RH
Product
Red Hat Enterprise Linux 7 Extended Lifecycle Support
by Red Hat · last CVE Oct 21, 2026
On CISA KEVExploited in the wild
355
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 77High 229Medium 47Low 2
Watch

Add Red Hat Enterprise Linux 7 Extended Lifecycle Support to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23884
9.8
0%
Jan 19
Heap-use-after-free in gdi_set_bounds
Affected: All versions, or not specified
CVE-2026-23533
9.8
1%
Jan 19
FreeRDP has heap-buffer-overflow in clear_decompress_residual_data
Affected: All versions, or not specified
CVE-2026-23532
9.8
1%
Jan 19
FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface
Affected: All versions, or not specified
CVE-2026-23531
9.8
1%
Jan 19
FreeRDP has heap-buffer-overflow in clear_decompress
Affected: All versions, or not specified
CVE-2026-23530
9.8
1%
Jan 19
FreeRDP has heap-buffer-overflow in planar_decompress_plane_rle
Affected: All versions, or not specified
CVE-2026-0879
9.8
0%
Jan 13
Sandbox escape due to incorrect boundary conditions in the Graphics component
Affected: All versions, or not specified
CVE-2025-14087
9.8
1%
Dec 10
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Affected: All versions, or not specified
CVE-2026-12297
9.6
0%
Jun 16
Sandbox escape due to incorrect boundary conditions in the Networking component
Affected: All versions, or not specified
CVE-2026-12296
9.6
0%
Jun 16
Sandbox escape in the Security: Process Sandboxing component
Affected: All versions, or not specified
CVE-2026-12295
9.6
0%
Jun 16
Sandbox escape in the DOM: Navigation component
Affected: All versions, or not specified
CVE-2026-12294
9.6
0%
Jun 16
Sandbox escape in the DOM: Workers component
Affected: All versions, or not specified
CVE-2026-39821
9.6
2%
May 22
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
Affected: All versions, or not specified
CVE-2026-58016
9.1
1%
Jun 30
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Affected: All versions, or not specified
CVE-2026-34002
9.1
0%
May 5
Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
Affected: All versions, or not specified
CVE-2026-34000
9.1
0%
May 5
Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
Affected: All versions, or not specified
CVE-2026-33845
9.1
2%
Apr 30
Gnutls: gnutls: denial of service via dtls zero-length fragment
Affected: All versions, or not specified
CVE-2026-33186
9.1
2%
Mar 20
gRPC-Go has an authorization bypass via missing leading slash in :path
Affected: All versions, or not specified
CVE-2026-4177
9.1
0%
Mar 16
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter
Affected: All versions, or not specified
CVE-2026-22859
9.1
1%
Jan 14
FreeRDP has a heap-buffer-overflow in urb_select_configuration
Affected: All versions, or not specified
CVE-2026-22858
9.1
1%
Jan 14
FreeRDP has a global-buffer-overflow in crypto_base64_decode
Affected: All versions, or not specified
CVE-2026-22855
9.1
1%
Jan 14
FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call
Affected: All versions, or not specified
CVE-2025-7493
9.1
1%
Sep 30
Freeipa: idm: privilege escalation from host to domain admin in freeipa
Affected: All versions, or not specified
CVE-2025-4404
9.1
2%
Jun 17
Freeipa: idm: privilege escalation from host to domain admin in freeipa
Affected: All versions, or not specified
CVE-2025-49794
9.1
1%
Jun 16
Libxml: heap use after free (uaf) leads to denial of service (dos)
Affected: All versions, or not specified
CVE-2025-49796
9.1
2%
Jun 16
Libxml: type confusion leads to denial of service (dos)
Affected: All versions, or not specified
CVE-2026-4480
9.0
14%
May 26
Samba: samba: remote code execution in printing subsystem via unescaped job description
Affected: All versions, or not specified
CVE-2025-32911
9.0
1%
Apr 15
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
Affected: All versions, or not specified
Page 2 of 2 · 77 total