Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-12293	Use-after-free in the Graphics: WebGPU component	9.8 Critical	Jun 16, 2026
CVE-2026-12292	Incorrect boundary conditions in the Web Audio component	8.1 High	Jun 16, 2026
CVE-2026-12291	Use-after-free in the Networking: HTTP component	8.8 High	Jun 16, 2026
CVE-2026-12290	Memory safety bug fixed in Thunderbird 152	8.1 High	Jun 16, 2026
CVE-2026-12289	Privilege escalation in the Graphics: WebRender component	8.8 High	Jun 16, 2026
CVE-2026-46331	In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page…	7.8 High	Jun 16, 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Medium	Jun 16, 2026
CVE-2026-52718	Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion	6.5 Medium	Jun 15, 2026
CVE-2026-52722	Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling	7.1 High	Jun 15, 2026
CVE-2026-52720	Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb	8.8 High	Jun 15, 2026
CVE-2026-52721	Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing	5.3 Medium	Jun 15, 2026
CVE-2026-52719	Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder	7.1 High	Jun 15, 2026
CVE-2026-8357	LibreOffice Calc compiles cell formulas when opening a spreadsheet	5.4 Medium	Jun 15, 2026
CVE-2026-6040	A heap use-after-free existed when importing the blank-width characters of an ODF number format	5.4 Medium	Jun 15, 2026
CVE-2026-54231	Abrt: unsanitized systemd journal content written to dump directory files enables content injection	5.5 Medium	Jun 13, 2026
CVE-2026-54230	Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites	7.0 High	Jun 13, 2026
CVE-2026-54229	Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking	7.0 High	Jun 13, 2026
CVE-2026-54228	Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories	7.8 High	Jun 13, 2026
CVE-2026-48914	Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling	6.7 Medium	Jun 12, 2026
CVE-2026-52860	Vim is an open source, command line text editor	7.5 High	Jun 11, 2026
CVE-2026-47162	Vim is an open source, command line text editor	7.3 High	Jun 11, 2026
CVE-2026-11774	389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow	7.6 High	Jun 11, 2026

Other Red Hat products