Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek() 0.4%
• CVE-2026-0992 Low 2.9 Libxml2: libxml2: denial of service via crafted xml catalogs 0.5%
• CVE-2026-0989 Low 3.7 Libxml2: unbounded relaxng include recursion leading to stack overflow 0.5%
• CVE-2026-0990 Medium 5.9 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 1.0%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0716 Medium 4.8 Libsoup: out-of-bounds read in libsoup websocket frame processing 0.4%
• CVE-2026-0719 High 8.6 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 0.6%
• CVE-2025-14523 High 8.2 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 0.5%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-66287 High 8.8 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash 0.5%
• CVE-2025-13947 High 7.4 Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop 0.4%
• CVE-2025-12744 High 8.8 Abrt: command-injection in abrt leading to local privilege escalation 0.7%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-13502 High 7.5 Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos 0.6%
• CVE-2025-13193 Medium 5.5 Libvirt: information disclosure via world-readable vm snapshots 0.1%
• CVE-2025-12748 Medium 5.5 Libvirt: denial of service in xml parsing 0.2%
• CVE-2025-10230 Critical 10.0 Samba: command injection in wins server hook script 39.8%
• CVE-2025-12464 Medium 6.2 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode 0.2%
• CVE-2025-62229 High 7.3 Xorg: xmayland: use-after-free in xpresentnotify structure creation 0.5%
• CVE-2025-62230 High 7.3 Xorg: xwayland: use-after-free in xkb client resource removal 0.3%
• CVE-2025-62231 High 7.3 Xorg: xmayland: value overflow in xkbsetcompatmap() 0.3%
• CVE-2025-12105 High 7.5 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 0.5%
• CVE-2025-9640 Medium 4.3 Samba: vfs_streams_xattr uninitialized memory write possible 0.5%
• CVE-2025-11731 Low 3.1 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 0.3%
• CVE-2025-11561 High 8.8 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 0.8%
• CVE-2025-11234 High 7.5 Qemu-kvm: vnc websocket handshake use-after-free 0.9%
• CVE-2025-7493 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 0.6%
• CVE-2025-11021 High 7.5 Libsoup: out-of-bounds read in cookie date handling of libsoup http library 0.6%
• CVE-2025-60019 Low 3.7 Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() 0.4%
• CVE-2025-60018 Medium 4.8 Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" 0.3%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-9900 High 8.8 Libtiff: libtiff write-what-where 1.0%
• CVE-2025-8277 Low 3.1 Libssh: memory exhaustion via repeated key exchange in libssh 0.4%