Vulnérabilités de Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-46116	In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in…	7.8 Élevée	28 mai 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critique	28 mai 2026
CVE-2026-46090	In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during…	7.8 Élevée	27 mai 2026
CVE-2026-45984	In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data…	7.8 Élevée	27 mai 2026
CVE-2026-45852	In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In…	7.8 Élevée	27 mai 2026
CVE-2026-48962	IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled…	7.3 Élevée	27 mai 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 Élevée	26 mai 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Moyenne	26 mai 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 Élevée	26 mai 2026
CVE-2026-48864	Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	7.8 Élevée	26 mai 2026
CVE-2026-4480	Samba: samba: remote code execution in printing subsystem via unescaped job description	9.0 Critique	26 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-5946	Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet…	7.5 Élevée	20 mai 2026
CVE-2026-3039	BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive…	7.5 Élevée	20 mai 2026
CVE-2026-9064	389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)	7.5 Élevée	20 mai 2026
CVE-2026-8975	Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150	8.8 Élevée	19 mai 2026
CVE-2026-8947	Use-after-free in the DOM: Bindings (WebIDL) component	7.3 Élevée	19 mai 2026
CVE-2026-8946	Incorrect boundary conditions in the Audio/Video: Web Codecs component	7.5 Élevée	19 mai 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 Élevée	18 mai 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Moyenne	14 mai 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 Élevée	14 mai 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 Élevée	14 mai 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critique	12 mai 2026
CVE-2026-42006	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP	4.3 Moyenne	12 mai 2026
CVE-2026-8391	Other issue in the JavaScript Engine component	5.3 Moyenne	12 mai 2026

Autres produits Red Hat