Red Hat Red Hat Hardened Images

• CVE-2026-6732 Medium 6.5 Libxml2: libxml2: denial of service via crafted xsd-validated document 0.6%
• CVE-2026-6862 Medium 5.5 Efivar: efivar: denial of service due to stack overflow in device path node parsing 0.1%
• CVE-2026-6846 High 7.8 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing 0.2%
• CVE-2026-6844 Medium 5.5 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files 0.1%
• CVE-2026-6845 Medium 5.0 Binutils: binutils: denial of service via crafted elf file 0.1%
• CVE-2026-1584 High 7.5 Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 1.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2025-14821 High 7.8 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows 0.1%
• CVE-2026-5745 Medium 5.5 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 0.2%
• CVE-2026-5704 Medium 5.0 Tar: tar: hidden file injection via crafted archives 0.4%
• CVE-2026-3184 Low 3.7 Util-linux: util-linux: access control bypass due to improper hostname canonicalization 0.4%
• CVE-2026-2625 Medium 4.0 Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification <0.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-0965 Low 3.3 Libssh: libssh: denial of service via improper configuration file handling 0.2%
• CVE-2026-0967 Low 2.2 Libssh: libssh: denial of service via inefficient regular expression processing 0.2%
• CVE-2026-0968 Low 3.1 Libssh: libssh: denial of service due to malformed sftp message 0.5%
• CVE-2026-0964 Medium 5.0 Libssh: improper sanitation of paths received from scp servers 0.4%
• CVE-2026-0966 Medium 6.5 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 0.6%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-4897 Medium 5.5 Polkit: polkit: denial of service via unbounded input processing through standard input 0.2%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-4647 Medium 6.1 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library 0.2%
• CVE-2026-4426 Medium 6.5 Libarchive: libarchive: denial of service via malformed iso file processing 0.3%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-3441 Medium 6.1 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file 0.2%
• CVE-2026-3442 Medium 6.1 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker 0.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2026-4105 Medium 6.7 Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method 0.1%
• CVE-2026-26158 High 7.0 Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries 0.2%
• CVE-2026-26157 High 7.0 Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization 0.7%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1757 Medium 6.2 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 0.2%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2026-0988 Low 3.7 Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek() 0.4%
• CVE-2026-0992 Low 2.9 Libxml2: libxml2: denial of service via crafted xml catalogs 0.5%
• CVE-2026-0989 Low 3.7 Libxml2: unbounded relaxng include recursion leading to stack overflow 0.5%
• CVE-2026-0990 Medium 5.9 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 1.0%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-11731 Low 3.1 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 0.3%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-9900 High 8.8 Libtiff: libtiff write-what-where 1.0%
• CVE-2025-9566 High 8.1 Podman: podman kube play command may overwrite host files 1.2%
• CVE-2025-7424 High 7.5 Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes 1.3%
• CVE-2025-7425 High 7.8 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr 0.4%
• CVE-2025-32990 Medium 6.5 Gnutls: vulnerability in gnutls certtool template parsing 0.9%
• CVE-2025-32989 Medium 5.3 Gnutls: vulnerability in gnutls sct extension parsing 1.5%
• CVE-2025-32988 Medium 6.5 Gnutls: vulnerability in gnutls othername san export 1.5%