Vulnerabilities of Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-18922	A flaw was found in 389 Directory Server	9.8 Critical	Sep 7, 2026
CVE-2026-76578	Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci	9.8 Critical	Sep 7, 2026
CVE-2026-11861	Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships	9.6 Critical	Aug 20, 2026
CVE-2026-56379	ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…	9.2 Critical	Jun 23, 2026
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critical	May 28, 2026
CVE-2026-4480	Samba: samba: remote code execution in printing subsystem via unescaped job description	9.0 Critical	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critical	May 12, 2026
CVE-2026-8094	Other issue in the WebRTC component	9.8 Critical	May 7, 2026
CVE-2026-8091	Incorrect boundary conditions in the Audio/Video: Playback component	9.8 Critical	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43125	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The…	9.8 Critical	May 6, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critical	Apr 24, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critical	Apr 7, 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critical	Apr 7, 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critical	Apr 3, 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critical	Mar 26, 2026
CVE-2026-4721	Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…	9.8 Critical	Mar 24, 2026
CVE-2026-4720	Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148	9.8 Critical	Mar 24, 2026

Other Red Hat products