Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33986	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Medium	Mar 30, 2026
CVE-2026-34714	Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default…	9.2 Critical	Mar 30, 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 High	Mar 30, 2026
CVE-2026-5119	Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment	5.9 Medium	Mar 30, 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 High	Mar 27, 2026
CVE-2026-33940	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33939	Handlebars provides the power necessary to let users build semantic templates	7.5 High	Mar 27, 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-24031	Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin	7.7 High	Mar 27, 2026
CVE-2026-4948	Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	5.5 Medium	Mar 27, 2026
CVE-2026-0965	Libssh: libssh: denial of service via improper configuration file handling	3.3 Low	Mar 26, 2026
CVE-2026-0967	Libssh: libssh: denial of service via inefficient regular expression processing	2.2 Low	Mar 26, 2026
CVE-2026-0968	Libssh: libssh: denial of service due to malformed sftp message	3.1 Low	Mar 26, 2026
CVE-2026-0964	Libssh: improper sanitation of paths received from scp servers	5.0 Medium	Mar 26, 2026
CVE-2026-0966	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	6.5 Medium	Mar 26, 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Medium	Mar 26, 2026
CVE-2026-2239	Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow	2.8 Low	Mar 26, 2026
CVE-2026-2272	Gimp: gimp: memory corruption due to integer overflow in ico file handling	4.3 Medium	Mar 26, 2026
CVE-2026-2271	Gimp: gimp: denial of service via crafted psp image file	3.3 Low	Mar 26, 2026
CVE-2026-2436	Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake	6.5 Medium	Mar 26, 2026
CVE-2026-4897	Polkit: polkit: denial of service via unbounded input processing through standard input	5.5 Medium	Mar 26, 2026
CVE-2026-4887	Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image	6.1 Medium	Mar 26, 2026

Other Red Hat products