Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Medium	Jan 26, 2026
CVE-2025-9615	Networkmanager: networkmanager file access	3.3 Low	Jan 26, 2026
CVE-2025-15059	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Jan 23, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2025-13878	Malformed BRID/HHIT records can cause `named` to terminate unexpectedly	7.5 High	Jan 21, 2026
CVE-2026-0988	Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()	3.7 Low	Jan 21, 2026
CVE-2026-21945	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Jan 20, 2026
CVE-2026-21932	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.4 High	Jan 20, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-23883	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23534	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-0992	Libxml2: libxml2: denial of service via crafted xml catalogs	2.9 Low	Jan 15, 2026
CVE-2026-0989	Libxml2: unbounded relaxng include recursion leading to stack overflow	3.7 Low	Jan 15, 2026
CVE-2026-0990	Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing	5.9 Medium	Jan 15, 2026
CVE-2026-22853	FreeRDP is a free implementation of the Remote Desktop Protocol	6.8 Medium	Jan 14, 2026
CVE-2025-14242	Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing	6.5 Medium	Jan 14, 2026
CVE-2026-0716	Libsoup: out-of-bounds read in libsoup websocket frame processing	4.8 Medium	Jan 13, 2026
CVE-2026-0891	Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146	8.1 High	Jan 13, 2026
CVE-2026-0881	Sandbox escape in the Messaging System component	10.0 Critical	Jan 13, 2026
CVE-2026-0882	Use-after-free in the IPC component	8.8 High	Jan 13, 2026
CVE-2026-0879	Sandbox escape due to incorrect boundary conditions in the Graphics component	9.8 Critical	Jan 13, 2026
CVE-2026-0880	Sandbox escape due to integer overflow in the Graphics component	8.8 High	Jan 13, 2026

Other Red Hat products