Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-40918	Gimp: gimp: denial of service via crafted pvr image file	5.5 Medium	Apr 15, 2026
CVE-2026-40917	Gimp: gimp: application crashes or information disclosure via crafted icns image files	5.0 Medium	Apr 15, 2026
CVE-2026-40916	Gimp: gimp: denial of service due to stack buffer overflow in tim image loader	5.0 Medium	Apr 15, 2026
CVE-2026-40915	Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader	5.5 Medium	Apr 15, 2026
CVE-2026-6245	Sssd: out-of-bounds read in the sssd	5.5 Medium	Apr 15, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-33908	ImageMagick is free and open-source software used for editing and manipulating digital images	7.5 High	Apr 13, 2026
CVE-2026-33901	ImageMagick is free and open-source software used for editing and manipulating digital images	7.5 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-31419	In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in…	7.8 High	Apr 13, 2026
CVE-2026-32146	Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system…	8.3 High	Apr 11, 2026
CVE-2026-4152	GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4151	GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-34486	Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	Not rated	Apr 9, 2026
CVE-2026-29146	Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration	Not rated	Apr 9, 2026
CVE-2026-1584	Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder	7.5 High	Apr 9, 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Medium	Apr 9, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critical	Apr 7, 2026
CVE-2025-14821	Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows	7.8 High	Apr 7, 2026
CVE-2026-4631	Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection	9.8 Critical	Apr 7, 2026
CVE-2026-5745	Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	5.5 Medium	Apr 7, 2026
CVE-2026-20911	A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and…	9.8 Critical	Apr 7, 2026

Other Red Hat products