Rhel Els (Redhat) - vulnerabilities (CVEs)

363 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-21. Vendor: Redhat.

CVEs of Rhel Els

CVE-2026-114406 - CVSS 6.8 (medium), 2026-10-21: The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of…
CVE-2026-18922 - CVSS 9.8 (critical), 2026-09-07: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed…
CVE-2026-18453 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote…
CVE-2026-18355 - CVSS 7.5 (high), 2026-09-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read…
CVE-2026-76560 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty…
CVE-2026-84268 - CVSS 8.8 (high), 2026-09-01: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length…
CVE-2026-83596 - CVSS 8.8 (high), 2026-08-31: A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
CVE-2026-78376 - CVSS 8.8 (high), 2026-08-24: A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory…
CVE-2026-18917 - CVSS 7.8 (high), 2026-08-20: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows…
CVE-2026-73433 - CVSS 6.6 (medium), 2026-08-12: A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a…
CVE-2026-73434 - CVSS 6.1 (medium), 2026-08-12: A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries…
CVE-2026-63622 - CVSS 7.8 (high), 2026-08-10: A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in…
CVE-2026-19387 - CVSS 7.6 (high), 2026-08-10: A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient…
CVE-2026-15816 - CVSS 7.5 (high), 2026-08-07: A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without…
CVE-2026-18649 - CVSS 7.5 (high), 2026-08-06: A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on…
CVE-2026-11770 - CVSS 7.5 (high), 2026-07-31: A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check…
CVE-2026-15722 - CVSS 7.5 (high), 2026-07-31: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters…
CVE-2026-16313 - CVSS 7.6 (high), 2026-07-28: A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control…
CVE-2026-15588 - CVSS 5.3 (medium), 2026-07-20: A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to…
CVE-2026-59692 - CVSS 7.5 (high), 2026-07-09: A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is…
CVE-2026-59691 - CVSS 7.1 (high), 2026-07-09: A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp…
CVE-2026-11610 - CVSS 8.8 (high), 2026-07-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF…
CVE-2026-14476 - CVSS 8 (high), 2026-07-07: A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath…
CVE-2026-14474 - CVSS 8.8 (high), 2026-07-07: A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory…
CVE-2026-58015 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context…
CVE-2026-58016 - CVSS 9.1 (critical), 2026-06-30: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed…
CVE-2026-58014 - CVSS 8.6 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
CVE-2026-58013 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a…
CVE-2026-58012 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change…
CVE-2026-58011 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
CVE-2026-58010 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
CVE-2026-12912 - CVSS 7.3 (high), 2026-06-29: A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue…
CVE-2026-13601 - CVSS 7.1 (high), 2026-06-29: A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can…
CVE-2026-53059 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable…
CVE-2026-52923 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can…
CVE-2026-56379 - CVSS 9.2 (critical), 2026-06-23: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing…
CVE-2026-56208 - CVSS 7.6 (high), 2026-06-19: A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode…
CVE-2026-12328 - CVSS 8.1 (high), 2026-06-16: Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed…
CVE-2026-12329 - CVSS 7.5 (high), 2026-06-16: Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.
CVE-2026-12299 - CVSS 7.5 (high), 2026-06-16: JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152,…
CVE-2026-12298 - CVSS 7.5 (high), 2026-06-16: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12290 - CVSS 8.1 (high), 2026-06-16: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12294 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12297 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR…
CVE-2026-12289 - CVSS 8.8 (high), 2026-06-16: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird…
CVE-2026-12292 - CVSS 8.1 (high), 2026-06-16: Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird…
CVE-2026-12296 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and…
CVE-2026-12291 - CVSS 8.8 (high), 2026-06-16: Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12295 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-42014 - CVSS 6.6 (medium), 2026-06-16: A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free…
CVE-2026-53705 - CVSS 7.6 (high), 2026-06-15: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer…
CVE-2026-52722 - CVSS 7.1 (high), 2026-06-15: A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer…
CVE-2026-52720 - CVSS 8.8 (high), 2026-06-15: A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than…
CVE-2026-8357 - CVSS 7.8 (high), 2026-06-15: LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening…
CVE-2026-54230 - CVSS 7.8 (high), 2026-06-13: A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell…
CVE-2026-54229 - CVSS 7 (high), 2026-06-13: A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls…
CVE-2026-54228 - CVSS 7.8 (high), 2026-06-13: A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and…
CVE-2026-47162 - CVSS 8.8 (high), 2026-06-11: Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the…
CVE-2026-11774 - CVSS 7.6 (high), 2026-06-11: An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a…
CVE-2026-53460 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for…
CVE-2026-49218 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in…
CVE-2026-46520 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple…
CVE-2026-46523 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image…
CVE-2026-46522 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing…
CVE-2026-45664 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing…
CVE-2026-45031 - CVSS 7.5 (high), 2026-06-10: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing…
CVE-2026-6893 - CVSS 7.5 (high), 2026-06-10: A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host…
CVE-2026-46529 - CVSS 8.4 (high), 2026-06-10: Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions…
CVE-2026-45447 - CVSS 8.8 (high), 2026-06-09: Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A…
CVE-2026-11788 - CVSS 7.5 (high), 2026-06-09: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an…
CVE-2026-50264 - CVSS 7.8 (high), 2026-06-05: An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple…
CVE-2026-50258 - CVSS 7.8 (high), 2026-06-05: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel *…
CVE-2026-50261 - CVSS 7.8 (high), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a…
CVE-2026-50260 - CVSS 7.8 (high), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers…
CVE-2026-50263 - CVSS 5.5 (medium), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window…
CVE-2026-50259 - CVSS 7.8 (high), 2026-06-05: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed…
CVE-2026-50262 - CVSS 5.5 (medium), 2026-06-05: An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a…
CVE-2026-50257 - CVSS 7.8 (high), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a…
CVE-2026-50256 - CVSS 7.8 (high), 2026-06-05: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name…
CVE-2026-27145 - CVSS 7.5 (high), 2026-06-02: (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused…
CVE-2026-46243 - CVSS 7.8 (high), 2026-06-01: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions…
CVE-2026-10118 - CVSS 7.8 (high), 2026-06-01: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered,…
CVE-2026-45700 - CVSS 9.8 (critical), 2026-05-29: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when…
CVE-2026-46181 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself…
CVE-2026-46116 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a…
CVE-2026-4408 - CVSS 9.8 (critical), 2026-05-28: A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password…
CVE-2026-46090 - CVSS 7.8 (high), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may…
CVE-2026-45984 - CVSS 7.8 (high), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data write path The inline data buffer head…
CVE-2026-45852 - CVSS 7.8 (high), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer…
CVE-2026-48962 - CVSS 7.8 (high), 2026-05-27: IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps…
CVE-2026-42015 - CVSS 5.3 (medium), 2026-05-26: A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the…
CVE-2026-42013 - CVSS 8.2 (high), 2026-05-26: A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall…
CVE-2026-42012 - CVSS 7.1 (high), 2026-05-26: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource…
CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
CVE-2026-4480 - CVSS 9.8 (critical), 2026-05-26: A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command"…
CVE-2026-39821 - CVSS 9.6 (critical), 2026-05-22: The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com")…
CVE-2026-5946 - CVSS 7.5 (high), 2026-05-20: Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`,…
CVE-2026-3039 - CVSS 7.5 (high), 2026-05-20: BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and…
CVE-2026-9064 - CVSS 7.5 (high), 2026-05-20: A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per…
CVE-2026-8975 - CVSS 8.8 (high), 2026-05-19: Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough…