Vulnérabilités connues pour Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critique	18 avr. 2026
CVE-2026-40170	ngtcp2 is a C implementation of the IETF QUIC protocol	7.5 Élevée	16 avr. 2026
CVE-2026-40261	Composer is a dependency manager for PHP	8.8 Élevée	15 avr. 2026
CVE-2026-40176	Composer is a dependency manager for PHP	7.8 Élevée	15 avr. 2026
CVE-2026-33414	Podman is a tool for managing OCI containers and pods	4.0 Moyenne	14 avr. 2026
CVE-2026-32203	Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network	7.5 Élevée	14 avr. 2026
CVE-2026-26171	Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network	7.5 Élevée	14 avr. 2026
CVE-2026-23666	Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network	7.5 Élevée	14 avr. 2026
CVE-2026-33116	Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized…	7.5 Élevée	14 avr. 2026
CVE-2026-32178	Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network	7.5 Élevée	14 avr. 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 Élevée	13 avr. 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Moyenne	13 avr. 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 Élevée	13 avr. 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critique	13 avr. 2026
CVE-2026-1584	Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder	7.5 Élevée	9 avr. 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Moyenne	9 avr. 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Moyenne	8 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-27140	SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution…	8.8 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2025-14821	Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows	7.8 Élevée	7 avr. 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-5745	Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	5.5 Moyenne	7 avr. 2026

Autres produits Red Hat