# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file](https://agentprime.io/advisories/CVE-2026-97185.md) `CVE-2026-97185` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loader](https://agentprime.io/advisories/CVE-2026-96546.md) `CVE-2026-96546` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loader](https://agentprime.io/advisories/CVE-2026-96545.md) `CVE-2026-96545` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Memory corruption - [Emacs: emacs: arbitrary code execution in flymake mode](https://agentprime.io/advisories/CVE-2026-96442.md) `CVE-2026-96442` · CVE record: GNU Emacs GNU Emacs and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization](https://agentprime.io/advisories/CVE-2026-90462.md) `CVE-2026-90462` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-280 - [Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service](https://agentprime.io/advisories/CVE-2026-94640.md) `CVE-2026-94640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Gcc: libstdc++ integer overflow in \`new\` operator](https://agentprime.io/advisories/CVE-2026-95619.md) `CVE-2026-95619` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption - [Usbredir: usbredir: unbounded iso_packet_desc\[\] index in usbredirhost_iso_packet() leads to heap out-of-bounds write](https://agentprime.io/advisories/CVE-2026-92382.md) `CVE-2026-92382` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption - [Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)](https://agentprime.io/advisories/CVE-2026-94184.md) `CVE-2026-94184` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption - [Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint](https://agentprime.io/advisories/CVE-2026-80110.md) `CVE-2026-80110` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control - [Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.](https://agentprime.io/advisories/CVE-2026-75883.md) `CVE-2026-75883` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)](https://agentprime.io/advisories/CVE-2026-93653.md) `CVE-2026-93653` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-606 - [Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram](https://agentprime.io/advisories/CVE-2026-81627.md) `CVE-2026-81627` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute](https://agentprime.io/advisories/CVE-2026-76781.md) `CVE-2026-76781` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption - [Gimp: integer overflow when generating a thumbnail preview for a psd file](https://agentprime.io/advisories/CVE-2026-92248.md) `CVE-2026-92248` · CVE record: GNOME GIMP and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine](https://agentprime.io/advisories/CVE-2026-85234.md) `CVE-2026-85234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters](https://agentprime.io/advisories/CVE-2026-85013.md) `CVE-2026-85013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Command injection - [PackageKit: dnf5 backend ignores SIMULATE on RepoRemove](https://agentprime.io/advisories/CVE-2026-19816.md) `CVE-2026-19816` · CVE record: Fedora Fedora and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control - [Sssd: sssd: denial of service in nss responder via crafted zero-length requests](https://agentprime.io/advisories/CVE-2026-90996.md) `CVE-2026-90996` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: local denial of service due to null pointer dereference in pam responder](https://agentprime.io/advisories/CVE-2026-90995.md) `CVE-2026-90995` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via malformed pam v1 requests](https://agentprime.io/advisories/CVE-2026-90994.md) `CVE-2026-90994` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: local oob read in nss service request parsers (\`sss_nss_protocol_parse_svc_name\` / \`sss_nss_protocol_parse_svc_port\`)](https://agentprime.io/advisories/CVE-2026-90463.md) `CVE-2026-90463` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file](https://agentprime.io/advisories/CVE-2026-90947.md) `CVE-2026-90947` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch](https://agentprime.io/advisories/CVE-2026-90949.md) `CVE-2026-90949` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions](https://agentprime.io/advisories/CVE-2026-90948.md) `CVE-2026-90948` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Device-mapper-multipath: local denial of service via blocking ipc send operations](https://agentprime.io/advisories/CVE-2026-89329.md) `CVE-2026-89329` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-1322 - [Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough](https://agentprime.io/advisories/CVE-2026-18495.md) `CVE-2026-18495` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Memory corruption - [Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink](https://agentprime.io/advisories/CVE-2026-77159.md) `CVE-2026-77159` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-61 - [Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser](https://agentprime.io/advisories/CVE-2026-88914.md) `CVE-2026-88914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Memory corruption - [Gvfs: gvfs-admin socket ownership race permits local root](https://agentprime.io/advisories/CVE-2026-88924.md) `CVE-2026-88924` · CVE record: GNOME gvfs and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Sept 2026 · Tags: Race condition - [Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction](https://agentprime.io/advisories/CVE-2026-88859.md) `CVE-2026-88859` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-84 - [Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url](https://agentprime.io/advisories/CVE-2026-18147.md) `CVE-2026-18147` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS) - [Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)](https://agentprime.io/advisories/CVE-2026-87876.md) `CVE-2026-87876` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.0 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-178 - [Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound](https://agentprime.io/advisories/CVE-2026-87875.md) `CVE-2026-87875` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation](https://agentprime.io/advisories/CVE-2026-87853.md) `CVE-2026-87853` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-187 - [Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block](https://agentprime.io/advisories/CVE-2026-18090.md) `CVE-2026-18090` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption - [Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)](https://agentprime.io/advisories/CVE-2026-76561.md) `CVE-2026-76561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection - [Glib2: toctou symlink race in \`g_file_create_replace_destination\` fallback path](https://agentprime.io/advisories/CVE-2026-86469.md) `CVE-2026-86469` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal - [389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor](https://agentprime.io/advisories/CVE-2026-19843.md) `CVE-2026-19843` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 8.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection - [Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service](https://agentprime.io/advisories/CVE-2026-79678.md) `CVE-2026-79678` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Sept 2026 · Tags: Code injection - [Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci](https://agentprime.io/advisories/CVE-2026-76578.md) `CVE-2026-76578` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass - [Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read](https://agentprime.io/advisories/CVE-2026-85534.md) `CVE-2026-85534` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service - [Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload](https://agentprime.io/advisories/CVE-2026-85197.md) `CVE-2026-85197` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()](https://agentprime.io/advisories/CVE-2026-84838.md) `CVE-2026-84838` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection - [Rpm: command injection in \`rpmbuild -t\*\` (\`gettarspec\`) via unescaped tarball path](https://agentprime.io/advisories/CVE-2026-84837.md) `CVE-2026-84837` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection - [Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html](https://agentprime.io/advisories/CVE-2026-53683.md) `CVE-2026-53683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Open redirect - [Gvfs: mtp: out-of-bounds read in do_read()](https://agentprime.io/advisories/CVE-2026-84270.md) `CVE-2026-84270` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gvfs: afp: heap-based buffer overflow in dsi read path](https://agentprime.io/advisories/CVE-2026-84269.md) `CVE-2026-84269` · CVE record: GNOME gvfs and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gvfs: sftp: uninitialized heap disclosure in read_string()](https://agentprime.io/advisories/CVE-2026-84267.md) `CVE-2026-84267` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gvfs: sftp: heap-based buffer overflow in read_reply()](https://agentprime.io/advisories/CVE-2026-84268.md) `CVE-2026-84268` · CVE record: GNOME gvfs and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Rpm: command execution via macro expansion in \`rpmuncompress -x\` for crafted \`.gem\` filenames](https://agentprime.io/advisories/CVE-2026-84233.md) `CVE-2026-84233` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts](https://agentprime.io/advisories/CVE-2026-53682.md) `CVE-2026-53682` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure, Broken access control - [Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure](https://agentprime.io/advisories/CVE-2026-11873.md) `CVE-2026-11873` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure - [Popt-devel: popt-static: short realloc in poptconfigfiletostring](https://agentprime.io/advisories/CVE-2026-18743.md) `CVE-2026-18743` · CVE record: rpm-software-management popt and 4 more · CVSS 2.5 Low · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature](https://agentprime.io/advisories/CVE-2026-83596.md) `CVE-2026-83596` · CVE record: WebKit WebKit and 4 more · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption - [Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf](https://agentprime.io/advisories/CVE-2026-13732.md) `CVE-2026-13732` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption - [Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling](https://agentprime.io/advisories/CVE-2026-82343.md) `CVE-2026-82343` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption - [Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check](https://agentprime.io/advisories/CVE-2026-82330.md) `CVE-2026-82330` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption - [Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count](https://agentprime.io/advisories/CVE-2026-82328.md) `CVE-2026-82328` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption - [Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0](https://agentprime.io/advisories/CVE-2026-82324.md) `CVE-2026-82324` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .