Red Hat Red Hat Enterprise Linux 6

• CVE-2026-85231 Medium 6.5 Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding 0.3%
• CVE-2026-89098 Medium 5.5 Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd 0.1%
• CVE-2026-105958 High 7.5 Spice-server: spice: heap oob read/write via unchecked migration data offsets 0.2%
• CVE-2026-105959 High 7.5 Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation 0.5%
• CVE-2026-104715 High 7.8 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass 0.3%
• CVE-2026-110777 Medium 5.7 Evolution-data-server: local file disclosure via attach file:// uris 0.4%
• CVE-2026-86476 High 8.4 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize 0.2%
• CVE-2026-110036 Low 3.3 Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices 0.2%
• CVE-2026-105460 Medium 5.5 Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt() 0.1%
• CVE-2026-109854 Low 2.5 M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding 0.1%
• CVE-2026-108119 Medium 6.3 Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix 0.1%
• CVE-2026-108093 Medium 5.5 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading 0.1%
• CVE-2026-108063 Medium 5.5 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry 0.1%
• CVE-2026-107655 Medium 4.0 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service 0.3%
• CVE-2026-107651 Medium 5.5 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader 0.2%
• CVE-2026-107161 High 7.5 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients 0.4%
• CVE-2026-106067 Medium 6.3 Gimp: gimp: heap buffer overflow in hot color filter on oversized image 0.1%
• CVE-2026-106066 Medium 6.3 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions 0.1%
• CVE-2026-106065 Medium 6.3 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions 0.1%
• CVE-2026-107169 Medium 6.2 M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8 0.1%
• CVE-2026-107167 Medium 6.2 M17n-lib: heap use-after-free write in re_init_ic() 0.1%
• CVE-2026-106064 Medium 6.3 Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions 0.1%
• CVE-2026-107170 Low 2.9 M17n-lib: null dereference in minput_open_im() after failed m17n_init() 0.1%
• CVE-2026-107168 Medium 6.2 M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars() 0.1%
• CVE-2026-106061 Medium 5.5 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file 0.1%
• CVE-2026-80048 Medium 5.5 Sssd: sssd-kcm: local denial of service via excessive memory preallocation 0.2%
• CVE-2026-104045 Medium 4.7 Sssd: sssd: denial of service via race condition in autofs responder 0.1%
• CVE-2026-104046 Medium 6.2 Sssd: sssd: denial of service via incomplete identity provider authentication requests 0.2%
• CVE-2026-106062 High 7.8 Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file 0.2%
• CVE-2026-101258 High 7.8 Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free 0.2%
• CVE-2026-106063 Medium 6.3 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions 0.1%
• CVE-2026-104048 Medium 6.8 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation 0.3%
• CVE-2026-104047 Medium 5.3 Sssd: sssd: information disclosure via query injection in entra id lookups 0.1%
• CVE-2026-88252 Medium 4.7 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion 0.1%
• CVE-2026-104044 Medium 6.2 Sssd: sssd: denial of service via crafted passkey kerberos authentication request 0.1%
• CVE-2026-104043 Medium 5.5 Sssd: sssd: denial of service via undersized packet parsing in nss responder <0.1%
• CVE-2026-104042 Medium 5.5 Sssd: sssd: denial of service via out-of-bounds read in pam responder 0.2%
• CVE-2026-104041 Medium 5.5 Sssd: sssd: denial of service via unbounded negative cache growth 0.1%
• CVE-2026-104040 Medium 4.4 Sssd: sssd: information disclosure via odata injection in entra id lookups 0.1%
• CVE-2026-104039 Medium 4.7 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 0.1%
• CVE-2026-104038 Medium 5.9 Sssd: sssd: denial of service via missing sid extension in certificate mapping 0.3%
• CVE-2026-104037 Medium 5.5 Sssd: sssd: denial of service via packet length underflow in autofs responder 0.1%
• CVE-2026-92821 Medium 6.8 Sssd: sssd: access control bypass via premature ldap access rule evaluation 0.3%
• CVE-2026-104036 Medium 5.8 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin <0.1%
• CVE-2026-104035 Medium 5.5 Sssd: sssd: denial of service via memory exhaustion in kcm responder <0.1%
• CVE-2026-104034 Medium 4.7 Sssd: sssd: denial of service via use-after-free in kcm ticket renewal <0.1%
• CVE-2026-104033 Medium 5.4 Sssd: sssd: access control bypass via improper ldap shadow expiration check 0.2%
• CVE-2026-104032 Medium 5.5 Sssd: sssd: denial of service via unprivileged autofs cache invalidation <0.1%
• CVE-2026-104031 Medium 5.5 Sssd: sssd: denial of service via memory exhaustion in autofs responder <0.1%
• CVE-2026-104029 Low 3.3 Sssd: sssd: denial of service via out-of-bounds read in autofs responder 0.1%