Vulnerabilities of Red Hat Red Hat Hardened Images

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 High	Mar 17, 2026
CVE-2026-3441	Binutils: gnu binutils: information disclosure via specially crafted xcoff object file	6.1 Medium	Mar 15, 2026
CVE-2026-3442	Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker	6.1 Medium	Mar 15, 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 High	Mar 13, 2026
CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method	6.7 Medium	Mar 13, 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-28364	In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables…	7.9 High	Feb 27, 2026
CVE-2026-21863	Valkey is a distributed key-value database	7.5 High	Feb 23, 2026
CVE-2026-24734	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat	Not rated	Feb 17, 2026
CVE-2026-2007	Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string	8.2 High	Feb 12, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2026-26157	Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization	7.0 High	Feb 11, 2026
CVE-2026-26158	Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries	7.0 High	Feb 11, 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 High	Feb 10, 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 High	Feb 10, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 High	Feb 5, 2026
CVE-2026-1757	Libxml2: memory leak leading to local denial of service in xmllint interactive shell	6.2 Medium	Feb 2, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 High	Jan 28, 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 High	Jan 28, 2026

Other Red Hat products