Skip to content

Vulnerabilities of Red Hat Red Hat JBoss Core Services

Is your version affected?

CVE Summary Score Published
CVE-2026-45447 Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7… Not rated Jun 9, 2026
CVE-2026-49975 Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service… Not rated Jun 8, 2026
CVE-2026-42536 Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content… Not rated Jun 8, 2026
CVE-2026-23918 Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol Not rated May 4, 2026
CVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated document 6.5 Medium Apr 23, 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Not rated Apr 22, 2026
CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before… 8.8 High Mar 25, 2026
CVE-2026-3234 A flaw was found in mod_proxy_cluster 4.3 Medium Mar 12, 2026
CVE-2026-1757 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 6.2 Medium Feb 2, 2026
CVE-2026-0992 A flaw was found in the libxml2 library 2.9 Low Jan 15, 2026
CVE-2026-0989 A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled 3.7 Low Jan 15, 2026
CVE-2026-0990 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 5.9 Medium Jan 15, 2026
CVE-2026-22184 zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under… 4.6 Medium Jan 7, 2026
CVE-2025-6170 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files 2.5 Low Jun 16, 2025
CVE-2024-10306 A vulnerability was found in mod_proxy_cluster 5.4 Medium Apr 23, 2025
CVE-2023-6710 A flaw was found in the mod_proxy_cluster in the Apache server 5.4 Medium Dec 12, 2023
CVE-2006-4339 Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass 9.1 Critical Sep 5, 2006

Other Red Hat products