Vulnerabilities of Red Hat Red Hat Hardened Images

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-86469	Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	5.3 Medium	Sep 7, 2026
CVE-2026-84838	Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()	7.8 High	Sep 2, 2026
CVE-2026-84837	Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path	7.8 High	Sep 2, 2026
CVE-2026-78409	Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks	7.0 High	Sep 2, 2026
CVE-2026-78410	Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection	7.8 High	Sep 2, 2026
CVE-2026-78408	Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority	7.9 High	Sep 2, 2026
CVE-2026-84233	Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames	7.0 High	Sep 1, 2026
CVE-2026-18743	A flaw was found in popt	2.5 Low	Sep 1, 2026
CVE-2026-13732	Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf	7.0 High	Aug 31, 2026
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Medium	Aug 28, 2026
CVE-2026-19685	Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)	7.1 High	Aug 24, 2026
CVE-2026-78367	Rpm: rpmbuild gettarspec() crafted tar member name → macro injection	7.0 High	Aug 24, 2026
CVE-2026-19582	In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary…	0.0 Not rated	Aug 20, 2026
CVE-2026-43961	Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution	7.8 High	Aug 19, 2026
CVE-2026-19617	Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	5.5 Medium	Aug 14, 2026
CVE-2026-19730	Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	4.2 Medium	Aug 13, 2026
CVE-2026-19548	Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	5.5 Medium	Aug 12, 2026
CVE-2026-72693	Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login	7.8 High	Aug 11, 2026
CVE-2026-15816	A flaw was found in dracut	7.5 High	Aug 7, 2026
CVE-2026-18938	A flaw was found in p11-kit	6.2 Medium	Aug 7, 2026
CVE-2026-19079	Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation	4.4 Medium	Aug 7, 2026
CVE-2026-18839	An integer underflow was found in the popt library when formatting help text for option tables that exceed the…	2.2 Low	Aug 5, 2026
CVE-2026-44605	A flaw was found in the RPM Package Manager (RPM)	5.5 Medium	Aug 5, 2026
CVE-2026-71227	A flaw was found in libkcapi	5.1 Medium	Aug 5, 2026
CVE-2026-71226	Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…	7.3 High	Aug 5, 2026

Other Red Hat products