# Red Hat Enterprise Linux 7.

Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser](https://agentprime.io/advisories/CVE-2026-88914.md)
  `CVE-2026-88914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Memory corruption
- [Gvfs: gvfs-admin socket ownership race permits local root](https://agentprime.io/advisories/CVE-2026-88924.md)
  `CVE-2026-88924` · CVE record: GNOME gvfs and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Sept 2026 · Tags: Race condition
- [Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction](https://agentprime.io/advisories/CVE-2026-88859.md)
  `CVE-2026-88859` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-84
- [Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)](https://agentprime.io/advisories/CVE-2026-87876.md)
  `CVE-2026-87876` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.0 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-178
- [Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound](https://agentprime.io/advisories/CVE-2026-87875.md)
  `CVE-2026-87875` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation](https://agentprime.io/advisories/CVE-2026-87853.md)
  `CVE-2026-87853` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-187
- [Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block](https://agentprime.io/advisories/CVE-2026-18090.md)
  `CVE-2026-18090` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Glib2: toctou symlink race in \`g_file_create_replace_destination\` fallback path](https://agentprime.io/advisories/CVE-2026-86469.md)
  `CVE-2026-86469` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal
- [389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor](https://agentprime.io/advisories/CVE-2026-19843.md)
  `CVE-2026-19843` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 8.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service](https://agentprime.io/advisories/CVE-2026-79678.md)
  `CVE-2026-79678` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Sept 2026 · Tags: Code injection
- [Flatpak: flatpak: toctou race condition allows symlink redirection](https://agentprime.io/advisories/CVE-2026-76925.md)
  `CVE-2026-76925` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Race condition
- [Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read](https://agentprime.io/advisories/CVE-2026-85534.md)
  `CVE-2026-85534` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service
- [Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems](https://agentprime.io/advisories/CVE-2026-81666.md)
  `CVE-2026-81666` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload](https://agentprime.io/advisories/CVE-2026-85197.md)
  `CVE-2026-85197` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification](https://agentprime.io/advisories/CVE-2026-84185.md)
  `CVE-2026-84185` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk](https://agentprime.io/advisories/CVE-2026-71224.md)
  `CVE-2026-71224` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Denial of service
- [Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing](https://agentprime.io/advisories/CVE-2026-71222.md)
  `CVE-2026-71222` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta](https://agentprime.io/advisories/CVE-2026-71221.md)
  `CVE-2026-71221` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 7.0 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit](https://agentprime.io/advisories/CVE-2026-71220.md)
  `CVE-2026-71220` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 7.0 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Gfs2-utils: gfs2-utils: stack overflow via alloca(1<\<di_depth) in hash table traversal](https://agentprime.io/advisories/CVE-2026-71219.md)
  `CVE-2026-71219` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Denial of service
- [Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header](https://agentprime.io/advisories/CVE-2026-85150.md)
  `CVE-2026-85150` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()](https://agentprime.io/advisories/CVE-2026-84838.md)
  `CVE-2026-84838` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Rpm: command injection in \`rpmbuild -t\*\` (\`gettarspec\`) via unescaped tarball path](https://agentprime.io/advisories/CVE-2026-84837.md)
  `CVE-2026-84837` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks](https://agentprime.io/advisories/CVE-2026-78409.md)
  `CVE-2026-78409` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal
- [Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection](https://agentprime.io/advisories/CVE-2026-78410.md)
  `CVE-2026-78410` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Race condition
- [Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority](https://agentprime.io/advisories/CVE-2026-78408.md)
  `CVE-2026-78408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.9 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-775
- [Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html](https://agentprime.io/advisories/CVE-2026-53683.md)
  `CVE-2026-53683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Open redirect
- [Gvfs: mtp: out-of-bounds read in do_read()](https://agentprime.io/advisories/CVE-2026-84270.md)
  `CVE-2026-84270` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Gvfs: afp: heap-based buffer overflow in dsi read path](https://agentprime.io/advisories/CVE-2026-84269.md)
  `CVE-2026-84269` · CVE record: GNOME gvfs and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Gvfs: sftp: uninitialized heap disclosure in read_string()](https://agentprime.io/advisories/CVE-2026-84267.md)
  `CVE-2026-84267` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Rpm: command execution via macro expansion in \`rpmuncompress -x\` for crafted \`.gem\` filenames](https://agentprime.io/advisories/CVE-2026-84233.md)
  `CVE-2026-84233` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts](https://agentprime.io/advisories/CVE-2026-53682.md)
  `CVE-2026-53682` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure, Broken access control
- [Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure](https://agentprime.io/advisories/CVE-2026-11873.md)
  `CVE-2026-11873` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure
- [Popt-devel: popt-static: short realloc in poptconfigfiletostring](https://agentprime.io/advisories/CVE-2026-18743.md)
  `CVE-2026-18743` · CVE record: rpm-software-management popt and 4 more · CVSS 2.5 Low · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature](https://agentprime.io/advisories/CVE-2026-83596.md)
  `CVE-2026-83596` · CVE record: WebKit WebKit and 4 more · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption
- [Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf](https://agentprime.io/advisories/CVE-2026-13732.md)
  `CVE-2026-13732` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption
- [Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling](https://agentprime.io/advisories/CVE-2026-82343.md)
  `CVE-2026-82343` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check](https://agentprime.io/advisories/CVE-2026-82330.md)
  `CVE-2026-82330` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count](https://agentprime.io/advisories/CVE-2026-82328.md)
  `CVE-2026-82328` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data](https://agentprime.io/advisories/CVE-2026-82327.md)
  `CVE-2026-82327` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-129
- [Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0](https://agentprime.io/advisories/CVE-2026-82324.md)
  `CVE-2026-82324` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery](https://agentprime.io/advisories/CVE-2026-81893.md)
  `CVE-2026-81893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function](https://agentprime.io/advisories/CVE-2026-78002.md)
  `CVE-2026-78002` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Gimp: stack vla size underflow denial of service in seattle](https://agentprime.io/advisories/CVE-2026-79902.md)
  `CVE-2026-79902` · CVE record: GNOME GIMP and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption
- [Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root](https://agentprime.io/advisories/CVE-2026-80185.md)
  `CVE-2026-80185` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Bluez: stack overflow in name2utf8 causes dos and potential code execution](https://agentprime.io/advisories/CVE-2026-80186.md)
  `CVE-2026-80186` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation](https://agentprime.io/advisories/CVE-2026-80101.md)
  `CVE-2026-80101` · CVE record: GNOME GIMP and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Emacs: emacs: command injection via crafted filenames in tramp](https://agentprime.io/advisories/CVE-2026-79992.md)
  `CVE-2026-79992` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Command injection
- [Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write](https://agentprime.io/advisories/CVE-2026-79655.md)
  `CVE-2026-79655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos](https://agentprime.io/advisories/CVE-2026-78701.md)
  `CVE-2026-78701` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers](https://agentprime.io/advisories/CVE-2026-78322.md)
  `CVE-2026-78322` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader](https://agentprime.io/advisories/CVE-2026-78475.md)
  `CVE-2026-78475` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Memory corruption
- [Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit](https://agentprime.io/advisories/CVE-2026-78465.md)
  `CVE-2026-78465` · CVE record: GNOME GIMP and 4 more · CVSS 7.0 High · Not analysed yet · Published 24 Aug 2026 · Tags: Memory corruption
- [Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)](https://agentprime.io/advisories/CVE-2026-19685.md)
  `CVE-2026-19685` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Broken access control
- [Rpm: rpmbuild gettarspec() crafted tar member name → macro injection](https://agentprime.io/advisories/CVE-2026-78367.md)
  `CVE-2026-78367` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection
- [Webkitgtk: use-after-free of jscvalue function parameters](https://agentprime.io/advisories/CVE-2026-78376.md)
  `CVE-2026-78376` · CVE record: WebKit WebKit and 4 more · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: Memory corruption
- [Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates](https://agentprime.io/advisories/CVE-2026-78323.md)
  `CVE-2026-78323` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Weak cryptography or TLS
- [Ipa: freeipa: null pointer dereference in \`ipa-enrollment\` extended operation (\`join_oid\`) via missing request value](https://agentprime.io/advisories/CVE-2026-73199.md)
  `CVE-2026-73199` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Ipa: freeipa: unauthenticated dos in \`/ipa/i18n_messages\` via unbounded request body read](https://agentprime.io/advisories/CVE-2026-73198.md)
  `CVE-2026-73198` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service
- [Ipa: freeipa: authenticated dos in \`otptoken-add\` via unbounded otp key decoding/re-encoding](https://agentprime.io/advisories/CVE-2026-73196.md)
  `CVE-2026-73196` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-7.md>
Older: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-7.md?cursor=WyIyMDI2LTA4LTIwVDEwOjMxOjU4LjE4OTAwMFoiLCJDVkUtMjAyNi03MzE5NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-7&cursor=WyIyMDI2LTA5LTExVDEwOjMyOjI5Ljc3MjAwMFoiLCJDVkUtMjAyNi03NzE1OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-7/?cursor=WyIyMDI2LTA5LTExVDEwOjMyOjI5Ljc3MjAwMFoiLCJDVkUtMjAyNi03NzE1OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.