Vulnerabilities of Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-34000	Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.	6.1 Medium	May 5, 2026
CVE-2026-43964	Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…	3.7 Low	May 4, 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 High	Apr 30, 2026
CVE-2026-3833	Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	6.5 Medium	Apr 30, 2026
CVE-2026-7323	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0	7.3 High	Apr 28, 2026
CVE-2026-7322	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0	7.3 High	Apr 28, 2026
CVE-2026-7320	Information disclosure due to incorrect boundary conditions in the Audio/Video component	7.5 High	Apr 28, 2026
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critical	Apr 24, 2026
CVE-2026-34003	Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access	7.8 High	Apr 23, 2026
CVE-2026-34001	Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption	7.8 High	Apr 23, 2026
CVE-2026-33999	Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling	7.8 High	Apr 23, 2026
CVE-2026-41651	PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a…	8.8 High	Apr 22, 2026
CVE-2026-22016	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-6786	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6785	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and…	7.5 High	Apr 21, 2026
CVE-2026-6754	Use-after-free in the JavaScript Engine component	7.5 High	Apr 21, 2026
CVE-2026-6752	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6753	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6751	Uninitialized memory in the Audio/Video: Web Codecs component	7.3 High	Apr 21, 2026
CVE-2026-6750	Privilege escalation in the Graphics: WebRender component	8.8 High	Apr 21, 2026
CVE-2026-6749	Information disclosure due to uninitialized memory in the Graphics: Canvas2D component	7.5 High	Apr 21, 2026
CVE-2026-6747	Use-after-free in the WebRTC component	7.5 High	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026

Other Red Hat products