Vulnérabilités de Red Hat Red Hat Enterprise Linux 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-96280	Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems	7.5 Élevée	27 sept. 2026
CVE-2026-96279	Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks	6.5 Moyenne	27 sept. 2026
CVE-2026-93834	Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape	8.8 Élevée	25 sept. 2026
CVE-2026-95521	Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm	7.8 Élevée	24 sept. 2026
CVE-2026-95519	Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)	7.8 Élevée	24 sept. 2026
CVE-2026-97185	Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file	7.8 Élevée	24 sept. 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 Élevée	23 sept. 2026
CVE-2026-96546	A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader	2.5 Faible	23 sept. 2026
CVE-2026-96545	Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loader	4.4 Moyenne	23 sept. 2026
CVE-2026-96276	Flatpak: flatpak: arbitrary write in host context via flatpak build-init	6.5 Moyenne	23 sept. 2026
CVE-2026-96275	Flatpak: flatpak: arbitrary write access as root via extra-data extraction	8.8 Élevée	23 sept. 2026
CVE-2026-96512	A flaw was found in sudo	7.8 Élevée	23 sept. 2026
CVE-2026-96442	Emacs: emacs: arbitrary code execution in flymake mode	7.8 Élevée	23 sept. 2026
CVE-2026-13087	A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in…	8.8 Élevée	22 sept. 2026
CVE-2026-90462	Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization	5.4 Moyenne	22 sept. 2026
CVE-2026-94640	Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service	7.5 Élevée	22 sept. 2026
CVE-2026-95619	Gcc: libstdc++ integer overflow in `new` operator	7.7 Élevée	22 sept. 2026
CVE-2026-95511	A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend	8.2 Élevée	22 sept. 2026
CVE-2026-93433	Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing	5.5 Moyenne	21 sept. 2026
CVE-2026-92382	Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write	4.1 Moyenne	21 sept. 2026
CVE-2026-94184	Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)	5.3 Moyenne	21 sept. 2026
CVE-2026-80110	Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint	8.1 Élevée	21 sept. 2026
CVE-2026-91142	A flaw was found in Cockpit	3.6 Faible	18 sept. 2026
CVE-2026-91147	Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash	5.9 Moyenne	18 sept. 2026
CVE-2026-91149	Cockpit: cockpit: denial of service via unbounded connection thread spawning	7.5 Élevée	18 sept. 2026

Autres produits Red Hat