# Red Hat Enterprise Linux 7. Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Luksmeta: missing slot-range validation permits out-of-gap device i/o](https://agentprime.io/advisories/CVE-2026-111555.md) `CVE-2026-111555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1285 - [Spice-server: spice: heap oob read/write via unchecked migration data offsets](https://agentprime.io/advisories/CVE-2026-105958.md) `CVE-2026-105958` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation](https://agentprime.io/advisories/CVE-2026-105959.md) `CVE-2026-105959` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass](https://agentprime.io/advisories/CVE-2026-104715.md) `CVE-2026-104715` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection - [Evolution-data-server: local file disclosure via attach file:// uris](https://agentprime.io/advisories/CVE-2026-110777.md) `CVE-2026-110777` · CVE record: GNOME evolution-data-server and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file](https://agentprime.io/advisories/CVE-2026-109968.md) `CVE-2026-109968` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check](https://agentprime.io/advisories/CVE-2026-100229.md) `CVE-2026-100229` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool](https://agentprime.io/advisories/CVE-2026-109971.md) `CVE-2026-109971` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-214 - [Clevis: clevis: pkcs#11 token pin written to world-readable file](https://agentprime.io/advisories/CVE-2026-109970.md) `CVE-2026-109970` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask](https://agentprime.io/advisories/CVE-2026-109969.md) `CVE-2026-109969` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters](https://agentprime.io/advisories/CVE-2026-100231.md) `CVE-2026-100231` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize](https://agentprime.io/advisories/CVE-2026-86476.md) `CVE-2026-86476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices](https://agentprime.io/advisories/CVE-2026-110036.md) `CVE-2026-110036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()](https://agentprime.io/advisories/CVE-2026-105460.md) `CVE-2026-105460` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection](https://agentprime.io/advisories/CVE-2026-109976.md) `CVE-2026-109976` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding](https://agentprime.io/advisories/CVE-2026-109854.md) `CVE-2026-109854` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path](https://agentprime.io/advisories/CVE-2026-108094.md) `CVE-2026-108094` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 7.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading](https://agentprime.io/advisories/CVE-2026-108093.md) `CVE-2026-108093` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry](https://agentprime.io/advisories/CVE-2026-108063.md) `CVE-2026-108063` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Cups: null pointer dereference via embedded job ticket comments allows remote denial of service](https://agentprime.io/advisories/CVE-2026-107655.md) `CVE-2026-107655` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader](https://agentprime.io/advisories/CVE-2026-107651.md) `CVE-2026-107651` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Memory corruption - [Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption](https://agentprime.io/advisories/CVE-2026-107565.md) `CVE-2026-107565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-1284 - [Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients](https://agentprime.io/advisories/CVE-2026-107161.md) `CVE-2026-107161` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in hot color filter on oversized image](https://agentprime.io/advisories/CVE-2026-106067.md) `CVE-2026-106067` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106066.md) `CVE-2026-106066` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106065.md) `CVE-2026-106065` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8](https://agentprime.io/advisories/CVE-2026-107169.md) `CVE-2026-107169` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: heap use-after-free write in re_init_ic()](https://agentprime.io/advisories/CVE-2026-107167.md) `CVE-2026-107167` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106064.md) `CVE-2026-106064` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null dereference in minput_open_im() after failed m17n_init()](https://agentprime.io/advisories/CVE-2026-107170.md) `CVE-2026-107170` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.9 Low · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()](https://agentprime.io/advisories/CVE-2026-107168.md) `CVE-2026-107168` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file](https://agentprime.io/advisories/CVE-2026-106061.md) `CVE-2026-106061` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Sssd: sssd-kcm: local denial of service via excessive memory preallocation](https://agentprime.io/advisories/CVE-2026-80048.md) `CVE-2026-80048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via race condition in autofs responder](https://agentprime.io/advisories/CVE-2026-104045.md) `CVE-2026-104045` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via incomplete identity provider authentication requests](https://agentprime.io/advisories/CVE-2026-104046.md) `CVE-2026-104046` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file](https://agentprime.io/advisories/CVE-2026-106062.md) `CVE-2026-106062` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free](https://agentprime.io/advisories/CVE-2026-101258.md) `CVE-2026-101258` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106063.md) `CVE-2026-106063` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation](https://agentprime.io/advisories/CVE-2026-104048.md) `CVE-2026-104048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1025 - [Sssd: sssd: information disclosure via query injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104047.md) `CVE-2026-104047` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion](https://agentprime.io/advisories/CVE-2026-88252.md) `CVE-2026-88252` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via crafted passkey kerberos authentication request](https://agentprime.io/advisories/CVE-2026-104044.md) `CVE-2026-104044` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via undersized packet parsing in nss responder](https://agentprime.io/advisories/CVE-2026-104043.md) `CVE-2026-104043` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read in pam responder](https://agentprime.io/advisories/CVE-2026-104042.md) `CVE-2026-104042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via unbounded negative cache growth](https://agentprime.io/advisories/CVE-2026-104041.md) `CVE-2026-104041` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: information disclosure via odata injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104040.md) `CVE-2026-104040` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder](https://agentprime.io/advisories/CVE-2026-104039.md) `CVE-2026-104039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via missing sid extension in certificate mapping](https://agentprime.io/advisories/CVE-2026-104038.md) `CVE-2026-104038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via packet length underflow in autofs responder](https://agentprime.io/advisories/CVE-2026-104037.md) `CVE-2026-104037` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via premature ldap access rule evaluation](https://agentprime.io/advisories/CVE-2026-92821.md) `CVE-2026-92821` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-393 - [Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin](https://agentprime.io/advisories/CVE-2026-104036.md) `CVE-2026-104036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via memory exhaustion in kcm responder](https://agentprime.io/advisories/CVE-2026-104035.md) `CVE-2026-104035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via use-after-free in kcm ticket renewal](https://agentprime.io/advisories/CVE-2026-104034.md) `CVE-2026-104034` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via improper ldap shadow expiration check](https://agentprime.io/advisories/CVE-2026-104033.md) `CVE-2026-104033` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193 - [Sssd: sssd: denial of service via unprivileged autofs cache invalidation](https://agentprime.io/advisories/CVE-2026-104032.md) `CVE-2026-104032` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-408 - [Sssd: sssd: denial of service via memory exhaustion in autofs responder](https://agentprime.io/advisories/CVE-2026-104031.md) `CVE-2026-104031` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via out-of-bounds read in autofs responder](https://agentprime.io/advisories/CVE-2026-104029.md) `CVE-2026-104029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read during passkey parsing](https://agentprime.io/advisories/CVE-2026-104030.md) `CVE-2026-104030` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject](https://agentprime.io/advisories/CVE-2026-104988.md) `CVE-2026-104988` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass - [Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader](https://agentprime.io/advisories/CVE-2026-95512.md) `CVE-2026-95512` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .