# Red Hat Enterprise Linux 7. Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result](https://agentprime.io/advisories/CVE-2026-86345.md) `CVE-2026-86345` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-923 - [389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue](https://agentprime.io/advisories/CVE-2026-86344.md) `CVE-2026-86344` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder](https://agentprime.io/advisories/CVE-2026-103641.md) `CVE-2026-103641` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption - [Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body](https://agentprime.io/advisories/CVE-2026-103399.md) `CVE-2026-103399` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: HTTP request smuggling - [Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag](https://agentprime.io/advisories/CVE-2026-103242.md) `CVE-2026-103242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth](https://agentprime.io/advisories/CVE-2026-102560.md) `CVE-2026-102560` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding](https://agentprime.io/advisories/CVE-2026-102555.md) `CVE-2026-102555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages](https://agentprime.io/advisories/CVE-2026-95520.md) `CVE-2026-95520` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group](https://agentprime.io/advisories/CVE-2026-97029.md) `CVE-2026-97029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.7 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-653 - [Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc](https://agentprime.io/advisories/CVE-2026-97024.md) `CVE-2026-97024` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-61 - [Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files](https://agentprime.io/advisories/CVE-2026-97027.md) `CVE-2026-97027` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.6 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20 - [Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path](https://agentprime.io/advisories/CVE-2026-97026.md) `CVE-2026-97026` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-378 - [Flatpak: flatpak: world-readable oci authentication token in system-helper cache path](https://agentprime.io/advisories/CVE-2026-97025.md) `CVE-2026-97025` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-378 - [Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if](https://agentprime.io/advisories/CVE-2026-102010.md) `CVE-2026-102010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 28 Sept 2026 · Tags: Memory corruption - [Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin](https://agentprime.io/advisories/CVE-2026-97023.md) `CVE-2026-97023` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-61 - [Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following](https://agentprime.io/advisories/CVE-2026-96284.md) `CVE-2026-96284` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 2.5 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Path traversal - [Flatpak: flatpak: extension metadata path traversal file existence oracle](https://agentprime.io/advisories/CVE-2026-96282.md) `CVE-2026-96282` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.1 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Path traversal - [Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull](https://agentprime.io/advisories/CVE-2026-96283.md) `CVE-2026-96283` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Broken access control - [Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes](https://agentprime.io/advisories/CVE-2026-96281.md) `CVE-2026-96281` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Broken access control - [Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems](https://agentprime.io/advisories/CVE-2026-96280.md) `CVE-2026-96280` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-197 - [Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks](https://agentprime.io/advisories/CVE-2026-96279.md) `CVE-2026-96279` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Path traversal - [Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape](https://agentprime.io/advisories/CVE-2026-93834.md) `CVE-2026-93834` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Memory corruption - [Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm](https://agentprime.io/advisories/CVE-2026-95521.md) `CVE-2026-95521` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Command injection - [Rpm: code execution via macro expansion of manifest entries in \`rpmgi\` (\`-q -p\` / verify manifest flows)](https://agentprime.io/advisories/CVE-2026-95519.md) `CVE-2026-95519` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Command injection - [Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file](https://agentprime.io/advisories/CVE-2026-97185.md) `CVE-2026-97185` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loader](https://agentprime.io/advisories/CVE-2026-96546.md) `CVE-2026-96546` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loader](https://agentprime.io/advisories/CVE-2026-96545.md) `CVE-2026-96545` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Memory corruption - [Flatpak: flatpak: arbitrary write in host context via flatpak build-init](https://agentprime.io/advisories/CVE-2026-96276.md) `CVE-2026-96276` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal - [Flatpak: flatpak: arbitrary write access as root via extra-data extraction](https://agentprime.io/advisories/CVE-2026-96275.md) `CVE-2026-96275` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal - [Emacs: emacs: arbitrary code execution in flymake mode](https://agentprime.io/advisories/CVE-2026-96442.md) `CVE-2026-96442` · CVE record: GNU Emacs GNU Emacs and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization](https://agentprime.io/advisories/CVE-2026-90462.md) `CVE-2026-90462` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-280 - [Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service](https://agentprime.io/advisories/CVE-2026-94640.md) `CVE-2026-94640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Gcc: libstdc++ integer overflow in \`new\` operator](https://agentprime.io/advisories/CVE-2026-95619.md) `CVE-2026-95619` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption - [Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing](https://agentprime.io/advisories/CVE-2026-93433.md) `CVE-2026-93433` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption - [Usbredir: usbredir: unbounded iso_packet_desc\[\] index in usbredirhost_iso_packet() leads to heap out-of-bounds write](https://agentprime.io/advisories/CVE-2026-92382.md) `CVE-2026-92382` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption - [Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)](https://agentprime.io/advisories/CVE-2026-94184.md) `CVE-2026-94184` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption - [Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint](https://agentprime.io/advisories/CVE-2026-80110.md) `CVE-2026-80110` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control - [Cockpit: cockpit: unauthorized modification of login records via integer overflow](https://agentprime.io/advisories/CVE-2026-91142.md) `CVE-2026-91142` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.6 Low · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [Cockpit: cockpit: denial of service in \`cockpit-ws\` due to url-root handling without a trailing slash](https://agentprime.io/advisories/CVE-2026-91147.md) `CVE-2026-91147` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Cockpit: cockpit: denial of service via unbounded connection thread spawning](https://agentprime.io/advisories/CVE-2026-91149.md) `CVE-2026-91149` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.](https://agentprime.io/advisories/CVE-2026-75883.md) `CVE-2026-75883` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)](https://agentprime.io/advisories/CVE-2026-93653.md) `CVE-2026-93653` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-606 - [Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram](https://agentprime.io/advisories/CVE-2026-81627.md) `CVE-2026-81627` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute](https://agentprime.io/advisories/CVE-2026-76781.md) `CVE-2026-76781` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption - [Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array](https://agentprime.io/advisories/CVE-2026-92091.md) `CVE-2026-92091` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service - [Gimp: integer overflow when generating a thumbnail preview for a psd file](https://agentprime.io/advisories/CVE-2026-92248.md) `CVE-2026-92248` · CVE record: GNOME GIMP and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine](https://agentprime.io/advisories/CVE-2026-85234.md) `CVE-2026-85234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters](https://agentprime.io/advisories/CVE-2026-85013.md) `CVE-2026-85013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Command injection - [Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size](https://agentprime.io/advisories/CVE-2026-91786.md) `CVE-2026-91786` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [PackageKit: dnf5 backend ignores SIMULATE on RepoRemove](https://agentprime.io/advisories/CVE-2026-19816.md) `CVE-2026-19816` · CVE record: Fedora Fedora and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control - [Sssd: sssd: denial of service in nss responder via crafted zero-length requests](https://agentprime.io/advisories/CVE-2026-90996.md) `CVE-2026-90996` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: local denial of service due to null pointer dereference in pam responder](https://agentprime.io/advisories/CVE-2026-90995.md) `CVE-2026-90995` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via malformed pam v1 requests](https://agentprime.io/advisories/CVE-2026-90994.md) `CVE-2026-90994` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: local oob read in nss service request parsers (\`sss_nss_protocol_parse_svc_name\` / \`sss_nss_protocol_parse_svc_port\`)](https://agentprime.io/advisories/CVE-2026-90463.md) `CVE-2026-90463` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file](https://agentprime.io/advisories/CVE-2026-90947.md) `CVE-2026-90947` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch](https://agentprime.io/advisories/CVE-2026-90949.md) `CVE-2026-90949` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions](https://agentprime.io/advisories/CVE-2026-90948.md) `CVE-2026-90948` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Device-mapper-multipath: local denial of service via blocking ipc send operations](https://agentprime.io/advisories/CVE-2026-89329.md) `CVE-2026-89329` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-1322 - [Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough](https://agentprime.io/advisories/CVE-2026-18495.md) `CVE-2026-18495` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Memory corruption - [Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink](https://agentprime.io/advisories/CVE-2026-77159.md) `CVE-2026-77159` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-61 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .