Red Hat Red Hat Enterprise Linux 7

• CVE-2026-6862 Medium 5.5 Efivar: efivar: denial of service due to stack overflow in device path node parsing 0.1%
• CVE-2026-6861 Medium 6.1 Emacs: emacs: memory corruption vulnerability when processing svg css 0.1%
• CVE-2026-6846 High 7.8 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing 0.2%
• CVE-2026-6844 Medium 5.5 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files 0.1%
• CVE-2026-6843 Medium 5.5 Nano: nano: format string vulnerability leads to denial of service 0.1%
• CVE-2026-6845 Medium 5.0 Binutils: binutils: denial of service via crafted elf file 0.1%
• CVE-2026-6842 Low 2.5 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions <0.1%
• CVE-2026-6507 High 7.5 Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing 0.5%
• CVE-2026-6384 High 7.3 Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing 0.3%
• CVE-2026-40919 Medium 6.1 Gimp: gimp: denial of service via specially crafted seattle filmworks file 0.3%
• CVE-2026-40918 Medium 5.5 Gimp: gimp: denial of service via crafted pvr image file 0.2%
• CVE-2026-40917 Medium 5.0 Gimp: gimp: application crashes or information disclosure via crafted icns image files 0.2%
• CVE-2026-40916 Medium 5.0 Gimp: gimp: denial of service due to stack buffer overflow in tim image loader 0.2%
• CVE-2026-40915 Medium 5.5 Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader 0.4%
• CVE-2026-6245 Medium 5.5 Sssd: out-of-bounds read in the sssd 0.1%
• CVE-2026-1584 High 7.5 Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 1.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2025-14821 High 7.8 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows 0.1%
• CVE-2026-4631 Critical 9.8 Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 15.5%
• CVE-2026-5745 Medium 5.5 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 0.2%
• CVE-2026-5704 Medium 5.0 Tar: tar: hidden file injection via crafted archives 0.4%
• CVE-2026-5673 Medium 5.6 Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing 0.2%
• CVE-2026-3184 Low 3.7 Util-linux: util-linux: access control bypass due to improper hostname canonicalization 0.4%
• CVE-2026-35094 Low 3.3 Libinput: libinput: information disclosure via dangling pointer in lua plugin handling 0.1%
• CVE-2026-35093 High 8.8 Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins 0.2%
• CVE-2026-4948 Medium 5.5 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization 0.1%
• CVE-2026-0965 Low 3.3 Libssh: libssh: denial of service via improper configuration file handling 0.2%
• CVE-2026-0967 Low 2.2 Libssh: libssh: denial of service via inefficient regular expression processing 0.2%
• CVE-2026-0968 Low 3.1 Libssh: libssh: denial of service due to malformed sftp message 0.5%
• CVE-2026-0964 Medium 5.0 Libssh: improper sanitation of paths received from scp servers 0.4%
• CVE-2026-0966 Medium 6.5 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 0.6%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-2239 Low 2.8 Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow 0.5%
• CVE-2026-2272 Medium 4.3 Gimp: gimp: memory corruption due to integer overflow in ico file handling 0.9%
• CVE-2026-2271 Low 3.3 Gimp: gimp: denial of service via crafted psp image file 0.5%
• CVE-2026-2436 Medium 6.5 Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake 0.5%
• CVE-2026-4897 Medium 5.5 Polkit: polkit: denial of service via unbounded input processing through standard input 0.2%
• CVE-2026-1940 Medium 5.1 Gstreamer: incomplete fix of cve-2026-1940 0.2%
• CVE-2026-4647 Medium 6.1 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library 0.2%
• CVE-2026-2369 Medium 6.5 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 0.4%
• CVE-2026-4426 Medium 6.5 Libarchive: libarchive: denial of service via malformed iso file processing 0.3%
• CVE-2026-4271 Medium 5.3 Libsoup: libsoup: denial of service via use-after-free in http/2 server 0.9%
• CVE-2026-3633 Low 3.9 Libsoup: libsoup: header and http request injection via crlf injection 0.2%
• CVE-2026-3632 Low 3.9 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames 0.2%
• CVE-2026-3634 Low 3.9 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header 0.2%
• CVE-2026-3441 Medium 6.1 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file 0.2%
• CVE-2026-3442 Medium 6.1 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker 0.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2026-4105 Medium 6.7 Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method 0.1%
• CVE-2026-3099 Medium 5.8 Libsoup: libsoup: authentication bypass via digest authentication replay attack 0.4%