Known vulnerabilities in Red Hat JBoss Core Services

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-49975	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service…	Not rated	Jun 8, 2026
CVE-2026-42536	Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content…	Not rated	Jun 8, 2026
CVE-2026-23918	Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol	Not rated	May 4, 2026
CVE-2026-6732	Libxml2: libxml2: denial of service via crafted xsd-validated document	6.5 Medium	Apr 23, 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Not rated	Apr 22, 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 High	Mar 25, 2026
CVE-2026-3234	Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection	4.3 Medium	Mar 12, 2026
CVE-2026-1757	Libxml2: memory leak leading to local denial of service in xmllint interactive shell	6.2 Medium	Feb 2, 2026
CVE-2026-0992	Libxml2: libxml2: denial of service via crafted xml catalogs	2.9 Low	Jan 15, 2026
CVE-2026-0989	Libxml2: unbounded relaxng include recursion leading to stack overflow	3.7 Low	Jan 15, 2026
CVE-2026-0990	Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing	5.9 Medium	Jan 15, 2026
CVE-2026-22184	zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under…	4.6 Medium	Jan 7, 2026
CVE-2025-6170	Libxml2: stack buffer overflow in xmllint interactive shell command handling	2.5 Low	Jun 16, 2025
CVE-2024-10306	A vulnerability was found in mod_proxy_cluster	5.4 Medium	Apr 23, 2025
CVE-2023-6710	Mod_cluster/mod_proxy_cluster: stored cross site scripting	5.4 Medium	Dec 12, 2023
CVE-2006-4339	Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass	9.1 Critical	Sep 5, 2006

Other Red Hat products