Vulnerabilities of Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-56379 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows… | 9.2 Critical | Jun 23, 2026 |
| CVE-2026-56208 | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | 7.6 High | Jun 19, 2026 |
| CVE-2026-10649 | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression | 8.6 High | Jun 16, 2026 |
| CVE-2026-12329 | Memory safety bug fixed in Thunderbird ESR 140.12 | 5.3 Medium | Jun 16, 2026 |
| CVE-2026-12328 | Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… | 8.1 High | Jun 16, 2026 |
| CVE-2026-12299 | JIT miscompilation in the DOM: Core & HTML component | 5.4 Medium | Jun 16, 2026 |
| CVE-2026-12298 | Memory safety bug fixed in Thunderbird 152 | 5.4 Medium | Jun 16, 2026 |
| CVE-2026-12297 | Sandbox escape due to incorrect boundary conditions in the Networking component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12296 | Sandbox escape in the Security: Process Sandboxing component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12295 | Sandbox escape in the DOM: Navigation component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12294 | Sandbox escape in the DOM: Workers component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12292 | Incorrect boundary conditions in the Web Audio component | 8.1 High | Jun 16, 2026 |
| CVE-2026-12291 | Use-after-free in the Networking: HTTP component | 8.8 High | Jun 16, 2026 |
| CVE-2026-12290 | Memory safety bug fixed in Thunderbird 152 | 8.1 High | Jun 16, 2026 |
| CVE-2026-12289 | Privilege escalation in the Graphics: WebRender component | 8.8 High | Jun 16, 2026 |
| CVE-2026-42014 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | 6.6 Medium | Jun 16, 2026 |
| CVE-2026-52722 | Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling | 7.1 High | Jun 15, 2026 |
| CVE-2026-52720 | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb | 8.8 High | Jun 15, 2026 |
| CVE-2026-53705 | A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good | 7.6 High | Jun 15, 2026 |
| CVE-2026-8357 | LibreOffice Calc compiles cell formulas when opening a spreadsheet | 5.4 Medium | Jun 15, 2026 |
| CVE-2026-54230 | Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites | 7.0 High | Jun 13, 2026 |
| CVE-2026-54229 | Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking | 7.0 High | Jun 13, 2026 |
| CVE-2026-54228 | Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories | 7.8 High | Jun 13, 2026 |
| CVE-2026-47162 | Vim is an open source, command line text editor | 7.3 High | Jun 11, 2026 |
| CVE-2026-11774 | 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow | 7.6 High | Jun 11, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433