Vulnerabilities of Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-4688	Sandbox escape due to use-after-free in the Disability Access APIs component	9.6 Critical	Mar 24, 2026
CVE-2026-4685	Incorrect boundary conditions in the Graphics: Canvas2D component	7.5 High	Mar 24, 2026
CVE-2026-4686	Incorrect boundary conditions in the Graphics: Canvas2D component	7.5 High	Mar 24, 2026
CVE-2026-4684	Race condition, use-after-free in the Graphics: WebRender component	7.5 High	Mar 24, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 High	Mar 20, 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 High	Mar 19, 2026
CVE-2006-10003	XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack	9.8 Critical	Mar 19, 2026
CVE-2026-4177	YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity…	9.1 Critical	Mar 16, 2026
CVE-2026-2921	GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-3083	GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3085	GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3082	GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-31806	FreeRDP is a free implementation of the Remote Desktop Protocol	9.3 Critical	Mar 13, 2026
CVE-2023-43010	The issue was addressed with improved memory handling	8.8 High	Mar 12, 2026
CVE-2026-23868	Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect…	5.1 Medium	Mar 10, 2026
CVE-2026-28693	ImageMagick is free and open-source software used for editing and manipulating digital images	8.1 High	Mar 9, 2026
CVE-2026-28691	ImageMagick is free and open-source software used for editing and manipulating digital images	7.5 High	Mar 9, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-26965	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026
CVE-2026-26955	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026
CVE-2026-2793	Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and…	9.8 Critical	Feb 24, 2026
CVE-2026-2792	Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147	9.8 Critical	Feb 24, 2026
CVE-2026-2778	Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component	10.0 Critical	Feb 24, 2026
CVE-2026-2776	Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software	10.0 Critical	Feb 24, 2026

Other Red Hat products