Vulnérabilités connues pour Red Hat Enterprise Linux 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-43618	Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit…	6.1 Moyenne	20 mai 2026
CVE-2026-8975	Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150	8.8 Élevée	19 mai 2026
CVE-2026-8973	Memory safety bugs present in Thunderbird 150	8.8 Élevée	19 mai 2026
CVE-2026-8948	Same-origin policy bypass in the DOM: Networking component	9.1 Critique	19 mai 2026
CVE-2026-8947	Use-after-free in the DOM: Bindings (WebIDL) component	7.3 Élevée	19 mai 2026
CVE-2026-8946	Incorrect boundary conditions in the Audio/Video: Web Codecs component	7.5 Élevée	19 mai 2026
CVE-2026-8945	Sandbox escape in Firefox and Firefox Focus for Android	7.5 Élevée	19 mai 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 Élevée	18 mai 2026
CVE-2026-46333	In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The…	7.1 Élevée	15 mai 2026
CVE-2025-54518	Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to…	7.3 Élevée	15 mai 2026
CVE-2026-34253	A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in…	8.2 Élevée	15 mai 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Moyenne	14 mai 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 Élevée	14 mai 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 Élevée	14 mai 2026
CVE-2026-45109	Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes	7.5 Élevée	13 mai 2026
CVE-2026-44579	Next.js is a React framework for building full-stack web applications	7.5 Élevée	13 mai 2026
CVE-2026-44578	Next.js is a React framework for building full-stack web applications	8.6 Élevée	13 mai 2026
CVE-2026-44577	Next.js is a React framework for building full-stack web applications	5.9 Moyenne	13 mai 2026
CVE-2026-44574	Next.js is a React framework for building full-stack web applications	8.1 Élevée	13 mai 2026
CVE-2026-44575	Next.js is a React framework for building full-stack web applications	7.5 Élevée	13 mai 2026
CVE-2026-44573	Next.js is a React framework for building full-stack web applications	7.5 Élevée	13 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critique	12 mai 2026
CVE-2026-42006	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP	4.3 Moyenne	12 mai 2026
CVE-2026-8391	Other issue in the JavaScript Engine component	5.3 Moyenne	12 mai 2026

Autres produits Red Hat