Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-52923	In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID…	7.8 High	Jun 24, 2026
CVE-2026-12892	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser	4.4 Medium	Jun 23, 2026
CVE-2026-12969	Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation	5.3 Medium	Jun 23, 2026
CVE-2026-56379	ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…	9.2 Critical	Jun 23, 2026
CVE-2026-55654	Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	3.7 Low	Jun 23, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-12549	Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver	4.8 Medium	Jun 22, 2026
CVE-2026-12725	Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	5.9 Medium	Jun 22, 2026
CVE-2026-3195	A flaw was found in QEMU	7.4 High	Jun 19, 2026
CVE-2026-3196	An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest	5.5 Medium	Jun 19, 2026
CVE-2026-52910	In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace…	7.8 High	Jun 19, 2026
CVE-2026-45696	OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture…	8.3 High	Jun 18, 2026
CVE-2026-11791	389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()	5.0 Medium	Jun 18, 2026
CVE-2026-12505	Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall	7.8 High	Jun 18, 2026
CVE-2026-12528	389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()	5.4 Medium	Jun 17, 2026
CVE-2026-2604	Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling	5.6 Medium	Jun 16, 2026
CVE-2026-4367	Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing	5.5 Medium	Jun 16, 2026
CVE-2026-10649	Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression	8.6 High	Jun 16, 2026
CVE-2026-12329	Memory safety bug fixed in Thunderbird ESR 140.12	5.3 Medium	Jun 16, 2026
CVE-2026-12328	Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…	8.1 High	Jun 16, 2026
CVE-2026-12326	Memory safety bugs present in Firefox 151 and Thunderbird 151	8.1 High	Jun 16, 2026
CVE-2026-12299	JIT miscompilation in the DOM: Core & HTML component	5.4 Medium	Jun 16, 2026
CVE-2026-12298	Memory safety bug fixed in Thunderbird 152	5.4 Medium	Jun 16, 2026
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026

Other Red Hat products