Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-112210	A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc	6.0 Medium	Oct 19, 2026
CVE-2026-89096	Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd	5.9 Medium	Oct 16, 2026
CVE-2026-89088	Parted: parted: denial of service via heap buffer overflow during fat16 resize	5.5 Medium	Oct 16, 2026
CVE-2026-89085	Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image	6.6 Medium	Oct 16, 2026
CVE-2026-111802	Nautilus: nautilus: arbitrary file deletion via trash symlink	6.6 Medium	Oct 16, 2026
CVE-2026-17591	Libarchive: libarchive: use-after-free via aliased mac metadata copy	3.6 Low	Oct 16, 2026
CVE-2026-62438	Gimp: gimp: paa integer overflow out-of-bounds read	6.1 Medium	Oct 16, 2026
CVE-2026-62439	Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability	7.0 High	Oct 16, 2026
CVE-2026-85977	Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding	5.3 Medium	Oct 16, 2026
CVE-2026-85231	Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding	6.5 Medium	Oct 16, 2026
CVE-2026-89098	Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd	5.5 Medium	Oct 16, 2026
CVE-2026-111581	Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method	3.3 Low	Oct 16, 2026
CVE-2026-111555	Luksmeta: missing slot-range validation permits out-of-gap device i/o	6.0 Medium	Oct 16, 2026
CVE-2026-105958	Spice-server: spice: heap oob read/write via unchecked migration data offsets	7.5 High	Oct 16, 2026
CVE-2026-105959	Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation	7.5 High	Oct 16, 2026
CVE-2026-104715	Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	7.8 High	Oct 16, 2026
CVE-2026-110927	A flaw was found in OpenSSH	4.3 Medium	Oct 15, 2026
CVE-2026-110924	A flaw was found in OpenSSH	4.8 Medium	Oct 15, 2026
CVE-2026-110926	A flaw was found in OpenSSH	5.3 Medium	Oct 15, 2026
CVE-2026-110925	A flaw was found in OpenSSH	5.4 Medium	Oct 15, 2026
CVE-2026-110923	A flaw was found in OpenSSH	6.5 Medium	Oct 15, 2026
CVE-2026-110777	Evolution-data-server: local file disclosure via attach file:// uris	5.7 Medium	Oct 14, 2026
CVE-2026-109968	Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file	5.5 Medium	Oct 14, 2026
CVE-2026-100229	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check	6.5 Medium	Oct 14, 2026
CVE-2026-109971	Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool	4.7 Medium	Oct 14, 2026

Other Red Hat products