Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2759	Incorrect boundary conditions in the Graphics: ImageLib component	9.8 Critical	Feb 24, 2026
CVE-2026-2758	Use-after-free in the JavaScript: GC component	9.8 Critical	Feb 24, 2026
CVE-2026-2757	Incorrect boundary conditions in the WebRTC: Audio/Video component	9.8 Critical	Feb 24, 2026
CVE-2026-25794	ImageMagick is free and open-source software used for editing and manipulating digital images	8.2 High	Feb 24, 2026
CVE-2026-2048	GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2047	GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2045	GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2044	GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-0797	GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2243	Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing	5.1 Medium	Feb 19, 2026
CVE-2026-0665	An off-by-one error was found in QEMU's KVM Xen guest support	6.5 Medium	Feb 18, 2026
CVE-2025-8860	A flaw was found in QEMU in the uefi-vars virtual device	3.3 Low	Feb 18, 2026
CVE-2025-14876	A flaw was found in the virtio-crypto device of QEMU	5.5 Medium	Feb 18, 2026
CVE-2025-1272	The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode…	7.7 High	Feb 18, 2026
CVE-2025-0577	An insufficient entropy vulnerability was found in glibc	4.8 Medium	Feb 18, 2026
CVE-2026-22860	Rack is a modular Ruby web server interface	7.5 High	Feb 18, 2026
CVE-2026-24734	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat	Not rated	Feb 17, 2026
CVE-2026-23185	In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk…	7.8 High	Feb 14, 2026
CVE-2026-23111	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check…	7.8 High	Feb 13, 2026
CVE-2026-2443	Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure	5.3 Medium	Feb 13, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2026-20644	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-20652	The issue was addressed with improved memory handling	7.5 High	Feb 11, 2026

Other Red Hat products