# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Libsoup: soupserver: denial of service via http request smuggling](https://agentprime.io/advisories/CVE-2026-1760.md) `CVE-2026-1760` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: HTTP request smuggling - [Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response](https://agentprime.io/advisories/CVE-2026-1761.md) `CVE-2026-1761` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 2 Feb 2026 · Tags: Memory corruption - [Libxml2: memory leak leading to local denial of service in xmllint interactive shell](https://agentprime.io/advisories/CVE-2026-1757.md) `CVE-2026-1757` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service - [Libsoup: libsoup: credential leakage via http redirects](https://agentprime.io/advisories/CVE-2026-1539.md) `CVE-2026-1539` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Information disclosure - [Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header](https://agentprime.io/advisories/CVE-2026-1536.md) `CVE-2026-1536` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Other injection - [Glib: glib: memory corruption via integer overflow in unicode case conversion](https://agentprime.io/advisories/CVE-2026-1489.md) `CVE-2026-1489` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption - [Glib: glib: local denial of service via buffer underflow in content type parsing](https://agentprime.io/advisories/CVE-2026-1485.md) `CVE-2026-1485` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption - [Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()](https://agentprime.io/advisories/CVE-2026-1484.md) `CVE-2026-1484` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption - [Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured](https://agentprime.io/advisories/CVE-2026-1467.md) `CVE-2026-1467` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Other injection - [Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function](https://agentprime.io/advisories/CVE-2025-9820.md) `CVE-2025-9820` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Memory corruption - [Networkmanager: networkmanager file access](https://agentprime.io/advisories/CVE-2025-9615.md) `CVE-2025-9615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-281 - [Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()](https://agentprime.io/advisories/CVE-2026-0988.md) `CVE-2026-0988` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 21 Jan 2026 · Tags: Memory corruption - [Libxml2: libxml2: denial of service via crafted xml catalogs](https://agentprime.io/advisories/CVE-2026-0992.md) `CVE-2026-0992` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 2.9 Low · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Libxml2: unbounded relaxng include recursion leading to stack overflow](https://agentprime.io/advisories/CVE-2026-0989.md) `CVE-2026-0989` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing](https://agentprime.io/advisories/CVE-2026-0990.md) `CVE-2026-0990` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing](https://agentprime.io/advisories/CVE-2025-14242.md) `CVE-2025-14242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [Libsoup: out-of-bounds read in libsoup websocket frame processing](https://agentprime.io/advisories/CVE-2026-0716.md) `CVE-2026-0716` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption - [Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication](https://agentprime.io/advisories/CVE-2026-0719.md) `CVE-2026-0719` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Jan 2026 · Tags: Memory corruption - [Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)](https://agentprime.io/advisories/CVE-2025-14523.md) `CVE-2025-14523` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 11 Dec 2025 · Tags: HTTP request smuggling - [Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames](https://agentprime.io/advisories/CVE-2025-14104.md) `CVE-2025-14104` · CVE record: util-linux util-linux and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Memory corruption - [Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash](https://agentprime.io/advisories/CVE-2025-66287.md) `CVE-2025-66287` · CVE record: The WebKitGTK Team WebKitGTK and 4 more · CVSS 8.8 High · Not analysed yet · Published 4 Dec 2025 · Tags: Memory corruption - [Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop](https://agentprime.io/advisories/CVE-2025-13947.md) `CVE-2025-13947` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-346 - [Abrt: command-injection in abrt leading to local privilege escalation](https://agentprime.io/advisories/CVE-2025-12744.md) `CVE-2025-12744` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 8.8 High · Not analysed yet · Published 3 Dec 2025 · Tags: Command injection - [Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos](https://agentprime.io/advisories/CVE-2025-13502.md) `CVE-2025-13502` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2025 · Tags: Memory corruption - [Libvirt: information disclosure via world-readable vm snapshots](https://agentprime.io/advisories/CVE-2025-13193.md) `CVE-2025-13193` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Nov 2025 · Tags: Broken access control - [Libvirt: denial of service in xml parsing](https://agentprime.io/advisories/CVE-2025-12748.md) `CVE-2025-12748` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Denial of service - [Samba: command injection in wins server hook script](https://agentprime.io/advisories/CVE-2025-10230.md) `CVE-2025-10230` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.40 · Not analysed yet · Published 7 Nov 2025 · Tags: Command injection - [Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode](https://agentprime.io/advisories/CVE-2025-12464.md) `CVE-2025-12464` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: use-after-free in xpresentnotify structure creation](https://agentprime.io/advisories/CVE-2025-62229.md) `CVE-2025-62229` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in xkb client resource removal](https://agentprime.io/advisories/CVE-2025-62230.md) `CVE-2025-62230` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: value overflow in xkbsetcompatmap()](https://agentprime.io/advisories/CVE-2025-62231.md) `CVE-2025-62231` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion](https://agentprime.io/advisories/CVE-2025-12105.md) `CVE-2025-12105` · CVE record: GNOME libsoup and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2025 · Tags: Memory corruption - [Samba: vfs_streams_xattr uninitialized memory write possible](https://agentprime.io/advisories/CVE-2025-9640.md) `CVE-2025-9640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [Libxslt: type confusion in exsltfuncresultcompfunction of libxslt](https://agentprime.io/advisories/CVE-2025-11731.md) `CVE-2025-11731` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.1 Low · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption - [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md) `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-7493.md) `CVE-2025-7493` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-1220 - [Libsoup: out-of-bounds read in cookie date handling of libsoup http library](https://agentprime.io/advisories/CVE-2025-11021.md) `CVE-2025-11021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: Memory corruption - [Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()](https://agentprime.io/advisories/CVE-2025-60019.md) `CVE-2025-60019` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"](https://agentprime.io/advisories/CVE-2025-60018.md) `CVE-2025-60018` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libxslt: use-after-free with key data stored cross-rvt](https://agentprime.io/advisories/CVE-2025-10911.md) `CVE-2025-10911` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libtiff: libtiff write-what-where](https://agentprime.io/advisories/CVE-2025-9900.md) `CVE-2025-9900` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-123 - [Libssh: memory exhaustion via repeated key exchange in libssh](https://agentprime.io/advisories/CVE-2025-8277.md) `CVE-2025-8277` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2025 · Tags: Denial of service - [Libsoup: improper handling of http vary header in libsoup caching](https://agentprime.io/advisories/CVE-2025-9901.md) `CVE-2025-9901` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-524 - [Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()](https://agentprime.io/advisories/CVE-2025-7039.md) `CVE-2025-7039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 3 Sept 2025 · Tags: Path traversal - [Udisks: out-of-bounds read in udisks daemon](https://agentprime.io/advisories/CVE-2025-8067.md) `CVE-2025-8067` · CVE record: storaged-project udisks and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Aug 2025 · Tags: Memory corruption - [Libssh: write beyond bounds in binary to base64 conversion functions](https://agentprime.io/advisories/CVE-2025-4877.md) `CVE-2025-4877` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Memory corruption - [Kernel: deadlock in ksmbd_find_crypto_ctx()](https://agentprime.io/advisories/CVE-2023-32253.md) `CVE-2023-32253` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: CWE-413 - [Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type](https://agentprime.io/advisories/CVE-2023-32255.md) `CVE-2023-32255` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: Denial of service - [Kernel: ksmbd race issue from smb2 close and logoff with multichannel](https://agentprime.io/advisories/CVE-2023-32256.md) `CVE-2023-32256` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Aug 2025 · Tags: CWE-421 - [Kernel: ksmbd brute force delay bypass via asynchronous requests](https://agentprime.io/advisories/CVE-2023-32251.md) `CVE-2023-32251` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 31 Jul 2025 · Tags: Authentication bypass - [Kernel: ksmbd memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-2593.md) `CVE-2023-2593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: Denial of service - [Glib: glib crash after long command line](https://agentprime.io/advisories/CVE-2025-4056.md) `CVE-2025-4056` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2025 · Tags: Code injection - [Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service](https://agentprime.io/advisories/CVE-2025-5449.md) `CVE-2025-5449` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: Memory corruption - [Libssh: null pointer dereference in libssh kex session id calculation](https://agentprime.io/advisories/CVE-2025-8114.md) `CVE-2025-8114` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Memory corruption - [Libssh: use of uninitialized variable in privatekey_from_file()](https://agentprime.io/advisories/CVE-2025-4878.md) `CVE-2025-4878` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.6 Low · Not analysed yet · Published 22 Jul 2025 · Tags: Memory corruption - [Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write](https://agentprime.io/advisories/CVE-2025-7519.md) `CVE-2025-7519` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 14 Jul 2025 · Tags: Memory corruption - [Gnutls: null pointer dereference in \_gnutls_figure_common_ciphersuite()](https://agentprime.io/advisories/CVE-2025-6395.md) `CVE-2025-6395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes](https://agentprime.io/advisories/CVE-2025-7424.md) `CVE-2025-7424` · CVE record: GNOME libxslt and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls certtool template parsing](https://agentprime.io/advisories/CVE-2025-32990.md) `CVE-2025-32990` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls sct extension parsing](https://agentprime.io/advisories/CVE-2025-32989.md) `CVE-2025-32989` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Weak cryptography or TLS Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .