Vulnerabilities of Red Hat Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-45898	In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing…	9.8 Critical	May 27, 2026
CVE-2026-8450	HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()	9.1 Critical	May 27, 2026
CVE-2026-4480	Samba: samba: remote code execution in printing subsystem via unescaped job description	9.0 Critical	May 26, 2026
CVE-2026-42496	Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction…	9.1 Critical	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-43501	In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when…	9.8 Critical	May 21, 2026
CVE-2026-8631	A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software	9.3 Critical	May 20, 2026
CVE-2026-33278	NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables…	9.1 Critical	May 20, 2026
CVE-2026-8948	Same-origin policy bypass in the DOM: Networking component	9.1 Critical	May 19, 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critical	May 12, 2026
CVE-2026-6722	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP…	9.5 Critical	May 10, 2026
CVE-2026-8094	Other issue in the WebRTC component	9.8 Critical	May 7, 2026
CVE-2026-8091	Incorrect boundary conditions in the Audio/Video: Playback component	9.8 Critical	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43125	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The…	9.8 Critical	May 6, 2026
CVE-2026-43114	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return…	9.4 Critical	May 6, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critical	May 1, 2026
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critical	Apr 24, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critical	Apr 7, 2026
CVE-2026-4631	Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection	9.8 Critical	Apr 7, 2026
CVE-2026-20911	A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and…	9.8 Critical	Apr 7, 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026

Other Red Hat products