Red Hat Red Hat Enterprise Linux 7

• CVE-2026-89096 Medium 5.9 Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd 0.3%
• CVE-2026-89088 Medium 5.5 Parted: parted: denial of service via heap buffer overflow during fat16 resize 0.2%
• CVE-2026-89085 Medium 6.6 Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image 0.2%
• CVE-2026-111802 Medium 6.6 Nautilus: nautilus: arbitrary file deletion via trash symlink 0.2%
• CVE-2026-17591 Low 3.6 Libarchive: libarchive: use-after-free via aliased mac metadata copy 0.2%
• CVE-2026-62438 Medium 6.1 Gimp: gimp: paa integer overflow out-of-bounds read 0.1%
• CVE-2026-62439 High 7.0 Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability 0.2%
• CVE-2026-85977 Medium 5.3 Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding 0.4%
• CVE-2026-85231 Medium 6.5 Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding 0.3%
• CVE-2026-89098 Medium 5.5 Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd 0.1%
• CVE-2026-111581 Low 3.3 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method 0.1%
• CVE-2026-111555 Medium 6.0 Luksmeta: missing slot-range validation permits out-of-gap device i/o 0.1%
• CVE-2026-105958 High 7.5 Spice-server: spice: heap oob read/write via unchecked migration data offsets 0.2%
• CVE-2026-105959 High 7.5 Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation 0.5%
• CVE-2026-104715 High 7.8 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass 0.3%
• CVE-2026-110777 Medium 5.7 Evolution-data-server: local file disclosure via attach file:// uris 0.4%
• CVE-2026-109968 Medium 5.5 Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file <0.1%
• CVE-2026-100229 Medium 6.5 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check 0.3%
• CVE-2026-109971 Medium 4.7 Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool 0.2%
• CVE-2026-109970 Medium 4.7 Clevis: clevis: pkcs#11 token pin written to world-readable file 0.1%
• CVE-2026-109969 Medium 4.7 Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask 0.1%
• CVE-2026-100231 Medium 6.1 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters 0.1%
• CVE-2026-86476 High 8.4 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize 0.2%
• CVE-2026-110036 Low 3.3 Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices 0.2%
• CVE-2026-105460 Medium 5.5 Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt() 0.1%
• CVE-2026-109976 Medium 4.7 Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection 0.1%
• CVE-2026-109854 Low 2.5 M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding 0.1%
• CVE-2026-108094 High 7.8 Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path 0.1%
• CVE-2026-108093 Medium 5.5 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading 0.1%
• CVE-2026-108063 Medium 5.5 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry 0.1%
• CVE-2026-107655 Medium 4.0 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service 0.3%
• CVE-2026-107651 Medium 5.5 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader 0.2%
• CVE-2026-107565 Medium 5.1 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption 0.1%
• CVE-2026-107161 High 7.5 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients 0.4%
• CVE-2026-106067 Medium 6.3 Gimp: gimp: heap buffer overflow in hot color filter on oversized image 0.1%
• CVE-2026-106066 Medium 6.3 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions 0.1%
• CVE-2026-106065 Medium 6.3 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions 0.1%
• CVE-2026-107169 Medium 6.2 M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8 0.1%
• CVE-2026-107167 Medium 6.2 M17n-lib: heap use-after-free write in re_init_ic() 0.1%
• CVE-2026-106064 Medium 6.3 Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions 0.1%
• CVE-2026-107170 Low 2.9 M17n-lib: null dereference in minput_open_im() after failed m17n_init() 0.1%
• CVE-2026-107168 Medium 6.2 M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars() 0.1%
• CVE-2026-106061 Medium 5.5 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file 0.1%
• CVE-2026-80048 Medium 5.5 Sssd: sssd-kcm: local denial of service via excessive memory preallocation 0.2%
• CVE-2026-104045 Medium 4.7 Sssd: sssd: denial of service via race condition in autofs responder 0.1%
• CVE-2026-104046 Medium 6.2 Sssd: sssd: denial of service via incomplete identity provider authentication requests 0.2%
• CVE-2026-106062 High 7.8 Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file 0.2%
• CVE-2026-101258 High 7.8 Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free 0.2%
• CVE-2026-106063 Medium 6.3 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions 0.1%
• CVE-2026-104048 Medium 6.8 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation 0.3%