Red Hat Red Hat Enterprise Linux 7

• CVE-2025-12801 Medium 6.5 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 0.5%
• CVE-2026-28295 Medium 4.3 Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses 0.2%
• CVE-2026-28296 Medium 4.3 Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths 0.4%
• CVE-2026-26104 Medium 5.5 Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api <0.1%
• CVE-2026-26103 High 7.1 Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api <0.1%
• CVE-2026-2243 Medium 5.1 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 0.1%
• CVE-2026-0665 Medium 6.5 Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq 0.2%
• CVE-2025-8860 Low 3.3 Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback 0.2%
• CVE-2025-14876 Medium 5.5 Qemu-kvm: unbounded allocation in virtio-crypto 0.2%
• CVE-2025-1272 High 7.7 Kernel: secure boot does not automatically enable kernel lockdown 0.3%
• CVE-2025-0577 Medium 4.8 Glibc: vdso getrandom acceleration may return predictable randomness 0.2%
• CVE-2026-2443 Medium 5.3 Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure 0.5%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1801 Medium 5.3 Libsoup: libsoup: http request smuggling via malformed chunk headers 0.4%
• CVE-2026-1760 Medium 5.3 Libsoup: soupserver: denial of service via http request smuggling 0.5%
• CVE-2026-1757 Medium 6.2 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 0.2%
• CVE-2026-1539 Medium 5.8 Libsoup: libsoup: credential leakage via http redirects 0.3%
• CVE-2026-1536 Medium 5.8 Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header 0.3%
• CVE-2026-1489 Medium 5.4 Glib: glib: memory corruption via integer overflow in unicode case conversion 0.4%
• CVE-2026-1485 Low 2.8 Glib: glib: local denial of service via buffer underflow in content type parsing 0.2%
• CVE-2026-1484 Medium 4.2 Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode() 0.3%
• CVE-2026-1467 Medium 5.8 Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured 0.4%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-9615 Low 3.3 Networkmanager: networkmanager file access 0.2%
• CVE-2026-0988 Low 3.7 Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek() 0.4%
• CVE-2026-0992 Low 2.9 Libxml2: libxml2: denial of service via crafted xml catalogs 0.5%
• CVE-2026-0989 Low 3.7 Libxml2: unbounded relaxng include recursion leading to stack overflow 0.5%
• CVE-2026-0990 Medium 5.9 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 1.0%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0716 Medium 4.8 Libsoup: out-of-bounds read in libsoup websocket frame processing 0.4%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-66287 High 8.8 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash 0.5%
• CVE-2025-13947 High 7.4 Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop 0.4%
• CVE-2025-12744 High 8.8 Abrt: command-injection in abrt leading to local privilege escalation 0.7%
• CVE-2025-13502 High 7.5 Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos 0.6%
• CVE-2025-54770 Medium 4.9 Grub2: use-after-free in net_set_vlan 0.2%
• CVE-2025-61664 Medium 4.9 Grub2: missing unregister call for normal_exit command may lead to use-after-free 0.1%
• CVE-2025-61663 Medium 4.9 Grub2: missing unregister call for normal commands may lead to use-after-free 0.1%
• CVE-2025-61661 Medium 4.8 Grub2: grub2: out-of-bounds write via malicious usb device 0.2%
• CVE-2025-54771 Medium 4.9 Grub2: use-after-free in grub_file_close() 0.2%
• CVE-2025-13193 Medium 5.5 Libvirt: information disclosure via world-readable vm snapshots 0.1%
• CVE-2025-12748 Medium 5.5 Libvirt: denial of service in xml parsing 0.2%
• CVE-2025-10230 Critical 10.0 Samba: command injection in wins server hook script 39.8%
• CVE-2025-12464 Medium 6.2 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode 0.2%
• CVE-2025-12105 High 7.5 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 0.5%
• CVE-2025-11568 Medium 4.4 Luksmeta: data corruption when handling luks1 partitions with luksmeta 0.1%
• CVE-2025-9640 Medium 4.3 Samba: vfs_streams_xattr uninitialized memory write possible 0.5%
• CVE-2025-11731 Low 3.1 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 0.3%
• CVE-2025-11234 High 7.5 Qemu-kvm: vnc websocket handshake use-after-free 0.9%