Vulnérabilités connues pour Red Hat Enterprise Linux 7 Extended Lifecycle Support

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-6746	Use-after-free in the DOM: Core & HTML component	7.5 Élevée	21 avr. 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 Élevée	16 avr. 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 Élevée	13 avr. 2026
CVE-2026-4154	GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 Élevée	11 avr. 2026
CVE-2026-4153	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 Élevée	11 avr. 2026
CVE-2026-4150	GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 Élevée	11 avr. 2026
CVE-2026-34486	Exploitée Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	Non notée	9 avr. 2026
CVE-2026-29146	Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration	Non notée	9 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critique	7 avr. 2026
CVE-2026-5734	Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1	8.1 Élevée	7 avr. 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critique	7 avr. 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 Élevée	6 avr. 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critique	3 avr. 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 Élevée	3 avr. 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 Élevée	2 avr. 2026
CVE-2026-35092	A flaw was found in Corosync	7.5 Élevée	1 avr. 2026
CVE-2026-35091	A flaw was found in Corosync	8.2 Élevée	1 avr. 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 Élevée	31 mars 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 Élevée	30 mars 2026
CVE-2026-5119	Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment	5.9 Moyenne	30 mars 2026
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 Élevée	27 mars 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Moyenne	27 mars 2026
CVE-2026-27856	Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack	7.4 Élevée	27 mars 2026

Autres produits Red Hat