Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-38993	Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component	6.5 Medium	Apr 29, 2026
CVE-2026-7324	Memory safety bugs present in Thunderbird 150.0.0	7.3 High	Apr 28, 2026
CVE-2026-7323	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0	7.3 High	Apr 28, 2026
CVE-2026-7322	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0	7.3 High	Apr 28, 2026
CVE-2026-7320	Information disclosure due to incorrect boundary conditions in the Audio/Video component	7.5 High	Apr 28, 2026
CVE-2026-31663	In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish…	7.8 High	Apr 24, 2026
CVE-2026-31641	In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds…	7.8 High	Apr 24, 2026
CVE-2026-31617	In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in…	5.5 Medium	Apr 24, 2026
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critical	Apr 24, 2026
CVE-2026-41316	ERB is a templating system for Ruby	8.1 High	Apr 24, 2026
CVE-2026-6732	Libxml2: libxml2: denial of service via crafted xsd-validated document	6.5 Medium	Apr 23, 2026
CVE-2026-2708	Libsoup: libsoup: http request smuggling via duplicate content-length headers	3.7 Low	Apr 23, 2026
CVE-2026-34003	Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access	7.8 High	Apr 23, 2026
CVE-2026-34001	Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption	7.8 High	Apr 23, 2026
CVE-2026-33999	Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling	7.8 High	Apr 23, 2026
CVE-2025-66286	Webkitgtk: authorization bypass through webpage::send-request signal handler	4.7 Medium	Apr 23, 2026
CVE-2025-13763	Libopensc: opensc: multiple uses of uninitialized variable	5.7 Medium	Apr 23, 2026
CVE-2026-31488	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode…	7.8 High	Apr 22, 2026
CVE-2026-31474	In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in…	7.8 High	Apr 22, 2026
CVE-2026-6862	Efivar: efivar: denial of service due to stack overflow in device path node parsing	5.5 Medium	Apr 22, 2026
CVE-2026-6861	Emacs: emacs: memory corruption vulnerability when processing svg css	6.1 Medium	Apr 22, 2026
CVE-2026-41651	PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a…	8.8 High	Apr 22, 2026
CVE-2026-6846	Binutils: binutils: arbitrary code execution via malformed xcoff object file processing	7.8 High	Apr 22, 2026
CVE-2026-6844	Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files	5.5 Medium	Apr 22, 2026
CVE-2026-6843	Nano: nano: format string vulnerability leads to denial of service	5.5 Medium	Apr 22, 2026

Other Red Hat products