# Red Hat Enterprise Linux 7. Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Grub2: use-after-free in grub_file_close()](https://agentprime.io/advisories/CVE-2025-54771.md) `CVE-2025-54771` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Libvirt: information disclosure via world-readable vm snapshots](https://agentprime.io/advisories/CVE-2025-13193.md) `CVE-2025-13193` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Nov 2025 · Tags: Broken access control - [Libvirt: denial of service in xml parsing](https://agentprime.io/advisories/CVE-2025-12748.md) `CVE-2025-12748` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Denial of service - [Samba: command injection in wins server hook script](https://agentprime.io/advisories/CVE-2025-10230.md) `CVE-2025-10230` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.40 · Not analysed yet · Published 7 Nov 2025 · Tags: Command injection - [Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode](https://agentprime.io/advisories/CVE-2025-12464.md) `CVE-2025-12464` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Memory corruption - [Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion](https://agentprime.io/advisories/CVE-2025-12105.md) `CVE-2025-12105` · CVE record: GNOME libsoup and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2025 · Tags: Memory corruption - [Luksmeta: data corruption when handling luks1 partitions with luksmeta](https://agentprime.io/advisories/CVE-2025-11568.md) `CVE-2025-11568` · CVE record: Latchset luksmeta and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284 - [Samba: vfs_streams_xattr uninitialized memory write possible](https://agentprime.io/advisories/CVE-2025-9640.md) `CVE-2025-9640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [Libxslt: type confusion in exsltfuncresultcompfunction of libxslt](https://agentprime.io/advisories/CVE-2025-11731.md) `CVE-2025-11731` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.1 Low · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption - [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md) `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption - [Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()](https://agentprime.io/advisories/CVE-2025-60019.md) `CVE-2025-60019` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"](https://agentprime.io/advisories/CVE-2025-60018.md) `CVE-2025-60018` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libxslt: use-after-free with key data stored cross-rvt](https://agentprime.io/advisories/CVE-2025-10911.md) `CVE-2025-10911` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libssh: memory exhaustion via repeated key exchange in libssh](https://agentprime.io/advisories/CVE-2025-8277.md) `CVE-2025-8277` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2025 · Tags: Denial of service - [Libsoup: improper handling of http vary header in libsoup caching](https://agentprime.io/advisories/CVE-2025-9901.md) `CVE-2025-9901` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-524 - [Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()](https://agentprime.io/advisories/CVE-2025-7039.md) `CVE-2025-7039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 3 Sept 2025 · Tags: Path traversal - [Libssh: write beyond bounds in binary to base64 conversion functions](https://agentprime.io/advisories/CVE-2025-4877.md) `CVE-2025-4877` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Memory corruption - [Shim: expired secure boot certificate](https://agentprime.io/advisories/CVE-2023-5342.md) `CVE-2023-5342` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.1 Medium · Not analysed yet · Published 15 Aug 2025 · Tags: CWE-324 - [Kernel: deadlock in ksmbd_find_crypto_ctx()](https://agentprime.io/advisories/CVE-2023-32253.md) `CVE-2023-32253` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: CWE-413 - [Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type](https://agentprime.io/advisories/CVE-2023-32255.md) `CVE-2023-32255` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: Denial of service - [Kernel: ksmbd race issue from smb2 close and logoff with multichannel](https://agentprime.io/advisories/CVE-2023-32256.md) `CVE-2023-32256` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Aug 2025 · Tags: CWE-421 - [Kernel: ksmbd brute force delay bypass via asynchronous requests](https://agentprime.io/advisories/CVE-2023-32251.md) `CVE-2023-32251` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 31 Jul 2025 · Tags: Authentication bypass - [Kernel: ksmbd memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-2593.md) `CVE-2023-2593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: Denial of service - [Glib: glib crash after long command line](https://agentprime.io/advisories/CVE-2025-4056.md) `CVE-2025-4056` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2025 · Tags: Code injection - [Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service](https://agentprime.io/advisories/CVE-2025-5449.md) `CVE-2025-5449` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: Memory corruption - [Libssh: null pointer dereference in libssh kex session id calculation](https://agentprime.io/advisories/CVE-2025-8114.md) `CVE-2025-8114` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Memory corruption - [Pam-config: lpe from unprivileged to allow_active in pam](https://agentprime.io/advisories/CVE-2025-6018.md) `CVE-2025-6018` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 7.8 High · Not analysed yet · Published 23 Jul 2025 · Tags: Broken access control - [Libssh: use of uninitialized variable in privatekey_from_file()](https://agentprime.io/advisories/CVE-2025-4878.md) `CVE-2025-4878` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.6 Low · Not analysed yet · Published 22 Jul 2025 · Tags: Memory corruption - [Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write](https://agentprime.io/advisories/CVE-2025-7519.md) `CVE-2025-7519` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 14 Jul 2025 · Tags: Memory corruption - [Gnutls: null pointer dereference in \_gnutls_figure_common_ciphersuite()](https://agentprime.io/advisories/CVE-2025-6395.md) `CVE-2025-6395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes](https://agentprime.io/advisories/CVE-2025-7424.md) `CVE-2025-7424` · CVE record: GNOME libxslt and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls certtool template parsing](https://agentprime.io/advisories/CVE-2025-32990.md) `CVE-2025-32990` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls sct extension parsing](https://agentprime.io/advisories/CVE-2025-32989.md) `CVE-2025-32989` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Weak cryptography or TLS - [Gnutls: vulnerability in gnutls othername san export](https://agentprime.io/advisories/CVE-2025-32988.md) `CVE-2025-32988` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Libssh: invalid return code for chacha20 poly1305 with openssl backend](https://agentprime.io/advisories/CVE-2025-5987.md) `CVE-2025-5987` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-393 - [Libssh: double free vulnerability in libssh key export functions](https://agentprime.io/advisories/CVE-2025-5351.md) `CVE-2025-5351` · CVE record: libssh libssh and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: Memory corruption - [Libssh: incorrect return code handling in ssh_kdf() in libssh](https://agentprime.io/advisories/CVE-2025-5372.md) `CVE-2025-5372` · CVE record: libssh libssh and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-682 - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode](https://agentprime.io/advisories/CVE-2025-49177.md) `CVE-2025-49177` · CVE record: X.Org xwayland and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: Information disclosure - [Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder](https://agentprime.io/advisories/CVE-2025-6199.md) `CVE-2025-6199` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 17 Jun 2025 · Tags: Information disclosure - [Libgepub: integer overflow in libgepub's epub archive handling](https://agentprime.io/advisories/CVE-2025-6196.md) `CVE-2025-6196` · CVE record: Red Hat Red Hat Enterprise Linux 7 · CVSS 5.5 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Libxml: null pointer dereference leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49795.md) `CVE-2025-49795` · CVE record: GNOME libxml2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring](https://agentprime.io/advisories/CVE-2025-6052.md) `CVE-2025-6052` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 13 Jun 2025 · Tags: Memory corruption - [Gimp: gimp integer overflow](https://agentprime.io/advisories/CVE-2025-6035.md) `CVE-2025-6035` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 13 Jun 2025 · Tags: Memory corruption - [Libarchive: reading past eof may be triggered for piped file streams](https://agentprime.io/advisories/CVE-2025-5918.md) `CVE-2025-5918` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c](https://agentprime.io/advisories/CVE-2025-5917.md) `CVE-2025-5917` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c](https://agentprime.io/advisories/CVE-2025-5916.md) `CVE-2025-5916` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5915.md) `CVE-2025-5915` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service](https://agentprime.io/advisories/CVE-2025-47711.md) `CVE-2025-47711` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: CWE-193 - [Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service](https://agentprime.io/advisories/CVE-2025-47712.md) `CVE-2025-47712` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session](https://agentprime.io/advisories/CVE-2025-0620.md) `CVE-2025-0620` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: Information disclosure - [Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump](https://agentprime.io/advisories/CVE-2025-4598.md) `CVE-2025-4598` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-364 - [Coreutils: heap buffer under-read in gnu coreutils sort via key specification](https://agentprime.io/advisories/CVE-2025-5278.md) `CVE-2025-5278` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md) `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gimp: stack-based buffer overflows in file-ico](https://agentprime.io/advisories/CVE-2025-48796.md) `CVE-2025-48796` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c](https://agentprime.io/advisories/CVE-2025-4969.md) `CVE-2025-4969` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 21 May 2025 · Tags: Memory corruption - [Libsoup: null pointer dereference in libsoup may lead to denial of service](https://agentprime.io/advisories/CVE-2025-4476.md) `CVE-2025-4476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 16 May 2025 · Tags: Memory corruption - [Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm](https://agentprime.io/advisories/CVE-2025-4382.md) `CVE-2025-4382` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 9 May 2025 · Tags: Authentication bypass - [Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one](https://agentprime.io/advisories/CVE-2025-31177.md) `CVE-2025-31177` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar](https://agentprime.io/advisories/CVE-2025-4373.md) `CVE-2025-4373` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption - [Libsoup: cookie domain validation bypass via uppercase characters in libsoup](https://agentprime.io/advisories/CVE-2025-4035.md) `CVE-2025-4035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-178 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .