Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-14242	Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing	6.5 Medium	Jan 14, 2026
CVE-2026-0716	Libsoup: out-of-bounds read in libsoup websocket frame processing	4.8 Medium	Jan 13, 2026
CVE-2026-0891	Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146	8.1 High	Jan 13, 2026
CVE-2026-0881	Sandbox escape in the Messaging System component	10.0 Critical	Jan 13, 2026
CVE-2026-0882	Use-after-free in the IPC component	8.8 High	Jan 13, 2026
CVE-2026-0879	Sandbox escape due to incorrect boundary conditions in the Graphics component	9.8 Critical	Jan 13, 2026
CVE-2026-0880	Sandbox escape due to integer overflow in the Graphics component	8.8 High	Jan 13, 2026
CVE-2026-0878	Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component	8.0 High	Jan 13, 2026
CVE-2026-0877	Mitigation bypass in the DOM: Security component	8.1 High	Jan 13, 2026
CVE-2026-0719	Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication	8.6 High	Jan 8, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2026-22184	zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under…	4.6 Medium	Jan 7, 2026
CVE-2025-43511	A use-after-free issue was addressed with improved memory management	6.5 Medium	Dec 12, 2025
CVE-2025-14523	Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)	8.2 High	Dec 11, 2025
CVE-2025-14512	Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow	6.5 Medium	Dec 11, 2025
CVE-2025-14087	Glib: glib: buffer underflow in gvariant parser leads to heap corruption	5.6 Medium	Dec 10, 2025
CVE-2025-14104	Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames	6.1 Medium	Dec 5, 2025
CVE-2025-66287	Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash	8.8 High	Dec 4, 2025
CVE-2025-13947	Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop	7.4 High	Dec 3, 2025
CVE-2025-12744	A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from…	8.8 High	Dec 3, 2025
CVE-2025-13601	Glib: integer overflow in in g_escape_uri_string()	7.7 High	Nov 26, 2025
CVE-2025-13502	Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos	7.5 High	Nov 25, 2025
CVE-2025-13193	Libvirt: information disclosure via world-readable vm snapshots	5.5 Medium	Nov 17, 2025
CVE-2025-12748	Libvirt: denial of service in xml parsing	5.5 Medium	Nov 11, 2025
CVE-2025-10230	Samba: command injection in wins server hook script	10.0 Critical	Nov 7, 2025

Other Red Hat products