RH
Product
Red Hat Enterprise Linux 7 Extended Lifecycle Support
On CISA KEVExploited in the wild
355
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 77High 229Medium 47Low 2
Watch
Add Red Hat Enterprise Linux 7 Extended Lifecycle Support to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23884 | 9.8 | Jan 19 | Heap-use-after-free in gdi_set_bounds Affected: All versions, or not specified |
| CVE-2026-23533 | 9.8 | Jan 19 | FreeRDP has heap-buffer-overflow in clear_decompress_residual_data Affected: All versions, or not specified |
| CVE-2026-23532 | 9.8 | Jan 19 | FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface Affected: All versions, or not specified |
| CVE-2026-23531 | 9.8 | Jan 19 | FreeRDP has heap-buffer-overflow in clear_decompress Affected: All versions, or not specified |
| CVE-2026-23530 | 9.8 | Jan 19 | FreeRDP has heap-buffer-overflow in planar_decompress_plane_rle Affected: All versions, or not specified |
| CVE-2026-0879 | 9.8 | Jan 13 | Sandbox escape due to incorrect boundary conditions in the Graphics component Affected: All versions, or not specified |
| CVE-2025-14087 | 9.8 | Dec 10 | Glib: glib: buffer underflow in gvariant parser leads to heap corruption Affected: All versions, or not specified |
| CVE-2026-12297 | 9.6 | Jun 16 | Sandbox escape due to incorrect boundary conditions in the Networking component Affected: All versions, or not specified |
| CVE-2026-12296 | 9.6 | Jun 16 | Sandbox escape in the Security: Process Sandboxing component Affected: All versions, or not specified |
| CVE-2026-12295 | 9.6 | Jun 16 | Sandbox escape in the DOM: Navigation component Affected: All versions, or not specified |
| CVE-2026-12294 | 9.6 | Jun 16 | Sandbox escape in the DOM: Workers component Affected: All versions, or not specified |
| CVE-2026-39821 | 9.6 | May 22 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna Affected: All versions, or not specified |
| CVE-2026-58016 | 9.1 | Jun 30 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" Affected: All versions, or not specified |
| CVE-2026-34002 | 9.1 | May 5 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling Affected: All versions, or not specified |
| CVE-2026-34000 | 9.1 | May 5 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. Affected: All versions, or not specified |
| CVE-2026-33845 | 9.1 | Apr 30 | Gnutls: gnutls: denial of service via dtls zero-length fragment Affected: All versions, or not specified |
| CVE-2026-33186 | 9.1 | Mar 20 | gRPC-Go has an authorization bypass via missing leading slash in :path Affected: All versions, or not specified |
| CVE-2026-4177 | 9.1 | Mar 16 | YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter Affected: All versions, or not specified |
| CVE-2026-22859 | 9.1 | Jan 14 | FreeRDP has a heap-buffer-overflow in urb_select_configuration Affected: All versions, or not specified |
| CVE-2026-22858 | 9.1 | Jan 14 | FreeRDP has a global-buffer-overflow in crypto_base64_decode Affected: All versions, or not specified |
| CVE-2026-22855 | 9.1 | Jan 14 | FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call Affected: All versions, or not specified |
| CVE-2025-7493 | 9.1 | Sep 30 | Freeipa: idm: privilege escalation from host to domain admin in freeipa Affected: All versions, or not specified |
| CVE-2025-4404 | 9.1 | Jun 17 | Freeipa: idm: privilege escalation from host to domain admin in freeipa Affected: All versions, or not specified |
| CVE-2025-49794 | 9.1 | Jun 16 | Libxml: heap use after free (uaf) leads to denial of service (dos) Affected: All versions, or not specified |
| CVE-2025-49796 | 9.1 | Jun 16 | Libxml: type confusion leads to denial of service (dos) Affected: All versions, or not specified |
| CVE-2026-4480 | 9.0 | May 26 | Samba: samba: remote code execution in printing subsystem via unescaped job description Affected: All versions, or not specified |
| CVE-2025-32911 | 9.0 | Apr 15 | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value Affected: All versions, or not specified |
