Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-8390	Use-after-free in the JavaScript: WebAssembly component	7.3 High	May 12, 2026
CVE-2026-8389	JIT miscompilation in the JavaScript Engine: JIT component	8.8 High	May 12, 2026
CVE-2026-8388	Incorrect boundary conditions in the JavaScript Engine: JIT component	6.5 Medium	May 12, 2026
CVE-2026-28901	The issue was addressed with improved memory handling	4.3 Medium	May 11, 2026
CVE-2026-28946	A use-after-free issue was addressed with improved memory management	6.5 Medium	May 11, 2026
CVE-2026-28947	A use-after-free issue was addressed with improved memory management	8.8 High	May 11, 2026
CVE-2026-43658	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28905	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28883	A use-after-free issue was addressed with improved memory management	7.5 High	May 11, 2026
CVE-2026-28904	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28953	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28903	The issue was addressed with improved memory handling	6.5 Medium	May 11, 2026
CVE-2026-28942	A use-after-free issue was addressed with improved memory management	6.5 Medium	May 11, 2026
CVE-2026-28902	The issue was addressed with improved memory handling	6.5 Medium	May 11, 2026
CVE-2026-28847	The issue was addressed with improved memory handling	8.8 High	May 11, 2026
CVE-2026-28955	The issue was addressed with improved memory handling	8.8 High	May 11, 2026
CVE-2026-5172	A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read…	7.3 High	May 11, 2026
CVE-2026-4892	A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute…	8.4 High	May 11, 2026
CVE-2026-4891	A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a…	5.3 Medium	May 11, 2026
CVE-2026-4890	A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of…	7.5 High	May 11, 2026
CVE-2026-4802	Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui	8.0 High	May 11, 2026
CVE-2026-43500	In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged…	7.8 High	May 11, 2026
CVE-2026-8177	XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing…	7.5 High	May 10, 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Low	May 10, 2026
CVE-2026-7263	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly,…	6.3 Medium	May 10, 2026

Other Red Hat products