Known vulnerabilities in Red Hat Enterprise Linux 7
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-20889 | A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-5731 | Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and… | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-34714 | Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default… | 9.2 Critical | Mar 30, 2026 |
| CVE-2026-33937 | Handlebars provides the power necessary to let users build semantic templates | 9.8 Critical | Mar 27, 2026 |
| CVE-2026-4721 | Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and… | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4720 | Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4729 | Memory safety bugs present in Firefox 148 and Thunderbird 148 | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4700 | Mitigation bypass in the Networking: HTTP component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4696 | Use-after-free in the Layout: Text and Fonts component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4691 | Use-after-free in the CSS Parsing and Computation component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4692 | Sandbox escape in the Responsive Design Mode component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4689 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 10.0 Critical | Mar 24, 2026 |
| CVE-2026-4690 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4687 | Sandbox escape due to incorrect boundary conditions in the Telemetry component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4688 | Sandbox escape due to use-after-free in the Disability Access APIs component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-33186 | gRPC-Go is the Go language implementation of gRPC | 9.1 Critical | Mar 20, 2026 |
| CVE-2026-2807 | Memory safety bugs present in Firefox 147 and Thunderbird 147 | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2796 | JIT miscompilation in the JavaScript: WebAssembly component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2793 | Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and… | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2792 | Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2778 | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2776 | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2777 | Privilege escalation in the Messaging System component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2775 | Mitigation bypass in the DOM: HTML Parser component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2773 | Incorrect boundary conditions in the Web Audio component | 9.8 Critical | Feb 24, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430