# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail](https://agentprime.io/advisories/CVE-2026-123151.md) `CVE-2026-123151` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch](https://agentprime.io/advisories/CVE-2026-121997.md) `CVE-2026-121997` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length](https://agentprime.io/advisories/CVE-2026-121996.md) `CVE-2026-121996` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail](https://agentprime.io/advisories/CVE-2026-121995.md) `CVE-2026-121995` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length](https://agentprime.io/advisories/CVE-2026-121994.md) `CVE-2026-121994` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Hivex: hivex: denial of service via out-of-bounds read in big-data block processing](https://agentprime.io/advisories/CVE-2026-120740.md) `CVE-2026-120740` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.0 Low · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check](https://agentprime.io/advisories/CVE-2026-119842.md) `CVE-2026-119842` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service](https://agentprime.io/advisories/CVE-2026-119729.md) `CVE-2026-119729` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure](https://agentprime.io/advisories/CVE-2026-119728.md) `CVE-2026-119728` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: stack buffer overflow in psd image resource header loader](https://agentprime.io/advisories/CVE-2026-119528.md) `CVE-2026-119528` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: out-of-bounds read in std::from_chars](https://agentprime.io/advisories/CVE-2026-115456.md) `CVE-2026-115456` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: stack overflow in std::bitset on libstdc++](https://agentprime.io/advisories/CVE-2026-115455.md) `CVE-2026-115455` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: integer wrap in \`std](https://agentprime.io/advisories/CVE-2026-114691.md) `CVE-2026-114691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: confirmed out-of-bounds read/write in libstdc++ parallel \`std](https://agentprime.io/advisories/CVE-2026-114690.md) `CVE-2026-114690` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)](https://agentprime.io/advisories/CVE-2026-118593.md) `CVE-2026-118593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-667 - [Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service](https://agentprime.io/advisories/CVE-2026-103963.md) `CVE-2026-103963` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service - [Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk](https://agentprime.io/advisories/CVE-2026-118475.md) `CVE-2026-118475` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 3.6 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading](https://agentprime.io/advisories/CVE-2026-112922.md) `CVE-2026-112922` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback](https://agentprime.io/advisories/CVE-2026-110133.md) `CVE-2026-110133` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder](https://agentprime.io/advisories/CVE-2026-93009.md) `CVE-2026-93009` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check](https://agentprime.io/advisories/CVE-2026-93010.md) `CVE-2026-93010` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control - [Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content](https://agentprime.io/advisories/CVE-2026-93006.md) `CVE-2026-93006` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-672 - [Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation](https://agentprime.io/advisories/CVE-2026-93007.md) `CVE-2026-93007` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service - [Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms](https://agentprime.io/advisories/CVE-2026-93011.md) `CVE-2026-93011` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations](https://agentprime.io/advisories/CVE-2026-93008.md) `CVE-2026-93008` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-345 - [Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow](https://agentprime.io/advisories/CVE-2026-85498.md) `CVE-2026-85498` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.5 Low · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service](https://agentprime.io/advisories/CVE-2026-117548.md) `CVE-2026-117548` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Samba: access control bypass via vfs_ceph_rgw case-insensitive open](https://agentprime.io/advisories/CVE-2026-109411.md) `CVE-2026-109411` · CVE record: Samba Samba and 4 more · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-178 - [Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning](https://agentprime.io/advisories/CVE-2026-115486.md) `CVE-2026-115486` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption - [Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio](https://agentprime.io/advisories/CVE-2026-115485.md) `CVE-2026-115485` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption - [Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg](https://agentprime.io/advisories/CVE-2026-115484.md) `CVE-2026-115484` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption - [Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership](https://agentprime.io/advisories/CVE-2026-115221.md) `CVE-2026-115221` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Broken access control - [Patch: filename validation bypass in reversal fallback allows file creation outside the working directory](https://agentprime.io/advisories/CVE-2026-115207.md) `CVE-2026-115207` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal - [Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition](https://agentprime.io/advisories/CVE-2026-85518.md) `CVE-2026-85518` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal - [Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string](https://agentprime.io/advisories/CVE-2026-114038.md) `CVE-2026-114038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8](https://agentprime.io/advisories/CVE-2026-112177.md) `CVE-2026-112177` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.3 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-648 - [Gimp: gimp: use-after-free in xcf loader via prop_selected_path](https://agentprime.io/advisories/CVE-2026-112261.md) `CVE-2026-112261` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels](https://agentprime.io/advisories/CVE-2026-112258.md) `CVE-2026-112258` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)](https://agentprime.io/advisories/CVE-2026-112257.md) `CVE-2026-112257` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing](https://agentprime.io/advisories/CVE-2026-112260.md) `CVE-2026-112260` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import](https://agentprime.io/advisories/CVE-2026-112259.md) `CVE-2026-112259` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd](https://agentprime.io/advisories/CVE-2026-89096.md) `CVE-2026-89096` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Parted: parted: denial of service via heap buffer overflow during fat16 resize](https://agentprime.io/advisories/CVE-2026-89088.md) `CVE-2026-89088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image](https://agentprime.io/advisories/CVE-2026-89085.md) `CVE-2026-89085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Nautilus: nautilus: arbitrary file deletion via trash symlink](https://agentprime.io/advisories/CVE-2026-111802.md) `CVE-2026-111802` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Path traversal - [Libarchive: libarchive: use-after-free via aliased mac metadata copy](https://agentprime.io/advisories/CVE-2026-17591.md) `CVE-2026-17591` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.6 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: paa integer overflow out-of-bounds read](https://agentprime.io/advisories/CVE-2026-62438.md) `CVE-2026-62438` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2026-62439.md) `CVE-2026-62439` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding](https://agentprime.io/advisories/CVE-2026-85977.md) `CVE-2026-85977` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1050 - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding](https://agentprime.io/advisories/CVE-2026-85231.md) `CVE-2026-85231` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd](https://agentprime.io/advisories/CVE-2026-89098.md) `CVE-2026-89098` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Spice-server: spice: heap oob read/write via unchecked migration data offsets](https://agentprime.io/advisories/CVE-2026-105958.md) `CVE-2026-105958` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation](https://agentprime.io/advisories/CVE-2026-105959.md) `CVE-2026-105959` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass](https://agentprime.io/advisories/CVE-2026-104715.md) `CVE-2026-104715` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection - [Evolution-data-server: local file disclosure via attach file:// uris](https://agentprime.io/advisories/CVE-2026-110777.md) `CVE-2026-110777` · CVE record: GNOME evolution-data-server and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize](https://agentprime.io/advisories/CVE-2026-86476.md) `CVE-2026-86476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices](https://agentprime.io/advisories/CVE-2026-110036.md) `CVE-2026-110036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()](https://agentprime.io/advisories/CVE-2026-105460.md) `CVE-2026-105460` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding](https://agentprime.io/advisories/CVE-2026-109854.md) `CVE-2026-109854` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix](https://agentprime.io/advisories/CVE-2026-108119.md) `CVE-2026-108119` · CVE record: Red Hat Red Hat Hardened Images and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .