CVE-2026-71870
Severity: moderate
Released on: 07/08/2026
Advisory:
Bugzilla: 2512627
Bugzilla Description: pypdf: pypdf: Denial of Service via crafted PDF with large /ToUnicode streams
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-71852
Severity: moderate
Released on: 07/08/2026
Advisory:
Bugzilla: 2512615
Bugzilla Description: pypdf: pypdf: Denial of Service via crafted PDF with large CID font width ranges
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1050
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18938
Severity: moderate
Released on: 07/08/2026
Advisory:
Bugzilla: 2478995
Bugzilla Description: p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-12261
Severity: moderate
Released on: 07/08/2026
Advisory:
Bugzilla: 2512413
Bugzilla Description: nltk: NLTK: Resource poisoning via improper package archive extraction
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-367
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2025-63235
Severity: important
Released on: 07/08/2026
Advisory:
Bugzilla: 2512606
Bugzilla Description: codepr sol: Sol: Denial of service via resource exhaustion from malformed CONNECT packets
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-772
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-71430
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2512248
Bugzilla Description: re2: node-re2: Denial of Service due to excessive string length in replacements
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-131
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-71497
Severity: moderate
Released on: 06/08/2026
Advisory:
Bugzilla: 2512346
Bugzilla Description: org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-1289
Affected Packages:
Package States: Cryostat 4,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,Red Hat AMQ Broker 7,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Quarkus,Red Hat build of Quarkus Native builder,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-61632
Severity: moderate
Released on: 06/08/2026
Advisory:
Bugzilla: 2512227
Bugzilla Description: pymdown-extensions: PyMdown Extensions: Information disclosure via path traversal in b64 extension
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-67422
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2512322
Bugzilla Description: pymdown-extensions: Pymdown-extensions: Denial of Service via Regular Expression Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-66808
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2509774
Bugzilla Description: hypershift-addon-operator: hypershift-addon-operator: unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection)
CVSS Score:
CVSSv3 Score: 8.7
Vector:
CWE: CWE-88
Affected Packages:
Package States: Multicluster Engine for Kubernetes,
Full Details
CVE document

CVE-2026-71436
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2512242
Bugzilla Description: mermaid: Mermaid XY Charts: Denial of Service via invalid X-Axis parameters
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Build of Podman Desktop,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-18427
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2512116
Bugzilla Description: @fastify/static: @fastify/static: Information disclosure via route guard bypass
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-41
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-61477
Severity: low
Released on: 06/08/2026
Advisory:
Bugzilla: 2512066
Bugzilla Description: libvirt: libvirt: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection
CVSS Score:
CVSSv3 Score: 2.3
Vector:
CWE: CWE-93
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux for NVIDIA 26,
Full Details
CVE document

CVE-2026-46581
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2483136
Bugzilla Description: wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2026-68480
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2508363
Bugzilla Description: kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68481
Severity: moderate
Released on: 06/08/2026
Advisory:
Bugzilla: 2511994
Bugzilla Description: org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Revocation bypass allows unauthorized access
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-303
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 5,
Full Details
CVE document

CVE-2026-18649
Severity: moderate
Released on: 06/08/2026
Advisory:
Bugzilla: 2510614
Bugzilla Description: gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-7867
Severity: important
Released on: 06/08/2026
Advisory:
Bugzilla: 2466747
Bugzilla Description: udisks2: udisks2: Local Privilege Escalation via as-user option spoofing
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-15816
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2500889
Bugzilla Description: dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-71313
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511782
Bugzilla Description: github.com/rclone/rclone: rclone: Path Traversal allows arbitrary file write
CVSS Score:
CVSSv3 Score: 6.9
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-71312
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511773
Bugzilla Description: github.com/rclone/rclone: rclone: Server-Side Command Execution via Malicious SFTP Filenames
CVSS Score:
CVSSv3 Score: 8.0
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-71311
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511771
Bugzilla Description: github.com/rclone/rclone: rclone: FTP command injection via CRLF in filename encoding
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-93
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-34966
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511770
Bugzilla Description: code.gitea.io/gitea: Gitea: Information disclosure via Server-Side Request Forgery (SSRF) bypass
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-918
Affected Packages:
Package States: OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,
Full Details
CVE document

CVE-2026-71310
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511772
Bugzilla Description: github.com/rclone/rclone: rclone: Denial of Service via unbounded HTTP CONNECT response headers
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-71309
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511774
Bugzilla Description: github.com/rclone/rclone: rclone: Backend Root Escape via Incomplete Path Validation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-18839
Severity: low
Released on: 05/08/2026
Advisory:
Bugzilla: 2511010
Bugzilla Description: popt-devel: popt-static: size_t underflow in singleOptionHelp
CVSS Score:
CVSSv3 Score: 2.2
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-70428
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511664
Bugzilla Description: jenkins: Jenkins: Arbitrary file write via path traversal
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-22
Affected Packages:
Package States: OpenShift Developer Tools and Services,
Full Details
CVE document

CVE-2026-49331
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2483252
Bugzilla Description: openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-345
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-16443
Severity: important
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50847, RHSA-2026:50849, RHSA-2026:50846,
Bugzilla: 2503139
Bugzilla Description: keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-347
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk/keycloak-operator-bundle:26.4.14-1,rhbk-keycloak-rhel9/rhbk-keycloak-rhel9,keycloak-services,rhbk-openshift-rhel9/rhbk-openshift-rhel9,rhbk/keycloak-rhel9-operator:26.6-11,rhbk/keycloak-rhel9-operator:26.4-22,rhbk/keycloak-operator-bundle:26.6.5-1,rhbk/keycloak-rhel9:26.4-22,
Package States: Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-71227
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2462867
Bugzilla Description: libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-71281
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511563
Bugzilla Description: peft: peft: Arbitrary Code Execution via Unsafe Deserialization in LoRA-GA and CorDA Modules
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-502
Affected Packages:
Package States: Lightspeed Core,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-71267
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511585
Bugzilla Description: microtar: microtar: Stack buffer overflow via overly long filenames
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-120
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-71226
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2462114
Bugzilla Description: libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-71225
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2462011
Bugzilla Description: libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-330
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-71235
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511475
Bugzilla Description: github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-94
Affected Packages:
Package States: Assisted Installer for Red Hat OpenShift Container Platform 2,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Compliance Operator,Confidential Compute Attestation,Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,Deployment Validation Operator,External Secrets Operator for Red Hat OpenShift,Fence Agents Remediation Operator,File Integrity Operator,Gatekeeper 3,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Machine Deletion Remediation Operator,Migration Toolkit for Applications 8,Migration Toolkit for Containers,mirror registry for Red Hat OpenShift 2,Multiarch Tuning Operator,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Global Hub,Network Observability Operator,Node HealthCheck Operator,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Lightspeed,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Source-to-Image (S2I),Power monitoring for Red Hat OpenShift,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Connectivity Link 1,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Lightspeed for Runtimes Operator,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Cluster Manager CLI,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift for Windows Containers,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Service Interconnect 2,Red Hat Service Interconnect 2,Red Hat Web Terminal,Security Profiles Operator,Service Telemetry Framework 1.5,streams for Apache Kafka 2,streams for Apache Kafka 3,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager - Tech Preview,
Full Details
CVE document

CVE-2026-59679
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2509620
Bugzilla Description: libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-44950
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2509622
Bugzilla Description: libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-10059
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2483187
Bugzilla Description: cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via ClusterCurator ServiceAccount token
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-266
Affected Packages:
Package States: Multicluster Engine for Kubernetes,
Full Details
CVE document

CVE-2026-10090
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2483292
Bugzilla Description: multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped ClusterRoleBinding and become cluster-admin via Application Subscription
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-267
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-71202
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511381
Bugzilla Description: raster: Raster: Denial of Service via integer underflow in image cropping function
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-67592
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511341
Bugzilla Description: org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via uncontrolled incoming data transfers
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AMQ Clients,
Full Details
CVE document

CVE-2026-66277
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511340
Bugzilla Description: org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via uncontrolled transfer frames
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat AMQ Clients,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Quarkus,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2026-66274
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511337
Bugzilla Description: org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat AMQ Clients,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Quarkus,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2026-67589
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511321
Bugzilla Description: org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via excessive memory allocation
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AMQ Clients,
Full Details
CVE document

CVE-2026-67588
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511324
Bugzilla Description: org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via unbounded symbol value caching
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AMQ Clients,
Full Details
CVE document

CVE-2026-15572
Severity: important
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50847, RHSA-2026:50849, RHSA-2026:50846,
Bugzilla: 2499592
Bugzilla Description: keycloak-services: keycloak-services: DCR protocol mapper type-swap policy bypass allows privilege escalation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk/keycloak-operator-bundle:26.4.14-1,rhbk/keycloak-rhel9,rhbk/keycloak-rhel9-operator:26.6-11,rhbk/keycloak-rhel9-operator:26.4-22,rhbk/keycloak-operator-bundle:26.6.5-1,rhbk/keycloak-rhel9:26.4-22,
Package States:
Full Details
CVE document

CVE-2026-15573
Severity: important
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50847, RHSA-2026:50849, RHSA-2026:50846,
Bugzilla: 2499593
Bugzilla Description: keycloak-services: keycloak-services: Authorization bypass via unnormalized URI matching in PathMatcher
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE:
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk/keycloak-operator-bundle:26.4.14-1,rhbk/keycloak-rhel9,keycloak-services,rhbk-openshift-rhel9/rhbk-openshift-rhel9,rhbk/keycloak-rhel9-operator:26.6-11,rhbk/keycloak-rhel9-operator:26.4-22,rhbk/keycloak-operator-bundle:26.6.5-1,rhbk/keycloak-rhel9:26.4-22,
Package States: Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-16071
Severity: moderate
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50847, RHSA-2026:50849, RHSA-2026:50846,
Bugzilla: 2501720
Bugzilla Description: keycloak-services: keycloak-services: LDAP entry-DN user search bypasses configured users DN boundary
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE:
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk/keycloak-operator-bundle:26.4.14-1,rhbk-keycloak-rhel9/rhbk-keycloak-rhel9,keycloak-services,rhbk-openshift-rhel9/rhbk-openshift-rhel9,rhbk/keycloak-rhel9-operator:26.6-11,rhbk/keycloak-rhel9-operator:26.4-22,rhbk/keycloak-operator-bundle:26.6.5-1,rhbk/keycloak-rhel9:26.4-22,
Package States: Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-16100
Severity: moderate
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50849,
Bugzilla: 2501730
Bugzilla Description: keycloak-services: keycloak-services: Unbounded metric cardinality in user event metrics via request-controlled error text
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE:
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk-keycloak-rhel9/rhbk-keycloak-rhel9,keycloak-services,rhbk/keycloak-rhel9-operator:26.6-11,rhbk-openshift-rhel9/rhbk-openshift-rhel9,rhbk/keycloak-operator-bundle:26.6.5-1,
Package States: Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-16102
Severity: important
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50847, RHSA-2026:50849, RHSA-2026:50846,
Bugzilla: 2501735
Bugzilla Description: keycloak-services: keycloak-services: Default DCR policy allows role forgery via User Property mappers
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE:
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk/keycloak-operator-bundle:26.4.14-1,rhbk-keycloak-rhel9/rhbk-keycloak-rhel9,keycloak-services,rhbk-openshift-rhel9/rhbk-openshift-rhel9,rhbk/keycloak-rhel9-operator:26.6-11,rhbk/keycloak-rhel9-operator:26.4-22,rhbk/keycloak-operator-bundle:26.6.5-1,rhbk/keycloak-rhel9:26.4-22,
Package States: Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-16442
Severity: important
Released on: 05/08/2026
Advisory: RHSA-2026:50848, RHSA-2026:50847, RHSA-2026:50849, RHSA-2026:50846,
Bugzilla: 2503138
Bugzilla Description: keycloak-services: keycloak-services: SAML IdP-initiated broker login bypasses link-only restriction
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-346
Affected Packages: rhbk/keycloak-rhel9:26.6-11,rhbk/keycloak-operator-bundle:26.4.14-1,rhbk-keycloak-rhel9/rhbk-keycloak-rhel9,keycloak-services,rhbk-openshift-rhel9/rhbk-openshift-rhel9,rhbk/keycloak-rhel9-operator:26.6-11,rhbk/keycloak-rhel9-operator:26.4-22,rhbk/keycloak-operator-bundle:26.6.5-1,rhbk/keycloak-rhel9:26.4-22,
Package States: Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-64579
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511404
Bugzilla Description: kernel: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64569
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511406
Bugzilla Description: kernel: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64574
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511407
Bugzilla Description: kernel: wifi: mac80211: tear down new links on vif update error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64567
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511408
Bugzilla Description: kernel: btrfs: reject free space cache with more entries than pages
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64566
Severity:
Released on: 05/08/2026
Advisory:
Bugzilla: 2511410
Bugzilla Description: kernel: xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()
CVSS Score:
Vector:
CWE: CWE-821
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64571
Severity:
Released on: 05/08/2026
Advisory:
Bugzilla: 2511411
Bugzilla Description: kernel: wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
CVSS Score:
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64578
Severity:
Released on: 05/08/2026
Advisory:
Bugzilla: 2511412
Bugzilla Description: kernel: ksmbd: validate compound request size before reading StructureSize2
CVSS Score:
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64572
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511413
Bugzilla Description: kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64575
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511414
Bugzilla Description: kernel: bpf: tcp: fix double sock release on batch realloc
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64577
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511415
Bugzilla Description: kernel: gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64573
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511417
Bugzilla Description: kernel: Bluetooth: qca: fix NVM tag length underflow in TLV parser
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64576
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511419
Bugzilla Description: kernel: nexthop: initialize extack in nh_res_bucket_migrate()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64570
Severity: moderate
Released on: 05/08/2026
Advisory:
Bugzilla: 2511421
Bugzilla Description: kernel: wifi: mac80211: fix fils_discovery double free on alloc failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-64582
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511448
Bugzilla Description: kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67863
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511847
Bugzilla Description: open62541: open62541: Denial of Service via use-after-free vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-67870
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511857
Bugzilla Description: open62541: open62541: Denial of Service via incomplete validation in AddReferences
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-67869
Severity: important
Released on: 05/08/2026
Advisory:
Bugzilla: 2511858
Bugzilla Description: open62541: open62541: Denial of Service via buffer overflow in Service_Call
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18785
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2511141
Bugzilla Description: open62541: open62541: Use-after-free vulnerability via local manipulation
CVSS Score:
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-56848
Severity: important
Released on: 04/08/2026
Advisory:
Bugzilla: 2511089
Bugzilla Description: nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-15920
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2511091
Bugzilla Description: django: Django: Cross-site scripting via unvalidated URLField values in the admin
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-15830
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2511103
Bugzilla Description: django: Django: Denial of Service via parsing deeply nested geometry collections
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-15337
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2511110
Bugzilla Description: django: Django: Denial-of-service vulnerability due to excessive memory consumption
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-1050
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-15307
Severity: important
Released on: 04/08/2026
Advisory:
Bugzilla: 2511095
Bugzilla Description: django: Django: Remote code execution via GeoDjango spatial lookups
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-434
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-68494
Severity: important
Released on: 04/08/2026
Advisory:
Bugzilla: 2511026
Bugzilla Description: com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Cryostat 4,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat build of Debezium 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of Quarkus,Red Hat Certificate System 10,Red Hat Certificate System 11,Red Hat Data Grid 8,Red Hat Data Grid 8,Red Hat Data Grid 8,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 7,Red Hat JBoss Web Server 7,Red Hat JBoss Web Server 7,Red Hat JBoss Web Server 7,Red Hat Lightspeed for Runtimes Operator,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Single Sign-On 7,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-70368
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2462029
Bugzilla Description: stunnel: Stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-70367
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2462083
Bugzilla Description: stunnel: SSRF bypass in stunnel SOCKS proxy via IPv4-mapped IPv6 loopback and unspecified addresses allows access to loopback-only services
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-56846
Severity: important
Released on: 04/08/2026
Advisory: RHSA-2026:48305, RHSA-2026:48537,
Bugzilla: 2510856
Bugzilla Description: nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: nodejs22-main-22.23.2-2.3.hum1,nodejs24-main-24.18.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-17614
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2507631
Bugzilla Description: wildfly-core: Path Traversal on WildFly Domain Controller
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-42169
Severity: moderate
Released on: 04/08/2026
Advisory: RHSA-2026:50817,
Bugzilla: 2461725
Bugzilla Description: gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-131
Affected Packages: gimp-2:3.0.4-4.el9_8.9,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2026-42170
Severity: important
Released on: 04/08/2026
Advisory:
Bugzilla: 2461726
Bugzilla Description: gimp: GIMP DDS plug-in heap-based buffer overflow via BPP mismatch in load_layer() (ddsread.c)
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-131
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-64561
Severity: important
Released on: 04/08/2026
Advisory: RHSA-2026:45192, RHSA-2026:49030, RHSA-2026:47869, RHSA-2026:49031, RHSA-2026:48386, RHSA-2026:45114, RHSA-2026:45116, RHSA-2026:45115,
Bugzilla: 2510891
Bugzilla Description: kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages: kernel-0:5.14.0-687.30.1.el9_8,kernel-0:6.12.0-55.94.1.el10_0,kernel-0:4.18.0-553.147.1.el8_10,kernel-0:5.14.0-427.141.1.el9_4,kernel-0:4.18.0-477.156.1.el8_8,kernel-0:5.14.0-570.131.1.el9_6,kernel-rt-0:4.18.0-553.147.1.rt7.488.el8_10,kernel-0:6.12.0-211.39.1.el10_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-51401
Severity: important
Released on: 04/08/2026
Advisory:
Bugzilla: 2511255
Bugzilla Description: vim: Vim: Arbitrary code execution via vms_fixfilename() function
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-641
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-51400
Severity: moderate
Released on: 04/08/2026
Advisory:
Bugzilla: 2511268
Bugzilla Description: vim: Vim: Arbitrary code execution via vms_fixfilename() function
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-8400
Severity: important
Released on: 04/08/2026
Advisory:
Bugzilla: 2512497
Bugzilla Description: java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-470
Affected Packages:
Package States: Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2026-69240
Severity: critical
Released on: 03/08/2026
Advisory:
Bugzilla: 2510799
Bugzilla Description: sequelize: Sequelize: SQL Injection via improper handling of Oracle date functions
CVSS Score:
CVSSv3 Score: 9.8
Vector:
CWE: CWE-89
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-69198
Severity: moderate
Released on: 03/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:49401,
Bugzilla: 2510803
Bugzilla Description: ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-1389
Affected Packages: grafana13-1-main-13.1.1-0.5.2.hum1,grafana12-4-main-12.4.6-0.3.hum1,
Package States: Cryostat 4,Cryostat 4,Cryostat 4,Exploit Intelligence,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-69192
Severity: important
Released on: 03/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:50969, RHSA-2026:50854, RHSA-2026:50956,
Bugzilla: 2510801
Bugzilla Description: ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: CWE-1389
Affected Packages: grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.2-0.1.hum1,grafana12-4-main-12.4.7-0.1.hum1,grafana12-4-main-12.4.6-0.4.1.hum1,
Package States: Cryostat 4,Cryostat 4,Cryostat 4,Exploit Intelligence,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-69185
Severity: important
Released on: 03/08/2026
Advisory:
Bugzilla: 2510755
Bugzilla Description: socket.io-parser: Socket.IO: Denial of Service via memory exhaustion from crafted packets
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-18739
Severity: low
Released on: 03/08/2026
Advisory:
Bugzilla: 2510737
Bugzilla Description: popt-devel: popt-static: Off-by-one in poptStuffArgs
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-69153
Severity: important
Released on: 03/08/2026
Advisory: RHSA-2026:50287, RHSA-2026:50079, RHSA-2026:50826, RHSA-2026:50070, RHSA-2026:50290,
Bugzilla: 2510719
Bugzilla Description: postcss: PostCSS: Information disclosure via crafted sourceMappingURL
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-22
Affected Packages: prometheus3-13-main-3.13.2-0.2.hum1,grafana12-4-main-12.4.6-0.4.hum1,grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.1.hum1,prometheus3-5-main-3.5.5-0.7.hum1,
Package States: Cryostat 4,Cryostat 4,Cryostat 4,Gatekeeper 3,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat Build of Keycloak,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Virtualization 4,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Single Sign-On 7,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-69152
Severity: important
Released on: 03/08/2026
Advisory: RHSA-2026:50079, RHSA-2026:50826, RHSA-2026:50290,
Bugzilla: 2510722
Bugzilla Description: brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: grafana12-4-main-12.4.6-0.4.hum1,grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.1.hum1,
Package States: Cryostat 4,Cryostat 4,Cryostat 4,Exploit Intelligence,Gatekeeper 3,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Apicurio Registry 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Directory Server 11,Red Hat Directory Server 12,Red Hat Directory Server 13,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Single Sign-On 7,Red Hat Trusted Profile Analyzer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-69151
Severity: important
Released on: 03/08/2026
Advisory:
Bugzilla: 2510726
Bugzilla Description: @angular/compiler: @angular/core: Angular: Cross-Site Scripting via internationalization event handlers
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat build of Apicurio Registry 3,Red Hat Ceph Storage 4,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68945
Severity: important
Released on: 03/08/2026
Advisory:
Bugzilla: 2510710
Bugzilla Description: @angular/common: Angular: Cross-Request Response Reuse and State Poisoning in HttpTransferCache
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-694
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat build of Apicurio Registry 3,Red Hat Ceph Storage 4,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68744
Severity: low
Released on: 03/08/2026
Advisory:
Bugzilla: 2509761
Bugzilla Description: sssd: sssd: NSS responder uninitialized heap disclosure in initgroups reply
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-68742
Severity: moderate
Released on: 03/08/2026
Advisory:
Bugzilla: 2509762
Bugzilla Description: sssd: sssd: NSS responder out-of-bounds read via unchecked addrlen in GETHOSTBYADDR
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-68743
Severity: moderate
Released on: 03/08/2026
Advisory:
Bugzilla: 2509760
Bugzilla Description: sssd: sssd: PAM responder out-of-bounds read via unchecked auth_token_length in protocol v1
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-12259
Severity: moderate
Released on: 03/08/2026
Advisory:
Bugzilla: 2510340
Bugzilla Description: nltk: nltk: Installation of attacker-controlled packages due to improper checksum validation
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-354
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-18651
Severity: moderate
Released on: 03/08/2026
Advisory:
Bugzilla: 2510617
Bugzilla Description: 389-ds-base: 389-ds-base: SASL PLAIN bind installs connection credentials before account-lock check, allowing continued access as a locked account
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-287
Affected Packages:
Package States: Red Hat Directory Server 11,Red Hat Directory Server 12,Red Hat Directory Server 13,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68580
Severity: important
Released on: 02/08/2026
Advisory:
Bugzilla: 2510125
Bugzilla Description: FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68579
Severity: critical
Released on: 02/08/2026
Advisory:
Bugzilla: 2510124
Bugzilla Description: FreeRDP: FreeRDP: Arbitrary Code Execution via Heap Overflow in Clipboard Processing
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67323
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:44416, RHSA-2026:45785, RHSA-2026:45940,
Bugzilla: 2509976
Bugzilla Description: gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options
CVSS Score:
CVSSv3 Score: 8.4
Vector:
CWE: CWE-88
Affected Packages: swift-lang-main-6.3.3-0.1.1.hum1,llvm21-main-21.1.8-8.hum1,llvm-main-22.1.8-4.1.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67302
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509981
Bugzilla Description: FreeRDP: FreeRDP: Denial of service in camera redirection due to divide-by-zero
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67299
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509985
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67318
Severity: moderate
Released on: 01/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:49714,
Bugzilla: 2509989
Bugzilla Description: axios: axios: Denial of Service due to maxBodyLength bypass in HTTP/2 requests
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages: grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.hum1,
Package States: Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67306
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509996
Bugzilla Description: FreeRDP: FreeRDP: Out-of-bounds read vulnerability via crafted RDP messages
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67295
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509998
Bugzilla Description: FreeRDP: FreeRDP: Unauthorized File Access via Drive Redirection Vulnerability
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-66401
Severity: low
Released on: 01/08/2026
Advisory:
Bugzilla: 2510002
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in UVC H.264 parser
CVSS Score:
CVSSv3 Score: 2.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67326
Severity: moderate
Released on: 01/08/2026
Advisory: RHSA-2026:44416, RHSA-2026:45785, RHSA-2026:45940,
Bugzilla: 2510003
Bugzilla Description: gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-93
Affected Packages: swift-lang-main-6.3.3-0.1.1.hum1,llvm21-main-21.1.8-8.hum1,llvm-main-22.1.8-4.1.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67312
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:47619, RHSA-2026:48241, RHSA-2026:48758,
Bugzilla: 2510007
Bugzilla Description: axios: axios: Denial of Service via uncontrolled recursion in form data processing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-674
Affected Packages: jaeger-main-2.20.0-0.8.hum1,grafana13-1-main-13.1.1-0.3.hum1,grafana12-4-main-12.4.6-0.2.hum1,
Package States: Cryostat 4,Cryostat 4,Gatekeeper 3,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,Network Observability Operator,OpenShift Pipelines,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Apicurio Registry 3,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Trusted Artifact Signer,Red Hat Trusted Profile Analyzer,Red Hat Trusted Profile Analyzer,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-67316
Severity: low
Released on: 01/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:49714,
Bugzilla: 2510009
Bugzilla Description: axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-915
Affected Packages: grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.hum1,
Package States: Cryostat 4,Cryostat 4,Gatekeeper 3,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,Network Observability Operator,OpenShift Pipelines,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Apicurio Registry 3,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Trusted Artifact Signer,Red Hat Trusted Profile Analyzer,Red Hat Trusted Profile Analyzer,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-67291
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510010
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67321
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:47619, RHSA-2026:48241, RHSA-2026:48758,
Bugzilla: 2510011
Bugzilla Description: axios: axios: Denial of Service via object serialization bypass
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: jaeger-main-2.20.0-0.8.hum1,grafana13-1-main-13.1.1-0.3.hum1,grafana12-4-main-12.4.6-0.2.hum1,
Package States:
Full Details
CVE document

CVE-2026-67300
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510013
Bugzilla Description: FreeRDP: FreeRDP: Use-After-Free vulnerability leading to denial of service
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67315
Severity: moderate
Released on: 01/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:49714,
Bugzilla: 2510019
Bugzilla Description: axios: axios: NO_PROXY bypass allows exposure of local services
CVSS Score:
CVSSv3 Score: 5.8
Vector:
CWE: CWE-115
Affected Packages: grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.hum1,
Package States: Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67319
Severity: moderate
Released on: 01/08/2026
Advisory: RHSA-2026:49387, RHSA-2026:49401,
Bugzilla: 2510023
Bugzilla Description: axios: axios: Information disclosure and data manipulation via prototype pollution
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-915
Affected Packages: grafana13-1-main-13.1.1-0.4.hum1,grafana12-4-main-12.4.6-0.3.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67292
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510028
Bugzilla Description: FreeRDP: FreeRDP: Information Disclosure and Denial of Service via WebSocket Ping
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67324
Severity: important
Released on: 01/08/2026
Advisory:
Bugzilla: 2510032
Bugzilla Description: gitpython: GitPython: Arbitrary Code Execution via Joined Short Options Bypass
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-78
Affected Packages:
Package States: Exploit Intelligence,Migration Toolkit for Applications 8,Pen Drive Powered by Red Hat Lightspeed,Pen Drive Powered by Red Hat Lightspeed,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-67303
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510038
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service via unsupported serial device control request
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67298
Severity: important
Released on: 01/08/2026
Advisory:
Bugzilla: 2510041
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67320
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:47619, RHSA-2026:48241, RHSA-2026:48758,
Bugzilla: 2509993
Bugzilla Description: axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-915
Affected Packages: jaeger-main-2.20.0-0.8.hum1,grafana13-1-main-13.1.1-0.3.hum1,grafana12-4-main-12.4.6-0.2.hum1,
Package States:
Full Details
CVE document

CVE-2026-67338
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509997
Bugzilla Description: jupyterlab: JupyterLab: Stored cross-site scripting in Extension Manager allows arbitrary code execution
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Migration Toolkit for Applications 8,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-67294
Severity: low
Released on: 01/08/2026
Advisory:
Bugzilla: 2509999
Bugzilla Description: FreeRDP: FreeRDP: Server certificate validation bypass via improper Extended Key Usage (EKU) validation
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67322
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:44416, RHSA-2026:45785, RHSA-2026:45940,
Bugzilla: 2510021
Bugzilla Description: gitpython: GitPython: Environment variable exfiltration via attacker-controlled clone URL
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-214
Affected Packages: swift-lang-main-6.3.3-0.1.1.hum1,llvm21-main-21.1.8-8.hum1,llvm-main-22.1.8-4.1.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-66402
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510026
Bugzilla Description: FreeRDP: FreeRDP: Server Identity Verification Bypass via TLS Certificate Validation Weaknesses
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-222
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67296
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510029
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67304
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510034
Bugzilla Description: FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67325
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:44416, RHSA-2026:45785, RHSA-2026:45940,
Bugzilla: 2509975
Bugzilla Description: gitpython: GitPython: Command Injection via Git option prefix abbreviation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-78
Affected Packages: swift-lang-main-6.3.3-0.1.1.hum1,llvm21-main-21.1.8-8.hum1,llvm-main-22.1.8-4.1.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67297
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509986
Bugzilla Description: FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67301
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2509994
Bugzilla Description: FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67293
Severity: moderate
Released on: 01/08/2026
Advisory:
Bugzilla: 2510015
Bugzilla Description: FreeRDP: FreeRDP: Weakens TLS server authentication due to improper wildcard certificate hostname validation
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67313
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:48758, RHSA-2026:49714,
Bugzilla: 2510017
Bugzilla Description: axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-674
Affected Packages: jaeger-main-2.20.0-0.8.hum1,grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67305
Severity: important
Released on: 01/08/2026
Advisory:
Bugzilla: 2510027
Bugzilla Description: FreeRDP: FreeRDP Windows Client: Remote Code Execution via Heap Buffer Overflow in Clipboard Processing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-67314
Severity: important
Released on: 01/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:48758, RHSA-2026:49714,
Bugzilla: 2510030
Bugzilla Description: axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-915
Affected Packages: jaeger-main-2.20.0-0.8.hum1,grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-67317
Severity: moderate
Released on: 01/08/2026
Advisory: RHSA-2026:50826, RHSA-2026:49714,
Bugzilla: 2510031
Bugzilla Description: axios: axios: Denial of Service via maxBodyLength bypass with ReadableStream
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages: grafana13-1-main-13.1.1-0.5.2.hum1,grafana13-1-main-13.1.1-0.5.hum1,
Package States: Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-54787
Severity: low
Released on: 31/07/2026
Advisory: RHSA-2026:44162, RHSA-2026:47891, RHSA-2026:47889,
Bugzilla: 2509939
Bugzilla Description: github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-347
Affected Packages: spire1-14-main-1.14.7-0.3.hum1,spire1-15-main-1.15.2-0.3.hum1,trivy-main-0.72.0-0.1.3.hum1,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-68770
Severity: important
Released on: 31/07/2026
Advisory:
Bugzilla: 2509932
Bugzilla Description: sentence-transformers: sentence-transformers: Remote Code Execution via Security Control Bypass
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-454
Affected Packages:
Package States: Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-17566
Severity: critical
Released on: 31/07/2026
Advisory:
Bugzilla: 2509835
Bugzilla Description: pgAdmin 4: pgAdmin 4: Remote Code Execution via backslash-escape mismatch in Import/Export Data tool
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-78
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17348
Severity: moderate
Released on: 31/07/2026
Advisory:
Bugzilla: 2509842
Bugzilla Description: pgadmin4: pgAdmin 4: Unauthenticated access allows data manipulation and information disclosure
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-306
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18141
Severity: important
Released on: 31/07/2026
Advisory: RHSA-2026:50340, RHSA-2026:50336, RHSA-2026:50479,
Bugzilla: 2508155
Bugzilla Description: aap-gateway: aap-gateway: Authentication bypass in Event-Driven Ansible via forged HTTP header
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-295
Affected Packages: automation-eda-controller-0:1.2.11-1.el9ap,ansible-automation-platform-27/gateway-rhel9:1785435970,ansible-automation-platform-26/gateway-rhel9:1785780020,
Package States: Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-18967
Severity: moderate
Released on: 31/07/2026
Advisory:
Bugzilla: 2511604
Bugzilla Description: keycloak-services: keycloak-services: SAML OneTimeUse assertion replay in IdP-Initiated broker flow
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-294
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-18446
Severity: important
Released on: 31/07/2026
Advisory: RHSA-2026:49387, RHSA-2026:49401,
Bugzilla: 2509801
Bugzilla Description: fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1289
Affected Packages: grafana13-1-main-13.1.1-0.4.hum1,grafana12-4-main-12.4.6-0.3.hum1,
Package States: Cryostat 4,Cryostat 4,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Apicurio Registry 3,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-18358
Severity: moderate
Released on: 31/07/2026
Advisory:
Bugzilla: 2462876
Bugzilla Description: gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-18569
Severity: low
Released on: 31/07/2026
Advisory:
Bugzilla: 2509755
Bugzilla Description: keycloak-services: keycloak-services: OIDC backchannel logout accepts unsigned forged logout tokens
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-347
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-10079
Severity: important
Released on: 31/07/2026
Advisory:
Bugzilla: 2483158
Bugzilla Description: stackrox: stackrox: Deploy-time policy enforcement and visibility bypass via label injection
CVSS Score:
CVSSv3 Score: 8.5
Vector:
CWE: CWE-345
Affected Packages:
Package States: Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,
Full Details
CVE document

CVE-2026-11770
Severity: moderate
Released on: 31/07/2026
Advisory:
Bugzilla: 2484802
Bugzilla Description: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-90
Affected Packages:
Package States: Red Hat Directory Server 11,Red Hat Directory Server 12,Red Hat Directory Server 13,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-15722
Severity: important
Released on: 31/07/2026
Advisory:
Bugzilla: 2499961
Bugzilla Description: 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Directory Server 11,Red Hat Directory Server 12,Red Hat Directory Server 13,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-58039
Severity: moderate
Released on: 31/07/2026
Advisory: RHSA-2026:48273, RHSA-2026:48305, RHSA-2026:48537,
Bugzilla: 2509653
Bugzilla Description: nodejs: Information disclosure due to improper permission enforcement
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-73
Affected Packages: nodejs26-main-26.5.1-1.5.hum1,nodejs22-main-22.23.2-2.3.hum1,nodejs24-main-24.18.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-18477
Severity: moderate
Released on: 31/07/2026
Advisory: RHSA-2026:49361,
Bugzilla: 2509735
Bugzilla Description: tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-367
Affected Packages: tar-main-1.35-9.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-18508
Severity: moderate
Released on: 31/07/2026
Advisory: RHSA-2026:50807,
Bugzilla: 2509843
Bugzilla Description: tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-59
Affected Packages: tar-main-1.35-9.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-68563
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2465419
Bugzilla Description: ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL data via insecure backup permissions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-732
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68562
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2466035
Bugzilla Description: ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp report tampering
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-610
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-18157
Severity: important
Released on: 30/07/2026
Advisory:
Bugzilla: 2465250
Bugzilla Description: yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: Remote Code Execution via APT Argument Injection
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-88
Affected Packages:
Package States: Red Hat Enterprise Linux 10,
Full Details
CVE document

CVE-2026-67550
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509949
Bugzilla Description: re2: Denial of Service via out-of-bounds read
CVSS Score:
CVSSv3 Score: 5.7
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-66066
Severity: important
Released on: 30/07/2026
Advisory:
Bugzilla: 2509559
Bugzilla Description: activestorage: Active Storage: Remote Code Execution via Unsafe libvips Operations
CVSS Score:
CVSSv3 Score: 8.9
Vector:
CWE: CWE-434
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-12932
Severity: important
Released on: 30/07/2026
Advisory:
Bugzilla: 2509521
Bugzilla Description: openvpn: OpenVPN: Denial of Service due to memory leak in tls-crypt-v2 client key extraction
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-771
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-12996
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509536
Bugzilla Description: OpenVPN: OpenVPN: Denial of Service or memory leak via crafted packets
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-11771
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509516
Bugzilla Description: openvpn: OpenVPN: Denial of Service via crafted NTLM proxy response
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-13117
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509530
Bugzilla Description: OpenVPN: OpenVPN: Denial of service or memory leakage via incomplete TLS guard
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-7260
Severity: moderate
Released on: 30/07/2026
Advisory: RHSA-2026:47200,
Bugzilla: 2509255
Bugzilla Description: php: PHP: Denial of Service via circular symbolic links in phar archives
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-606
Affected Packages: php-main-8.5.9-1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-17544
Severity: important
Released on: 30/07/2026
Advisory: RHSA-2026:47200,
Bugzilla: 2509256
Bugzilla Description: php: PHP: Arbitrary code execution via out-of-bounds write in bccomp()
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-787
Affected Packages: php-main-8.5.9-1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-17543
Severity: important
Released on: 30/07/2026
Advisory: RHSA-2026:47200,
Bugzilla: 2509254
Bugzilla Description: php: ext-pgsql: PHP: SQL injection via improper backslash escaping
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-89
Affected Packages: php-main-8.5.9-1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-18570
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509756
Bugzilla Description: keycloak-services: keycloak-services: Full-scope-disabled client policy validation bypass via omitted fullScopeAllowed
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-18571
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509759
Bugzilla Description: keycloak-services: keycloak-services: FGAP V2 group assignment bypass during user creation
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-18572
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509763
Bugzilla Description: keycloak-services: keycloak-services: UMA claim token can override authorization time-policy evaluation attributes
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-18573
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509764
Bugzilla Description: keycloak-services: keycloak-services: Client access-type policy condition bypass during client update
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-18369
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509234
Bugzilla Description: dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects
CVSS Score:
CVSSv3 Score: 5.8
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Certificate System 10,Red Hat Certificate System 11,Red Hat Certificate System 9,Red Hat Certificate System 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-18353
Severity: important
Released on: 30/07/2026
Advisory:
Bugzilla: 2509192
Bugzilla Description: PIA: python: requests: urllib3: PIA: Unauthenticated Server-Side Request Forgery via OIDC issuer allowlist bypass
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-58043
Severity: important
Released on: 30/07/2026
Advisory: RHSA-2026:48273, RHSA-2026:48305, RHSA-2026:48537,
Bugzilla: 2509171
Bugzilla Description: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-551
Affected Packages: nodejs26-main-26.5.1-1.5.hum1,nodejs22-main-22.23.2-2.3.hum1,nodejs24-main-24.18.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-56850
Severity: moderate
Released on: 30/07/2026
Advisory: RHSA-2026:48273, RHSA-2026:48305, RHSA-2026:48537,
Bugzilla: 2509179
Bugzilla Description: nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE: CWE-303
Affected Packages: nodejs26-main-26.5.1-1.5.hum1,nodejs22-main-22.23.2-2.3.hum1,nodejs24-main-24.18.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-58040
Severity: moderate
Released on: 30/07/2026
Advisory: RHSA-2026:48273, RHSA-2026:48305, RHSA-2026:48537,
Bugzilla: 2509175
Bugzilla Description: nodejs: HTTPS Agent TLS session reuse skips hostname verification
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-322
Affected Packages: nodejs26-main-26.5.1-1.5.hum1,nodejs22-main-22.23.2-2.3.hum1,nodejs24-main-24.18.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-18018
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508737
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Updater
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE:
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18019
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508903
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in Media
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18015
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508705
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Tint
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18017
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508777
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Dawn
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE:
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18014
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509024
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
Vector:
CWE: CWE-434
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18012
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508887
Bugzilla Description: chromium-browser: chromium-browser: Use after free in PDFium
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18008
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508864
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Settings
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18009
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508892
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Passwords
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-290
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18010
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509019
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18007
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508912
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Input
CVSS Score:
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18004
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508940
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Speech
CVSS Score:
CVSSv3 Score: 3.2
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18005
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508954
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in WebXR
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18001
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508693
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in WebGL
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18002
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508957
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Google Lens
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17999
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508897
Bugzilla Description: chromium-browser: chromium-browser: Incorrect security UI in PictureInPicture
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-368
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-18000
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508981
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in USB
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17998
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508732
Bugzilla Description: chromium-browser: chromium-browser: Incorrect security UI in Extensions
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17997
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508837
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
CVSSv3 Score: 2.4
Vector:
CWE: CWE-368
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17996
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508996
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Browser
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17995
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508779
Bugzilla Description: chromium-browser: chromium-browser: Out of bounds read in Dawn
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17994
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508868
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Media
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17993
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508785
Bugzilla Description: chromium-browser: chromium-browser: Race in Updater
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-367
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17992
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508809
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in Skia
CVSS Score:
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17989
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508764
Bugzilla Description: chromium-browser: chromium-browser: Type Confusion in V8
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17990
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508907
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in WebAuthn
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17991
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508977
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in AI
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17987
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508791
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Notifications
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17988
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508816
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Navigation
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17986
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508689
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Bluetooth
CVSS Score:
CVSSv3 Score: 8.7
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17985
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508790
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Speech
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17984
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508710
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Browser
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17983
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508964
Bugzilla Description: chromium-browser: chromium-browser: Incorrect security UI in Global Media Controls
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17981
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508800
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Blink
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17982
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508893
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Cast
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17980
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509002
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in UI
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17978
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508820
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in WebCodecs
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17979
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508944
Bugzilla Description: chromium-browser: chromium-browser: Race in V8
CVSS Score:
Vector:
CWE: CWE-366
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17976
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508721
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in Extensions
CVSS Score:
Vector:
CWE: CWE-289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17977
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508932
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in CSS
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17975
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509009
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in IME
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-497
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17973
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508939
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Views
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17974
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508945
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in DevTools
CVSS Score:
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17970
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508747
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Passwords
CVSS Score:
CVSSv3 Score: 3.5
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17971
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508796
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Frame
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17968
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508717
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in WebXR
CVSS Score:
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17969
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509001
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17966
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508758
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Views
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-497
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17964
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508797
Bugzilla Description: chromium-browser: chromium-browser: Incorrect security UI in UI
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17963
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508956
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in SVG
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17961
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508854
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Session
CVSS Score:
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17962
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508948
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Blink
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17959
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508738
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Network
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17956
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508817
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Scheduling
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-94
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17957
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508890
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in CORS
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17958
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508902
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Views
CVSS Score:
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17955
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508756
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Payments
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17954
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508843
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in MHTML
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17952
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508823
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in V8
CVSS Score:
Vector:
CWE: CWE-551
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17953
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508998
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in WebView
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17951
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508715
Bugzilla Description: chromium-browser: webrtc: chromium-browser: Heap buffer overflow in WebRTC
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17950
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508869
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in Safebrowsing
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-494
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17949
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508929
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in GPU
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17948
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508959
Bugzilla Description: chromium-browser: chromium-browser: Type Confusion in V8
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17947
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509013
Bugzilla Description: chromium-browser: chromium-browser: Use after free in WebSockets
CVSS Score:
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17946
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508766
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in Dawn
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17945
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508947
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Navigation
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17942
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508734
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in SVG
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17943
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508873
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Parser
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-791
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17939
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508953
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-290
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17940
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508962
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Picture-in-Picture
CVSS Score:
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17938
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508786
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in FullScreen
CVSS Score:
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17937
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509000
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DevTools
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17935
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508748
Bugzilla Description: chromium-browser: chromium-browser: Heap buffer overflow in Codecs
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17934
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508780
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17936
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508955
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DevTools
CVSS Score:
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17932
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508751
Bugzilla Description: chromium-browser: chromium-browser: Use after free in DataTransfer
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17933
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508765
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DOMStorage
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17930
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508711
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Extensions
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17931
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508824
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DevTools
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17929
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508688
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17927
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508841
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in DevTools
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17928
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509023
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DataTransfer
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17926
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508858
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17925
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508994
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Cast
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17924
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508729
Bugzilla Description: chromium-browser: chromium-browser: Use after free in DNS
CVSS Score:
CVSSv3 Score: 3.2
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17923
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508806
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in Enterprise
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17922
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508696
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Enterprise
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE:
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17920
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508911
Bugzilla Description: chromium-browser: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17921
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2509018
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Navigation
CVSS Score:
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17918
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508712
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Sync
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17919
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508874
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Enterprise
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE: CWE-266
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17916
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508699
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Settings
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-266
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17915
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508757
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in WebView
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17914
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508773
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in Skia
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17911
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508698
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in SVG
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17910
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508774
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in NFC
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17909
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508989
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Isolated Web Apps
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17908
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508950
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Printing
CVSS Score:
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17907
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509004
Bugzilla Description: chromium-browser: Google Chrome: Information leakage via crafted HTML page
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17905
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508840
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in SurfaceCapture
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-940
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17906
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508851
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Bluetooth
CVSS Score:
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17904
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508834
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in NFC
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17902
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508690
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Editing
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17903
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508882
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Chromecast
CVSS Score:
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17901
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508754
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Sharing
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17899
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508772
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in DevTools
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-266
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17900
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508995
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Enterprise
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17898
Severity: low
Released on: 30/07/2026
Advisory:
Bugzilla: 2508763
Bugzilla Description: chromium-browser: chromium-browser: Use after free in DevTools
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17895
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508857
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DataTransfer
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17897
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508875
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in ORB
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17896
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508963
Bugzilla Description: chromium-browser: chromium-browser: Use after free in DevTools
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17892
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508844
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in WebXR
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-497
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17894
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508866
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Views
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17893
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508871
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Updater
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17890
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508886
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17888
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508891
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in WebUI
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17891
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508966
Bugzilla Description: chromium-browser: chromium-browser: Use after free in ANGLE
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17889
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508970
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in WebXR
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17887
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508718
Bugzilla Description: chromium-browser: chromium-browser: Use after free in TabStrip
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17885
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508846
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Paint
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17886
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508899
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Enterprise
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17884
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508978
Bugzilla Description: chromium-browser: chromium-browser: Object lifecycle issue in WebRTC
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-1341
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17881
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508789
Bugzilla Description: chromium-browser: chromium-browser: Use after free in WebXR
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17882
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508984
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in Extensions
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17880
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508775
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Autofill
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17877
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508845
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Chromoting
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-358
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17879
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508848
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Autofill
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17878
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508993
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in CSS
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17875
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508842
Bugzilla Description: chromium-browser: chromium-browser: Use after free in PDFium
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17876
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508915
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Payments
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17871
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508749
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17872
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508830
Bugzilla Description: chromium-browser: chromium-browser: Cryptographic Flaw in WebAppInstalls
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-1240
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17870
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508865
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Cast
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17866
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508745
Bugzilla Description: chromium-browser: chromium-browser: Type Confusion in Tab
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17868
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508798
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in USB
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-280
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17869
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508961
Bugzilla Description: chromium-browser: chromium-browser: Out of bounds read in WebXR
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17867
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508976
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Dawn
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17864
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508781
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Updater
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-428
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17863
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508799
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Browser
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE:
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17862
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508958
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Tracing
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17865
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509022
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Crypto
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-501
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17861
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508761
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Updater
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-434
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17860
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508880
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Mobile
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17859
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508885
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in Favicons
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17858
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509020
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in WebNN
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17857
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508686
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Network
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17856
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508714
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Network
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17855
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508719
Bugzilla Description: chromium-browser: chromium-browser: Race in DevTools
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-368
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17851
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508921
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in Autofill
CVSS Score:
CVSSv3 Score: 5.8
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17852
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508974
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Media Router
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17853
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508991
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DevTools
CVSS Score:
CVSSv3 Score: 8.9
Vector:
CWE: CWE-94
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17854
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509012
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in WebMCP
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17850
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508839
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Permissions
CVSS Score:
CVSSv3 Score: 9.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17848
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508965
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Codecs
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17845
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508692
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in CSS
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17844
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508703
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Cast
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17847
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508735
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17846
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508855
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Media
CVSS Score:
CVSSv3 Score: 7.9
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17840
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508926
Bugzilla Description: chromium-browser: chromium-browser: Incorrect security UI in Passwords
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17843
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508934
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in CSS
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17836
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508822
Bugzilla Description: chromium-browser: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17837
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508832
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17834
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508746
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17833
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508753
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Passwords
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17832
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508694
Bugzilla Description: chromium-browser: chromium-browser: Use after free in ANGLE
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17831
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508942
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Passwords
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17829
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508988
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Passwords
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17827
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508910
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in CSS
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17824
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508702
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in ServiceWorker
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-940
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17825
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508733
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Passwords
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-1220
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17823
Severity: important
Released on: 30/07/2026
Advisory:
Bugzilla: 2509021
Bugzilla Description: chromium-browser: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17820
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508725
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Autofill
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17818
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508740
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Network
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17819
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508879
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in WebAppInstalls
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17821
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508927
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Extensions
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17815
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508862
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in GuestView
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17816
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508922
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Speech
CVSS Score:
CVSSv3 Score: 8.7
Vector:
CWE: CWE-1220
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17817
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508938
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in ReportingAndNEL
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17811
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508739
Bugzilla Description: chromium-browser: chromium-browser: Use after free in ANGLE
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17812
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508933
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DigitalCredentials
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17809
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508727
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Extensions
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17810
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508792
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in Dawn
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17808
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509005
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in WebGL
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17805
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508771
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Glic
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17807
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508905
Bugzilla Description: chromium-browser: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17804
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508925
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17806
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508986
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Extensions
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17801
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508762
Bugzilla Description: chromium-browser: chromium-browser: Out of bounds memory access in ANGLE
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17803
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508898
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Save to Drive
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17802
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508946
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in GPU
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17800
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508973
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in MediaRecording
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-201
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17799
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508811
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Safe Browsing
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17798
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508877
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Cast
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17796
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508794
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in WebXR
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17797
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508850
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in CSS
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17793
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508730
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Messages
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17792
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508742
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Credential Management
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-303
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17791
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508744
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Payments
CVSS Score:
CVSSv3 Score: 4.6
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17794
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508980
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Mobile
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-290
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17788
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508760
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Blink
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17787
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508930
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in DevTools
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17790
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508951
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in ANGLE
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17786
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508881
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17784
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508908
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Audio
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17785
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508983
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in ANGLE
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17783
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508872
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Loader
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17780
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508917
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Isolated Web Apps
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-425
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17781
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508999
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Extensions
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17779
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508805
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Site Isolation
CVSS Score:
CVSSv3 Score: 9.3
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17777
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508904
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Autofill
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17776
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508968
Bugzilla Description: chromium-browser: chromium-browser: Policy bypass in Receiver
CVSS Score:
CVSSv3 Score: 8.0
Vector:
CWE: CWE-280
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17778
Severity: important
Released on: 30/07/2026
Advisory:
Bugzilla: 2509017
Bugzilla Description: chromium-browser: Google Chrome: Arbitrary code execution via crafted Chrome Extension
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17774
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508831
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Variations
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17773
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508936
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Cast
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17775
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509016
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in PresentationAPI
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17769
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508861
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Cast
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17771
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508949
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in Skia
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17772
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508985
Bugzilla Description: chromium-browser: chromium-browser: Out of bounds read in WebGL
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17767
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508743
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in WebView
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17766
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508814
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Clipboard
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17768
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508937
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in WebSockets
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17765
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509015
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in WebProtect
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17763
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508776
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in GPU
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17764
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508923
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in FedCM
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17757
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508726
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in Skia
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17760
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508829
Bugzilla Description: chromium-browser: chromium-browser: Side-channel information leakage in NoStatePrefetch
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-205
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17759
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508943
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in Codecs
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17755
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508709
Bugzilla Description: chromium-browser: chromium-browser: Incorrect security UI in Extensions
CVSS Score:
CVSSv3 Score: 5.6
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17756
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508825
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Presentation
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17754
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508960
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Blink
CVSS Score:
CVSSv3 Score: 9.3
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17753
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2509014
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Autofill
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17750
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508795
Bugzilla Description: chromium-browser: chromium-browser: Use after free in ANGLE
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17749
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508847
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Extensions
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17751
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508901
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in AdFilter
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-94
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17752
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508916
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Views
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17746
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508815
Bugzilla Description: chromium-browser: chromium-browser: Use after free in GPU
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17748
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508914
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in Extensions
CVSS Score:
CVSSv3 Score: 8.7
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17747
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508935
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Payments
CVSS Score:
CVSSv3 Score: 5.7
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17742
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508704
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Payments
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17743
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508782
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in ControlledFrame
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-346
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17744
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508860
Bugzilla Description: chromium-browser: chromium-browser: Inappropriate implementation in File Input
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17745
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508884
Bugzilla Description: chromium-browser: chromium-browser: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17739
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508784
Bugzilla Description: chromium-browser: chromium-browser: Insufficient policy enforcement in Extensions
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-79
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17738
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508808
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in Payments
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-1289
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17740
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508895
Bugzilla Description: chromium-browser: chromium-browser: Uninitialized Use in ANGLE
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-17741
Severity: moderate
Released on: 30/07/2026
Advisory:
Bugzilla: 2508972
Bugzilla Description: chromium-browser: chromium-browser: Insufficient validation of untrusted input in WebView
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1286
Affected Packages:
Package States:
Full Details
CVE document