Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-109970	Clevis: clevis: pkcs#11 token pin written to world-readable file	4.7 Medium	Oct 14, 2026
CVE-2026-109969	Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask	4.7 Medium	Oct 14, 2026
CVE-2026-100231	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters	6.1 Medium	Oct 14, 2026
CVE-2026-86476	Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize	8.4 High	Oct 14, 2026
CVE-2026-110036	Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices	3.3 Low	Oct 13, 2026
CVE-2026-105460	Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()	5.5 Medium	Oct 13, 2026
CVE-2026-109976	Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection	4.7 Medium	Oct 13, 2026
CVE-2026-109854	M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding	2.5 Low	Oct 13, 2026
CVE-2026-108094	Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path	7.8 High	Oct 12, 2026
CVE-2026-108093	Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading	5.5 Medium	Oct 9, 2026
CVE-2026-108063	Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry	5.5 Medium	Oct 9, 2026
CVE-2026-107655	Cups: null pointer dereference via embedded job ticket comments allows remote denial of service	4.0 Medium	Oct 9, 2026
CVE-2026-107651	Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader	5.5 Medium	Oct 8, 2026
CVE-2026-107565	Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption	5.1 Medium	Oct 8, 2026
CVE-2026-107161	Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients	7.5 High	Oct 7, 2026
CVE-2026-106067	Gimp: gimp: heap buffer overflow in hot color filter on oversized image	6.3 Medium	Oct 7, 2026
CVE-2026-106066	Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions	6.3 Medium	Oct 7, 2026
CVE-2026-106065	Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions	6.3 Medium	Oct 7, 2026
CVE-2026-107169	M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8	6.2 Medium	Oct 7, 2026
CVE-2026-107167	M17n-lib: heap use-after-free write in re_init_ic()	6.2 Medium	Oct 7, 2026
CVE-2026-106064	Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions	6.3 Medium	Oct 7, 2026
CVE-2026-107170	M17n-lib: null dereference in minput_open_im() after failed m17n_init()	2.9 Low	Oct 7, 2026
CVE-2026-107168	M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()	6.2 Medium	Oct 7, 2026
CVE-2026-106061	Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file	5.5 Medium	Oct 7, 2026
CVE-2026-80048	Sssd: sssd-kcm: local denial of service via excessive memory preallocation	Not rated	Oct 6, 2026

Other Red Hat products