Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-34486	Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	Not rated	Apr 9, 2026
CVE-2026-29146	Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration	Not rated	Apr 9, 2026
CVE-2026-1584	Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder	7.5 High	Apr 9, 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Medium	Apr 9, 2026
CVE-2025-14821	Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows	7.8 High	Apr 7, 2026
CVE-2026-5745	Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	5.5 Medium	Apr 7, 2026
CVE-2026-20911	A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and…	9.8 Critical	Apr 7, 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026
CVE-2026-20889	A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b	9.8 Critical	Apr 7, 2026
CVE-2026-24660	A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b	8.1 High	Apr 7, 2026
CVE-2026-5735	Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1	8.1 High	Apr 7, 2026
CVE-2026-5734	Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1	8.1 High	Apr 7, 2026
CVE-2026-5733	Incorrect boundary conditions in the Graphics: WebGPU component	8.8 High	Apr 7, 2026
CVE-2026-5732	Incorrect boundary conditions, integer overflow in the Graphics: Text component	8.8 High	Apr 7, 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critical	Apr 7, 2026
CVE-2026-34589	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Apr 6, 2026
CVE-2026-34588	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.6 High	Apr 6, 2026
CVE-2026-34379	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	7.1 High	Apr 6, 2026
CVE-2026-5704	Tar: tar: hidden file injection via crafted archives	5.0 Medium	Apr 6, 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 High	Apr 6, 2026
CVE-2026-5673	Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing	5.6 Medium	Apr 6, 2026
CVE-2026-34545	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Apr 1, 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 High	Apr 1, 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 High	Mar 31, 2026
CVE-2026-33986	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026

Other Red Hat products