Red Hat Red Hat Enterprise Linux 7

• CVE-2026-104047 Medium 5.3 Sssd: sssd: information disclosure via query injection in entra id lookups 0.1%
• CVE-2026-88252 Medium 4.7 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion 0.1%
• CVE-2026-104044 Medium 6.2 Sssd: sssd: denial of service via crafted passkey kerberos authentication request 0.1%
• CVE-2026-104043 Medium 5.5 Sssd: sssd: denial of service via undersized packet parsing in nss responder <0.1%
• CVE-2026-104042 Medium 5.5 Sssd: sssd: denial of service via out-of-bounds read in pam responder 0.2%
• CVE-2026-104041 Medium 5.5 Sssd: sssd: denial of service via unbounded negative cache growth 0.1%
• CVE-2026-104040 Medium 4.4 Sssd: sssd: information disclosure via odata injection in entra id lookups 0.1%
• CVE-2026-104039 Medium 4.7 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 0.1%
• CVE-2026-104038 Medium 5.9 Sssd: sssd: denial of service via missing sid extension in certificate mapping 0.3%
• CVE-2026-104037 Medium 5.5 Sssd: sssd: denial of service via packet length underflow in autofs responder 0.1%
• CVE-2026-92821 Medium 6.8 Sssd: sssd: access control bypass via premature ldap access rule evaluation 0.3%
• CVE-2026-104036 Medium 5.8 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin <0.1%
• CVE-2026-104035 Medium 5.5 Sssd: sssd: denial of service via memory exhaustion in kcm responder <0.1%
• CVE-2026-104034 Medium 4.7 Sssd: sssd: denial of service via use-after-free in kcm ticket renewal <0.1%
• CVE-2026-104033 Medium 5.4 Sssd: sssd: access control bypass via improper ldap shadow expiration check 0.2%
• CVE-2026-104032 Medium 5.5 Sssd: sssd: denial of service via unprivileged autofs cache invalidation <0.1%
• CVE-2026-104031 Medium 5.5 Sssd: sssd: denial of service via memory exhaustion in autofs responder <0.1%
• CVE-2026-104029 Low 3.3 Sssd: sssd: denial of service via out-of-bounds read in autofs responder 0.1%
• CVE-2026-104030 Medium 5.5 Sssd: sssd: denial of service via out-of-bounds read during passkey parsing 0.1%
• CVE-2026-104988 High 8.1 Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject 0.2%
• CVE-2026-95512 Medium 5.5 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader 0.2%
• CVE-2026-86345 Critical 9.0 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result 0.4%
• CVE-2026-86344 High 7.5 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue 0.3%
• CVE-2026-103641 Medium 5.5 Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder 0.1%
• CVE-2026-103399 Medium 5.3 Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body 0.2%
• CVE-2026-103242 High 7.1 Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag 0.1%
• CVE-2026-102560 High 8.6 Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth 0.5%
• CVE-2026-102555 High 8.2 Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding 0.5%
• CVE-2026-95520 High 7.1 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages 0.1%
• CVE-2026-97029 Medium 5.7 Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group 0.2%
• CVE-2026-97024 High 7.1 Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc 0.5%
• CVE-2026-97027 Low 3.6 Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files 0.1%
• CVE-2026-97026 Low 3.9 Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path 0.1%
• CVE-2026-97025 Low 3.2 Flatpak: flatpak: world-readable oci authentication token in system-helper cache path 0.1%
• CVE-2026-102010 High 7.0 Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if 0.3%
• CVE-2026-97023 High 7.1 Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin 0.5%
• CVE-2026-96284 Low 2.5 Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following 0.1%
• CVE-2026-96282 Low 3.1 Flatpak: flatpak: extension metadata path traversal file existence oracle 0.2%
• CVE-2026-96283 Low 3.3 Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull 0.1%
• CVE-2026-96281 Medium 6.2 Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes 0.1%
• CVE-2026-96280 High 7.5 Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems 0.6%
• CVE-2026-96279 Medium 6.5 Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks 0.4%
• CVE-2026-93834 High 8.8 Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape 0.4%
• CVE-2026-95521 High 7.8 Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm 0.6%
• CVE-2026-95519 High 7.8 Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) 0.1%
• CVE-2026-97185 High 7.8 Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file 0.1%
• CVE-2026-96546 Low 2.5 Gimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loader 0.2%
• CVE-2026-96545 Medium 4.4 Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loader 0.2%
• CVE-2026-96276 Medium 6.5 Flatpak: flatpak: arbitrary write in host context via flatpak build-init 0.4%
• CVE-2026-96275 High 8.8 Flatpak: flatpak: arbitrary write access as root via extra-data extraction 0.6%