Known vulnerabilities in Red Hat Hardened Images

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-49975	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service…	Not rated	Jun 8, 2026
CVE-2026-42536	Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content…	Not rated	Jun 8, 2026
CVE-2026-44185	Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server…	Not rated	Jun 8, 2026
CVE-2026-34355	A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend	Not rated	Jun 8, 2026
CVE-2026-10732	All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when…	6.4 Medium	Jun 5, 2026
CVE-2026-41567	Moby is an open source container framework	7.2 High	Jun 5, 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Medium	Jun 4, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-5419	A flaw was found in gnutls	3.7 Low	Jun 1, 2026
CVE-2026-10118	Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication	7.8 High	Jun 1, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-46385	iskorotkov/avro is a fast Go Avro codec	8.7 High	May 29, 2026
CVE-2026-46384	iskorotkov/avro is a fast Go Avro codec	8.7 High	May 29, 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 High	May 28, 2026
CVE-2026-44604	Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command	7.0 High	May 28, 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 High	May 27, 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 High	May 27, 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 High	May 26, 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Medium	May 26, 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 High	May 26, 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 High	May 26, 2026
CVE-2026-48864	Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	7.8 High	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026

Other Red Hat products