Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

• CVE-2025-66287 High 8.8 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash 0.5%
• CVE-2025-13947 High 7.4 Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop 0.4%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-13502 High 7.5 Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos 0.6%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%
• CVE-2025-59088 High 8.6 Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 0.5%
• CVE-2025-62229 High 7.3 Xorg: xmayland: use-after-free in xpresentnotify structure creation 0.5%
• CVE-2025-62230 High 7.3 Xorg: xwayland: use-after-free in xkb client resource removal 0.3%
• CVE-2025-62231 High 7.3 Xorg: xmayland: value overflow in xkbsetcompatmap() 0.3%
• CVE-2025-11561 High 8.8 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 0.8%
• CVE-2025-7493 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 0.6%
• CVE-2025-11021 High 7.5 Libsoup: out-of-bounds read in cookie date handling of libsoup http library 0.6%
• CVE-2025-9900 High 8.8 Libtiff: libtiff write-what-where 1.0%
• CVE-2025-8067 High 8.5 Udisks: out-of-bounds read in udisks daemon 0.7%
• CVE-2025-8941 High 7.8 Linux-pam: incomplete fix for cve-2025-6020 0.3%
• CVE-2025-7425 High 7.8 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr 0.4%
• CVE-2025-7345 High 7.5 Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf 1.3%
• CVE-2025-6019 High 7.0 Libblockdev: lpe from allow_active to root in libblockdev via udisks 0.5%
• CVE-2025-49180 High 7.8 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension 0.3%
• CVE-2025-49179 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension 0.3%
• CVE-2025-49178 Medium 5.5 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore 0.2%
• CVE-2025-49176 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension 0.4%
• CVE-2025-49175 Medium 6.1 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors 0.3%
• CVE-2025-4404 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 2.0%
• CVE-2025-6020 High 7.8 Linux-pam: linux-pam directory traversal 0.5%
• CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) 0.8%
• CVE-2025-49796 Critical 9.1 Libxml: type confusion leads to denial of service (dos) 1.6%
• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-48798 High 7.3 Gimp: multiple use after free in xcf parser 0.2%
• CVE-2025-48797 High 7.3 Gimp: multiple heap buffer overflows in tga parser 0.3%
• CVE-2025-4945 Low 3.7 Libsoup: integer overflow in cookie expiration date handling in libsoup 0.7%
• CVE-2025-4948 High 7.5 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 1.1%
• CVE-2025-32911 Critical 9.0 Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 1.0%
• CVE-2025-32914 High 7.4 Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 0.8%
• CVE-2025-32906 High 7.5 Libsoup: out of bounds reads in soup_headers_parse_request() 1.3%
• CVE-2025-32913 High 7.5 Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 0.8%
• CVE-2025-32049 High 7.5 Libsoup: denial of service attack to websocket server 1.1%
• CVE-2025-2784 High 7.0 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 0.9%
• CVE-2025-26601 High 7.8 Xorg: xwayland: use-after-free in syncinittrigger() 0.4%
• CVE-2025-26600 High 7.8 Xorg: xwayland: use-after-free in playreleasedevents() 0.4%
• CVE-2025-26599 High 7.8 Xorg: xwayland: use of uninitialized pointer in compredirectwindow() 0.4%
• CVE-2025-26598 High 7.8 Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() 0.4%
• CVE-2025-26597 High 7.8 Xorg: xwayland: buffer overflow in xkbchangetypesofkey() 0.4%
• CVE-2025-26596 High 7.8 Xorg: xwayland: heap overflow in xkbwritekeysyms() 0.4%
• CVE-2025-26595 High 7.8 Xorg: xwayland: buffer overflow in xkbvmodmasktext() 0.4%
• CVE-2025-26594 High 7.8 X.org: xwayland: use-after-free of the root cursor 0.4%
• CVE-2025-0624 High 7.6 Grub2: net: out-of-bounds write in grub_net_search_config_file() 1.4%
• CVE-2025-1244 High 8.8 Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme 2.6%