CVE-2026-110331
Severity: important
Released on: 13/11/2026
Advisory:
Bugzilla: 2552067
Bugzilla Description: abrt: abrt: incomplete CVE-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2026-110330
Severity: moderate
Released on: 13/11/2026
Advisory:
Bugzilla: 2552065
Bugzilla Description: abrt: abrt: abrt-server trusts client-supplied PID= allowing unprivileged read of other processes' /proc environ
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2026-128088
Severity: low
Released on: 13/11/2026
Advisory:
Bugzilla: 2573422
Bugzilla Description: russh: russh: SSH agent lock bypass via unverified state during confirmation
CVSS Score:
CVSSv3 Score: 2.2
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-128087
Severity: low
Released on: 13/11/2026
Advisory:
Bugzilla: 2573415
Bugzilla Description: russh: russh: Information disclosure via premature callback execution prior to host verification
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-322
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-128086
Severity: moderate
Released on: 13/11/2026
Advisory:
Bugzilla: 2573410
Bugzilla Description: go.opentelemetry.io/otel: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry Go: Denial of Service via crafted baggage headers
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Ansible Automation Orchestrator 2026,Ansible Automation Orchestrator 2026,Ansible Automation Orchestrator 2026,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,AWS Load Balancer Operator,AWS Load Balancer Operator,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Compliance Operator,Compliance Operator,Compliance Operator,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Cost Management On Premise,Cryostat 4,Cryostat 4,Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,DPU kit for NVIDIA,DPU kit for NVIDIA,DPU kit for NVIDIA,Exploit Intelligence,Exploit Intelligence,Exploit Intelligence,ExternalDNS Operator,ExternalDNS Operator,ExternalDNS Operator,External Secrets Operator for Red Hat OpenShift,External Secrets Operator for Red Hat OpenShift,Fence Agents Remediation Operator,Fence Agents Remediation Operator,File Integrity Operator,File Integrity Operator,Gatekeeper 3,Gatekeeper 3,Helm CLI for Red Hat OpenShift,Job Set 1,Job Set 1,Job Set Tech Preview,Job Set Tech Preview,Job Set Tech Preview,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kube Descheduler Operator,Kube Descheduler Operator,Leader Worker Set,Leader Worker Set,Lightspeed Core,Lightspeed Core,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Machine Deletion Remediation Operator,Machine Deletion Remediation Operator,Machine Deletion Remediation Operator,MCP Lifecycle Operator,MCP Server for Red Hat OpenShift,MCP Server for Red Hat OpenShift,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,mirror registry for Red Hat OpenShift 3,Multiarch Tuning Operator,Multiarch Tuning Operator,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub 5,Multicluster Global Hub 5,Multicluster Global Hub 5,Multicluster Global Hub 5,Network Observability Operator,Network Observability Operator,Network Observability Operator,Network Observability Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node Maintenance Operator,NVIDIA JetPack 6 for RHEL,NVIDIA JetPack 7 for RHEL,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Run Once Duration Override Operator,OpenShift Run Once Duration Override Operator,OpenShift Secondary Scheduler Operator,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Source-to-Image (S2I),OpenShift Source-to-Image (S2I),Pen Drive Powered by Red Hat Lightspeed,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Build of Kueue,Red Hat Build of Kueue,Red Hat Build of Kueue,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Lightspeed for Runtimes Operator,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Cluster Manager CLI,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift for Windows Containers,Red Hat OpenShift for Windows Containers,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Profile Analyzer,Red Hat Web Terminal,Security Profiles Operator,Security Profiles Operator,Self Node Remediation Operator,Self Node Remediation Operator,Service Telemetry Framework 1.5,Service Telemetry Framework 1.5,Storage-Based Remediation,Storage-Based Remediation,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,
Full Details
CVE document

CVE-2026-128085
Severity: moderate
Released on: 13/11/2026
Advisory:
Bugzilla: 2573405
Bugzilla Description: go.opentelemetry.io/otel/sdk: go.opentelemetry.io/otel/sdk/log: go.opentelemetry.io/otel/trace: OpenTelemetry-Go: Denial of Service via attribute truncation bypass using Unicode replacement characters
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-135
Affected Packages:
Package States: Ansible Automation Orchestrator 2026,Ansible Automation Orchestrator 2026,Ansible Automation Orchestrator 2026,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,AWS Load Balancer Operator,AWS Load Balancer Operator,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Compliance Operator,Compliance Operator,Compliance Operator,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Cost Management On Premise,Cryostat 4,Cryostat 4,Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,DPU kit for NVIDIA,DPU kit for NVIDIA,DPU kit for NVIDIA,Exploit Intelligence,Exploit Intelligence,Exploit Intelligence,ExternalDNS Operator,ExternalDNS Operator,ExternalDNS Operator,External Secrets Operator for Red Hat OpenShift,External Secrets Operator for Red Hat OpenShift,Fence Agents Remediation Operator,Fence Agents Remediation Operator,File Integrity Operator,File Integrity Operator,Gatekeeper 3,Gatekeeper 3,Helm CLI for Red Hat OpenShift,Job Set 1,Job Set 1,Job Set Tech Preview,Job Set Tech Preview,Job Set Tech Preview,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kube Descheduler Operator,Kube Descheduler Operator,Leader Worker Set,Leader Worker Set,Lightspeed Core,Lightspeed Core,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Logical Volume Manager Storage,Machine Deletion Remediation Operator,Machine Deletion Remediation Operator,Machine Deletion Remediation Operator,MCP Lifecycle Operator,MCP Server for Red Hat OpenShift,MCP Server for Red Hat OpenShift,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,Migration Toolkit for Containers,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,mirror registry for Red Hat OpenShift 3,Multiarch Tuning Operator,Multiarch Tuning Operator,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Engine for Kubernetes 5,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub 5,Multicluster Global Hub 5,Multicluster Global Hub 5,Multicluster Global Hub 5,Network Observability Operator,Network Observability Operator,Network Observability Operator,Network Observability Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node Maintenance Operator,NVIDIA JetPack 6 for RHEL,NVIDIA JetPack 7 for RHEL,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Run Once Duration Override Operator,OpenShift Run Once Duration Override Operator,OpenShift Secondary Scheduler Operator,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Source-to-Image (S2I),OpenShift Source-to-Image (S2I),Pen Drive Powered by Red Hat Lightspeed,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Build of Kueue,Red Hat Build of Kueue,Red Hat Build of Kueue,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Lightspeed for Runtimes Operator,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Cluster Manager CLI,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift for Windows Containers,Red Hat OpenShift for Windows Containers,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenShift Virtualization 5,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Profile Analyzer,Red Hat Trusted Profile Analyzer,Red Hat Trusted Profile Analyzer,Red Hat Web Terminal,Security Profiles Operator,Security Profiles Operator,Self Node Remediation Operator,Self Node Remediation Operator,Service Telemetry Framework 1.5,Service Telemetry Framework 1.5,Storage-Based Remediation,Storage-Based Remediation,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,
Full Details
CVE document

CVE-2026-123177
Severity: important
Released on: 13/11/2026
Advisory:
Bugzilla: 2567426
Bugzilla Description: dnf5: dnf5daemon-server: dnf5daemon-server: unauthenticated privileged cmdline package fetch/open via add_cmdline_packages
CVSS Score:
CVSSv3 Score: 8.4
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-128824
Severity: moderate
Released on: 13/11/2026
Advisory:
Bugzilla: 2572952
Bugzilla Description: quay: quay: reflected XSS via image_id in v1 registry error responses
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: mirror registry for Red Hat OpenShift 2,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-126206
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2572831
Bugzilla Description: loofah: Loofah: Cross-site scripting via improper data URI validation
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-86324
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:99950, RHSA-2026:99952, RHSA-2026:100120, RHSA-2026:99949,
Bugzilla: 2529291
Bugzilla Description: foreman: authorization flaw in the Foreman::Controller::UserAware handling used by Api::V2::SshKeysController
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-639
Affected Packages: foreman-0:3.18.0.19-1.el9sat,foreman-0:3.16.0.29-1.el9sat,foreman-0:3.12.0.26-1.el8sat,foreman-0:3.12.0.26-1.el9sat,foreman-0:3.14.0.26-1.el9sat,
Package States:
Full Details
CVE document

CVE-2026-86323
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:99950, RHSA-2026:99952, RHSA-2026:100120, RHSA-2026:99949,
Bugzilla: 2529290
Bugzilla Description: foreman: authorization flaw in the mail-notification endpoints implemented by Api::V2::MailNotificationsController
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-639
Affected Packages: foreman-0:3.18.0.19-1.el9sat,foreman-0:3.16.0.29-1.el9sat,foreman-0:3.12.0.26-1.el8sat,foreman-0:3.12.0.26-1.el9sat,foreman-0:3.14.0.26-1.el9sat,
Package States:
Full Details
CVE document

CVE-2026-86322
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:99950, RHSA-2026:99952, RHSA-2026:100120, RHSA-2026:99949,
Bugzilla: 2529289
Bugzilla Description: foreman: authorization flaw in the Foreman::Controller::UserAware#find_user handling used by Api::V2::PersonalAccessTokensController
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-639
Affected Packages: foreman-0:3.18.0.19-1.el9sat,foreman-0:3.16.0.29-1.el9sat,foreman-0:3.12.0.26-1.el8sat,foreman-0:3.12.0.26-1.el9sat,foreman-0:3.14.0.26-1.el9sat,
Package States:
Full Details
CVE document

CVE-2026-107443
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:99950, RHSA-2026:99952, RHSA-2026:100120, RHSA-2026:99949,
Bugzilla: 2547760
Bugzilla Description: foreman: foreman: API host template render discloses secrets to view_hosts users (incomplete CVE-2026-96659 fix)
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-862
Affected Packages: foreman-0:3.18.0.19-1.el9sat,foreman-0:3.16.0.29-1.el9sat,foreman-0:3.12.0.26-1.el8sat,foreman-0:3.12.0.26-1.el9sat,foreman-0:3.14.0.26-1.el9sat,
Package States:
Full Details
CVE document

CVE-2026-107360
Severity: critical
Released on: 12/11/2026
Advisory: RHSA-2026:99950, RHSA-2026:99952, RHSA-2026:100120, RHSA-2026:99949,
Bugzilla: 2547645
Bugzilla Description: rubygem-safemode: safemode: Jail allow-list bypass via op-assign expressions
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-183
Affected Packages: rubygem-safemode-0:1.5.0-3.el8sat,rubygem-safemode-0:1.5.0-3.el9sat,
Package States:
Full Details
CVE document

CVE-2026-107152
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:99950, RHSA-2026:99952, RHSA-2026:100120, RHSA-2026:99949,
Bugzilla: 2547374
Bugzilla Description: rubygem-smart_proxy_dynflow: Dynflow console authorizes any client certificate the capsule CA signed
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-287
Affected Packages: rubygem-smart_proxy_dynflow-0:1.0.0-3.el9sat,rubygem-smart_proxy_dynflow-0:0.9.4-2.el9sat,rubygem-smart_proxy_dynflow-0:0.9.3-2.el9sat,rubygem-smart_proxy_dynflow-0:0.9.3-2.el8sat,
Package States:
Full Details
CVE document

CVE-2026-127101
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2572592
Bugzilla Description: sssd: sssd: NULL pointer dereference in PAM responder when protocol version negotiation is skipped
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-127100
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2572591
Bugzilla Description: sssd: sssd: Local denial of service through unchecked OAuth2 JSON code type in PAM responder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-127099
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2572590
Bugzilla Description: sssd: sssd: Stack buffer overflow during RSA certificate-to-SSH key conversion
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-6467
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572538
Bugzilla Description: postgresql: postgresql: Privilege escalation via uncontrolled search path in extension management
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-427
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-6460
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572578
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via type confusion in data definition commands
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States: Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-18447
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572532
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via type confusion in SQL-language functions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-16240
Severity: low
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572537
Bugzilla Description: postgresql: postgresql: Information disclosure in pg_basebackup via crafted backup manifest
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-134
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-14661
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572565
Bugzilla Description: postgresql: postgresql: Persistent Denial of Service via arbitrary file append in sslkeylogfile parameter
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-73
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-16237
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572574
Bugzilla Description: postgresql: postgresql: Security restriction bypass via INSERT ON CONFLICT on auto-updatable views
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-639
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120154
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572552
Bugzilla Description: postgresql: PostgreSQL: Row-level security bypass via INSERT ON CONFLICT DO UPDATE
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-268
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120153
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572571
Bugzilla Description: postgresql: postgresql: arbitrary code execution via SQL injection in extension-script substitutions
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-89
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120152
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572564
Bugzilla Description: postgresql: postgresql: Information disclosure via use-after-free in pg_show_all_settings()
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120150
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572547
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in expanded-record domain checks
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120151
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572556
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via PL/pgSQL type confusion
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120149
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572548
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via foreign batch inserts
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120148
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572555
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via type confusion in extended statistics
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120147
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572559
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in dblink extension
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120146
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572575
Bugzilla Description: postgresql: PostgreSQL: Authorization bypass via REASSIGN OWNED command
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-267
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120144
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:80584, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572533
Bugzilla Description: postgresql: PostgreSQL: Arbitrary code execution via incomplete type-cache invalidation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql17-main-17.11-1.2.hum1,postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120145
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572553
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via system catalog replication target
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-250
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120143
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572542
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in trigger functions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120142
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572549
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via type confusion in anonymous RECORD types
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120141
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572531
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via type confusion in materialized set-returning functions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116336
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572563
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via dropped index in REINDEX CONCURRENTLY
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-120139
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572580
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via integer wraparound in tuple-size calculations
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116333
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572535
Bugzilla Description: postgresql: postgresql: Information disclosure via buffer over-read in parallel B-tree scans
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116335
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572570
Bugzilla Description: postgresql: PostgreSQL: Arbitrary code execution via operator link type confusion
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116332
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572530
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free during portal setup
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116330
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572551
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via predictable restriction key in pg_dump restore script
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-94
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116331
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572566
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via aggregate optimization type confusion
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116329
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:80584, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572554
Bugzilla Description: postgresql: postgresql: arbitrary code execution via nested SET DATA TYPE during statistics import
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql17-main-17.11-1.2.hum1,postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116328
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572562
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via integer wraparound in memory contexts
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-116326
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572540
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via uncaught exceptions in PL/Perl
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116327
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572572
Bugzilla Description: postgresql: postgresql: Information disclosure via security barrier view bypass
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-205
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116325
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572541
Bugzilla Description: postgresql: postgresql: Arbitrary SQL execution in reindexdb via crafted index name
CVSS Score:
CVSSv3 Score: 8.0
Vector:
CWE: CWE-89
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116323
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572529
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in PL/Tcl
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116321
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572546
Bugzilla Description: postgresql: postgresql: server memory disclosure via improper null termination in array element assignment
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-170
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116322
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:80584, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572558
Bugzilla Description: postgresql: postgresql: Denial of Service via improper locking during startup processing
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-413
Affected Packages: postgresql17-main-17.11-1.2.hum1,postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,
Package States: Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 5,Red Hat Advanced Cluster Security 5,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-116319
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572545
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in plperl
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,
Full Details
CVE document

CVE-2026-116320
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572569
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in PL/Perl
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116318
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:80584, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572567
Bugzilla Description: postgresql: postgresql: Arbitrary SQL execution via improper constraint quoting in pg_dump
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-89
Affected Packages: postgresql17-main-17.11-1.2.hum1,postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116316
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572568
Bugzilla Description: postgresql: PostgreSQL: Privilege escalation via unqualified type resolution in temporary schema
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-427
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116317
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572573
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via heap-based buffer overflow in ts_rank_cd()
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116315
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572536
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via heap-based buffer overflow in tsvector_delete()
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116314
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572561
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via crafted archive in pg_restore
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-78
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116313
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:80584, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572543
Bugzilla Description: postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-426
Affected Packages: postgresql17-main-17.11-1.2.hum1,postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116312
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572577
Bugzilla Description: postgresql: postgresql: Incorrect trigger row processing via partitioned table MERGE
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-628
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116311
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572579
Bugzilla Description: postgresql: postgresql: row-level security bypass via DROP OWNED
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-283
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116310
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572534
Bugzilla Description: postgresql: postgresql: Information disclosure via use-after-free in COPY FROM error reporting
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116309
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572550
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via type confusion in PL/Perl
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116308
Severity: moderate
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572539
Bugzilla Description: postgresql: postgresql: Information disclosure via zero-length token in dict_int
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-125
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116306
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572528
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via composite-value field assignment type confusion
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116307
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572560
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in plperl
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116304
Severity: important
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572576
Bugzilla Description: postgresql: postgresql: Arbitrary code execution via use-after-free in parallel worker coordination
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-116303
Severity: low
Released on: 12/11/2026
Advisory: RHSA-2026:100114, RHSA-2026:99821, RHSA-2026:100123,
Bugzilla: 2572544
Bugzilla Description: postgresql: PostgreSQL: Unauthorized execution of restricted cast functions via type conversion operations
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-420
Affected Packages: postgresql18-main-18.7-0.1.hum1,libpq-main-18.7-0.1.hum1,postgresql17-main-17.12-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-121876
Severity: important
Released on: 12/11/2026
Advisory:
Bugzilla: 2558210
Bugzilla Description: sandboxed-containers: kernel: systemd-gpt-auto-generator: Guest Data Leakage in Confidential Computing (Sandboxed Containers)
CVSS Score:
CVSSv3 Score: 7.9
Vector:
CWE: CWE-359
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-71367
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2511903
Bugzilla Description: awx: WebSocket broadcast groups leak cross-organization job metadata
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-71363
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2511899
Bugzilla Description: awx: unauthenticated debug endpoints trigger scheduler operations
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-306
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-127030
Severity: important
Released on: 12/11/2026
Advisory:
Bugzilla: 2572340
Bugzilla Description: freeradius: Stack buffer overflow via unchecked EAP-FAST SessionTicket length
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-127029
Severity: important
Released on: 12/11/2026
Advisory:
Bugzilla: 2572339
Bugzilla Description: freeradius: Stack-based buffer overflow via unbounded EAP-SIM identity length
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-114369
Severity: moderate
Released on: 12/11/2026
Advisory:
Bugzilla: 2572335
Bugzilla Description: qt: qt: Denial of Service via resource exhaustion in Qt WebSockets
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-113593
Severity: low
Released on: 12/11/2026
Advisory:
Bugzilla: 2564004
Bugzilla Description: django: Potential exposure of private data via empty and missing `Vary` headers
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-524
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2026-126920
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571950
Bugzilla Description: chromium-browser: skia: Information leak in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-200
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126899
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571958
Bugzilla Description: chromium-browser: Use after free in Elements
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126860
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571980
Bugzilla Description: chromium-browser: Incorrect authorization in FileSystem
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126890
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571996
Bugzilla Description: chromium-browser: Out of bounds read in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126868
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571948
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126913
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571959
Bugzilla Description: chromium-browser: Out of bounds read in Compositing
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126921
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571963
Bugzilla Description: chromium-browser: Use after free in Accessibility
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126841
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571997
Bugzilla Description: chromium-browser: skia: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126902
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572022
Bugzilla Description: chromium-browser: Incorrect reference resolution in Browser
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-706
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126850
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571952
Bugzilla Description: chromium-browser: Incorrect authorization in SiteIsolation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126852
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571966
Bugzilla Description: chromium-browser: Use after free in MediaStream
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126901
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571989
Bugzilla Description: chromium-browser: Use after free in PDF
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126849
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571995
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126855
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572002
Bugzilla Description: chromium-browser: Missing authorization in ImageCapture
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126908
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572010
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126915
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571949
Bugzilla Description: chromium-browser: skia: Use of uninitialized variable in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-457
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126906
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571976
Bugzilla Description: chromium-browser: Race condition in Extensions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-367
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126893
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572018
Bugzilla Description: chromium-browser: Out of bounds write in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126848
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571955
Bugzilla Description: chromium-browser: skia: Uninitialized resource in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126882
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571985
Bugzilla Description: chromium-browser: skia: Information leak in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-200
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126840
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572029
Bugzilla Description: chromium-browser: Out of bounds write in Network
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126857
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571957
Bugzilla Description: chromium-browser: skia: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126897
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571998
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126883
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572012
Bugzilla Description: chromium-browser: Use after free in Core
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126854
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571964
Bugzilla Description: chromium-browser: Incorrect authorization in Layout
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126892
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571971
Bugzilla Description: chromium-browser: Use after free in MediaStream
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126877
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572017
Bugzilla Description: chromium-browser: Use after free in Dawn
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126888
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572020
Bugzilla Description: chromium-browser: Buffer overflow in Turbolev
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-122
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126843
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572026
Bugzilla Description: chromium-browser: Type confusion in Turbolev
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126873
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571974
Bugzilla Description: chromium-browser: Use after free in Extensions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126880
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571988
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126914
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572004
Bugzilla Description: chromium-browser: skia: Uninitialized resource in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126922
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572007
Bugzilla Description: chromium-browser: skia: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126872
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572025
Bugzilla Description: chromium-browser: Incorrect authorization in FileSystem
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126905
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571946
Bugzilla Description: chromium-browser: Incomplete cleanup in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-459
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126894
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572009
Bugzilla Description: chromium-browser: skia: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126917
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572011
Bugzilla Description: chromium-browser: Memory corruption in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-119
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126856
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572021
Bugzilla Description: chromium-browser: Incomplete cleanup in Cache
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-459
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126861
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572023
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126844
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571970
Bugzilla Description: chromium-browser: skia: Uninitialized resource in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126884
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572001
Bugzilla Description: chromium-browser: skia: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126876
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571972
Bugzilla Description: chromium-browser: skia: Integer overflow in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126866
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571973
Bugzilla Description: chromium-browser: Incorrect authorization in Extensions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126918
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571987
Bugzilla Description: chromium-browser: Use after free in Layout
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126874
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571999
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126891
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572027
Bugzilla Description: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126867
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571947
Bugzilla Description: chromium-browser: Use after free in Browser
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126858
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571956
Bugzilla Description: chromium-browser: angle: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126869
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571967
Bugzilla Description: chromium-browser: Use after free in Frames
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126896
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571993
Bugzilla Description: chromium-browser: Missing authorization in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126863
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572016
Bugzilla Description: chromium-browser: Use after free in HTML
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126851
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571977
Bugzilla Description: chromium-browser: Use after free in Accessibility
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126904
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571991
Bugzilla Description: chromium-browser: Use after free in Compositing
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126845
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571994
Bugzilla Description: chromium-browser: Uninitialized resource in GPU
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126881
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572024
Bugzilla Description: chromium-browser: Improper initialization in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-665
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126907
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572028
Bugzilla Description: chromium-browser: Uninitialized resource in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126862
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571984
Bugzilla Description: chromium-browser: Improper input validation in Core
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126871
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571986
Bugzilla Description: chromium-browser: skia: Out of bounds read in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126900
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571990
Bugzilla Description: chromium-browser: Use after free in CSS
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126898
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572000
Bugzilla Description: chromium-browser: skia: Uninitialized resource in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126875
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572019
Bugzilla Description: chromium-browser: Missing authorization in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126865
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571953
Bugzilla Description: chromium-browser: Use after free in DOM
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126903
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571981
Bugzilla Description: chromium-browser: angle: Improper state validation in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-754
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126910
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571982
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126853
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572005
Bugzilla Description: chromium-browser: skia: Uninitialized resource in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126916
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572008
Bugzilla Description: chromium-browser: Integer overflow in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126842
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572015
Bugzilla Description: chromium-browser: angle: Use after free in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126919
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571979
Bugzilla Description: chromium-browser: Use after free in BrowserTag
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126847
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571983
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126909
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572006
Bugzilla Description: chromium-browser: Use after free in Passwords
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126912
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572013
Bugzilla Description: chromium-browser: skia: Buffer overflow in Skia
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126878
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572014
Bugzilla Description: chromium-browser: Information leak in Core
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126859
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571961
Bugzilla Description: chromium-browser: Link following in FileSystem
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-59
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126889
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571962
Bugzilla Description: chromium-browser: Off-by-one error in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-193
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126870
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571968
Bugzilla Description: chromium-browser: angle: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126886
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571969
Bugzilla Description: chromium-browser: Use after free in Frames
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126887
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2572003
Bugzilla Description: chromium-browser: Use after free in Animation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126864
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571951
Bugzilla Description: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126895
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571954
Bugzilla Description: chromium-browser: Use after free in CSS
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126911
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571960
Bugzilla Description: chromium-browser: Use after free in Accessibility
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126879
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571965
Bugzilla Description: chromium-browser: Use after free in Layout
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126846
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571975
Bugzilla Description: chromium-browser: skia: Use after free in Skia
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126885
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571992
Bugzilla Description: chromium-browser: Use after free in ServiceWorker
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126813
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571918
Bugzilla Description: roundcubemail: roundcubemail: Arbitrary IMAP command execution via CRLF injection
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-93
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-126051
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:93603, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571861
Bugzilla Description: nodejs: nodejs: Denial of service via premature socket closure during TLS handshake
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,nodejs22-main-22.23.4-2.3.2.3.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123875
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571848
Bugzilla Description: nodejs: nodejs: Denial of Service via cancelled HTTP/2 file downloads
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-476
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123874
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:93603, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571849
Bugzilla Description: nodejs: nodejs: Denial of Service via HTTP/2 use-after-free
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-416
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,nodejs22-main-22.23.4-2.3.2.3.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123872
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571847
Bugzilla Description: nodejs: Node.js: Client certificate authentication bypass via TLS renegotiation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-287
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123877
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571854
Bugzilla Description: nodejs: nodejs: Certificate validation bypass via TLS session cache reuse
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-295
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123871
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571841
Bugzilla Description: nodejs: Node.js: Information disclosure via invalid proxy configuration error messages
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-209
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123868
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:93603, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571834
Bugzilla Description: nodejs: nodejs: Denial of service via HTTP/2 memory exhaustion
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-400
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,nodejs22-main-22.23.4-2.3.2.3.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123867
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571835
Bugzilla Description: nodejs: Node.js: Mutual TLS authorization bypass via incomplete SNI context configuration
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-295
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123866
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571844
Bugzilla Description: nodejs: Node.js: Information disclosure via use-after-free during HTTP/2 stream teardown
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-416
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123865
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571831
Bugzilla Description: nodejs: Node.js: Denial of service via HTTP/2 session resource leak during shutdown
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123864
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571836
Bugzilla Description: nodejs: nodejs: Information disclosure via HTTPS parser re-entrancy
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-416
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123863
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:93603, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571842
Bugzilla Description: nodejs: Node.js: Denial of Service via improper HTTP/2 session teardown
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-617
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,nodejs22-main-22.23.4-2.3.2.3.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123862
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571814
Bugzilla Description: nodejs: Node.js: Denial of service via abrupt disconnection during zlib compression
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-248
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123829
Severity: low
Released on: 11/11/2026
Advisory: RHSA-2026:99433, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571829
Bugzilla Description: nodejs: Node.js: Information disclosure via improper permission checks in recursive file watching
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-200
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.5.2.3.2.3.1.hum1,nodejs22-main-22.23.5-2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-123828
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:93603, RHSA-2026:99436, RHSA-2026:99435,
Bugzilla: 2571813
Bugzilla Description: nodejs: nodejs: Denial of Service via HTTP/2 Alt-Svc heap buffer overflow
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-122
Affected Packages: nodejs24-main-24.22.3-0.1.hum1,nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.1.hum1,nodejs26-main-11.20.0-1.26.13.1.0.1.hum1,nodejs24-main-11.19.1-1.24.22.3.0.1.hum1,nodejs26-main-26.13.1-0.1.hum1,nodejs22-main-22.23.4-2.3.2.3.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109163
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:98998,
Bugzilla: 2571737
Bugzilla Description: httpd: httpd: Denial of Service via stack-based buffer overflow in mod_vhost_alias
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-121
Affected Packages: httpd-main-2.4.71-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,
Full Details
CVE document

CVE-2026-126644
Severity: low
Released on: 11/11/2026
Advisory:
Bugzilla: 2571732
Bugzilla Description: ansible.posix: authorized_key module follows a parent-directory symlink allowing writes outside the intended directory
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126643
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571730
Bugzilla Description: aap-gateway-operator: resource-server secret exposed in plaintext in the AutomationController custom resource
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-312
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-126642
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571729
Bugzilla Description: awx: webhook credential assignment omits use_role check, exposing another user's token
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-126641
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571719
Bugzilla Description: ansible-pylibssh: accepts a changed SSH host key when host_key_auto_add is enabled
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-322
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-110697
Severity: critical
Released on: 11/11/2026
Advisory: RHSA-2026:99023, RHSA-2026:99022, RHSA-2026:99025, RHSA-2026:99024, RHSA-2026:99027, RHSA-2026:99026, RHSA-2026:99019, RHSA-2026:99021,
Bugzilla: 2552237
Bugzilla Description: quay: quay: SQL LIKE wildcard injection in robot listing leaks cross-tenant robot tokens
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-89
Affected Packages: quay/quay-rhel9:1793993778,quay/quay-rhel8:1793993730,quay/quay-rhel8:1793993674,quay/quay-rhel8:1793993771,quay/quay-rhel9:1793993890,quay/quay-rhel8:1793993848,quay/quay-rhel9:1793993799,quay/quay-rhel8:1793993854,
Package States: mirror registry for Red Hat OpenShift 2,Red Hat Quay 5,
Full Details
CVE document

CVE-2026-123710
Severity: critical
Released on: 11/11/2026
Advisory: RHSA-2026:99023, RHSA-2026:99022, RHSA-2026:99025, RHSA-2026:99024, RHSA-2026:99027, RHSA-2026:99026, RHSA-2026:99019, RHSA-2026:99021,
Bugzilla: 2568072
Bugzilla Description: quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation
CVSS Score:
CVSSv3 Score: 9.8
Vector:
CWE: CWE-1287
Affected Packages: quay/quay-rhel9:1793993778,quay/quay-rhel8:1793993730,quay/quay-rhel8:1793993674,quay/quay-rhel8:1793993771,quay/quay-rhel9:1793993890,quay/quay-rhel8:1793993848,quay/quay-rhel9:1793993799,quay/quay-rhel8:1793993854,
Package States: mirror registry for Red Hat OpenShift 2,Red Hat Quay 5,
Full Details
CVE document

CVE-2026-119618
Severity: critical
Released on: 11/11/2026
Advisory: RHSA-2026:98981, RHSA-2026:98982, RHSA-2026:98954, RHSA-2026:98953, RHSA-2026:98978, RHSA-2026:98979, RHSA-2026:98968,
Bugzilla: 2567318
Bugzilla Description: httpd:2.4/mod_http2: mod_http2: httpd: Remote code execution in mod_http2
CVSS Score:
CVSSv3 Score: 9.8
Vector:
CWE: CWE-20
Affected Packages: mod_http2-0:2.0.29-5.el10_3.1,mod_http2-0:2.0.29-2.el10_0.3,mod_http2-0:2.0.26-4.el9_6.3,mod_http2-0:2.0.26-6.el9_8.3,mod_http2-0:2.0.29-4.el10_2.3,mod_http2-0:2.0.26-7.el9_9.1,mod_http2-0:2.0.26-2.el9_4.4,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Hardened Images,Red Hat JBoss Core Services,
Full Details
CVE document

CVE-2026-93404
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2569362
Bugzilla Description: rsyslog: rsyslog omclickhouse SQL injection
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-89
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-123747
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2568110
Bugzilla Description: pappl-retrofit: Directory traversal in the add-ppdfiles and delete-ppdfiles actions
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,
Full Details
CVE document

CVE-2026-90993
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571630
Bugzilla Description: org.apache.xmlgraphics/batik-dom: Apache XML Graphics Batik: Harden validation in SAXDocumentFactory
CVSS Score:
Vector:
CWE: CWE-611
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124737
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571607
Bugzilla Description: busybox: Heap buffer overflow in the tftp client on fallback to the default block size
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124738
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571610
Bugzilla Description: busybox: httpd password rule bypass for pre-compressed .gz files via Accept-Encoding: gzip
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-288
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124739
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571613
Bugzilla Description: busybox: httpd stack buffer overflow via an "I:" rule in a subdirectory httpd.conf
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124740
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571616
Bugzilla Description: busybox: Use-after-free of requested_ipv6 in udhcpc6
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124741
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571617
Bugzilla Description: busybox: Stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124742
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:99577,
Bugzilla: 2571620
Bugzilla Description: busybox: Divide-by-zero in the volume_id FAT prober via a zero sectors_per_cluster value
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages: busybox-main-1.37.0-9.5.hum1,
Package States: Red Hat Enterprise Linux 6,
Full Details
CVE document

CVE-2026-124743
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571624
Bugzilla Description: busybox: Divide-by-zero and heap over-read in the volume_id HFS+ prober
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124744
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571625
Bugzilla Description: busybox: cpio hardlink target not sanitized under FEATURE_PATH_TRAVERSAL_PROTECTION
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-124745
Severity: moderate
Released on: 11/11/2026
Advisory: RHSA-2026:81391,
Bugzilla: 2571637
Bugzilla Description: busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-59
Affected Packages: busybox-main-1.37.0-9.4.hum1,
Package States: Red Hat Enterprise Linux 6,
Full Details
CVE document

CVE-2026-124746
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571675
Bugzilla Description: busybox: Out-of-bounds read in volume_id_get_buffer() via an offset+length wraparound
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-9703
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2507636
Bugzilla Description: grafana: Grafana: Viewer role can create, modify and delete Loki alerting rules
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-862
Affected Packages:
Package States: Multicluster Global Hub,Multicluster Global Hub 5,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-126497
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2571412
Bugzilla Description: librecad: librecad: Arbitrary code execution via crafted DWG file
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-108472
Severity: important
Released on: 11/11/2026
Advisory: RHSA-2026:99661, RHSA-2026:99660, RHSA-2026:99662, RHSA-2026:99659, RHSA-2026:99817,
Bugzilla: 2548925
Bugzilla Description: xfsprogs: xfsprogs: Local privilege escalation via command injection in xfs_admin
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-78
Affected Packages: xfsprogs-0:6.4.0-8.el9_8,xfsprogs-0:6.4.0-10.el9_9,xfsprogs-0:6.16.0-2.el10_3,xfsprogs-0:6.16.0-2.el10_2,xfsprogs-0:5.0.0-13.el8_10,
Package States: Red Hat Enterprise Linux 7,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-116468
Severity: important
Released on: 11/11/2026
Advisory:
Bugzilla: 2560575
Bugzilla Description: keycloak-services: keycloak-services: Delegated admin escalates to realm-admin via group move
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-126136
Severity: moderate
Released on: 11/11/2026
Advisory:
Bugzilla: 2571464
Bugzilla Description: thunderbird: OAuth2 access token could be sent over an unencrypted connection with Exchange accounts
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-319
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-91151
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99599, RHSA-2026:99601, RHSA-2026:99600, RHSA-2026:99603, RHSA-2026:99602,
Bugzilla: 2478404
Bugzilla Description: cockpit: Cockpit: Local privilege escalation via insecure symlink handling in public key addition helper
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-59
Affected Packages: cockpit-0:356.4.1-1.el9_8,cockpit-0:366.1.1-1.el9_9,cockpit-0:310.10.2-1.el8_10,cockpit-0:356.4.1-1.el10_2,cockpit-0:366.1.1-1.el10_3,
Package States: Red Hat Enterprise Linux 7,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-91150
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99599, RHSA-2026:99601, RHSA-2026:99600, RHSA-2026:99603, RHSA-2026:99602,
Bugzilla: 2478436
Bugzilla Description: cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: cockpit-0:356.4.1-1.el9_8,cockpit-0:366.1.1-1.el9_9,cockpit-0:310.10.2-1.el8_10,cockpit-0:356.4.1-1.el10_2,cockpit-0:366.1.1-1.el10_3,
Package States: Red Hat Enterprise Linux 7,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-126186
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2571283
Bugzilla Description: activestorage: Active Storage: Remote code execution via unsafe file extension handling in media processing
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-641
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-126085
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571281
Bugzilla Description: activestorage: Active Storage: File size validation bypass via missing direct-upload content length constraints
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-807
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-126083
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2571280
Bugzilla Description: actionpack: actionpack: IP address spoofing via crafted Forwarded header
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-348
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-126080
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2571285
Bugzilla Description: activesupport: Active Support: Denial of Service via unescaped regular expressions in safe_constantize
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126076
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571272
Bugzilla Description: actionpack: actionpack: Session retention across logout via race condition in CacheStore
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-613
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-126075
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571263
Bugzilla Description: activesupport: Active Support: Cross-site scripting via MessagePack deserialization
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126074
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571206
Bugzilla Description: activestorage: activestorage: Denial of Service via filenames containing null bytes
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-126073
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571250
Bugzilla Description: actionpack: Action Pack: Web cache poisoning via improper Vary header generation during content negotiation
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-440
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-126071
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571244
Bugzilla Description: activestorage: Active Storage: Denial of Service via thread exhaustion from streaming storage errors
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-126068
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571201
Bugzilla Description: actionmailbox: Action Mailbox: Inbound email forgery via Mailgun webhook signature replay
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-294
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-126067
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571214
Bugzilla Description: actionpack: Action Pack: Cross-Site Request Forgery via missing SameSite attribute on session cookies
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-126066
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571224
Bugzilla Description: fast-xml-parser: fast-xml-parser: Denial of Service via quadratic rescanning of unterminated tags
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-606
Affected Packages:
Package States: Cryostat 4,Migration Toolkit for Applications 8,OpenShift Serverless,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 5,Red Hat Connectivity Link 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 5,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-126064
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571274
Bugzilla Description: nokogiri: nokogiri: Denial of Service via use-after-free when replacing attribute values
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-126063
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2573204
Bugzilla Description: nokogiri: nokogiri: Cross-site scripting via unescaped content in HTML5 serializer
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-126062
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570848
Bugzilla Description: nokogiri: nokogiri: Server-Side Request Forgery via network restriction bypass on JRuby
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-611
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-123084
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2567260
Bugzilla Description: python-pulpcore: pulpcore: Header content guard jq filter exposes the content-app environment
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-917
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,
Full Details
CVE document

CVE-2026-126135
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570843
Bugzilla Description: thunderbird: SMTP and POP3 response injection when using STARTTLS
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-349
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126134
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570532
Bugzilla Description: thunderbird: Feed subscriptions could leak NTLM credentials on Windows
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126133
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570999
Bugzilla Description: thunderbird: Calendar server credentials could be sent to an HTTP proxy
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-126132
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570873
Bugzilla Description: thunderbird: Attachments could be replaced with local file content when forwarding
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-125335
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570954
Bugzilla Description: node-forge: node-forge: Signature verification bypass via unvalidated small-order Ed25519 public keys
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-347
Affected Packages:
Package States: Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,OpenShift Pipelines,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 4,Red Hat Connectivity Link 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-125333
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570796
Bugzilla Description: node-forge: node-forge: Denial of Service via inefficient regular expression in HTTP header parsing
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,OpenShift Pipelines,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 4,Red Hat Connectivity Link 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-125332
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570346
Bugzilla Description: node-forge: node-forge: Denial of Service via unsupported TLS ServerHello compression method
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-248
Affected Packages:
Package States: Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,OpenShift Pipelines,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 4,Red Hat Connectivity Link 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 1,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Developer Hub 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-119990
Severity: critical
Released on: 10/11/2026
Advisory:
Bugzilla: 2570727
Bugzilla Description: github.com/openai/openai-go/v3/azure: Azure OpenAI Elevation of Privilege Vulnerability
CVSS Score:
CVSSv3 Score: 9.8
Vector:
CWE: CWE-306
Affected Packages:
Package States: OpenShift Service Mesh 3,Red Hat Advanced Cluster Management for Kubernetes 5,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,
Full Details
CVE document

CVE-2026-99288
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570103
Bugzilla Description: kernel: kernel: Denial of Service via race condition in TCP socket lookup
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-99287
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570538
Bugzilla Description: kernel: kernel: xen-netback: Denial of Service via double unmapping of shared data rings
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-99286
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570095
Bugzilla Description: kernel: kernel: xen-netback: Denial of Service via race condition during connection cleanup
CVSS Score:
CVSSv3 Score: 5.6
Vector:
CWE: CWE-366
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-111760
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2567365
Bugzilla Description: git: Git: Arbitrary code execution via unsafe submodule metadata during recursive clones
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-113408
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2567369
Bugzilla Description: git: git: Unintended file writes via malformed unborn HEAD advertisement
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-114467
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2567370
Bugzilla Description: git: git: Denial of service via commit messages with multiple GPG signatures
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-114469
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2567427
Bugzilla Description: git: git: Denial of Service via binary patch size validation bypass
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-105437
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2567428
Bugzilla Description: git: git: Heap corruption via integer overflow in merge size calculations
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-114466
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2567429
Bugzilla Description: git: git: Arbitrary file system access via fast-import features
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-73
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-99285
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571048
Bugzilla Description: kernel: kernel: Memory corruption via multi-register byteorder conversion in netfilter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 5,Red Hat OpenShift Container Platform 5,
Full Details
CVE document

CVE-2026-125350
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570247
Bugzilla Description: chromium-browser: Use after free in XML
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125349
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570291
Bugzilla Description: chromium-browser: Uninitialized resource in GPU
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125342
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570747
Bugzilla Description: chromium-browser: Uninitialized resource in GPU
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125348
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570090
Bugzilla Description: chromium-browser: Out of bounds write in GPU
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125344
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570232
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125343
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570651
Bugzilla Description: chromium-browser: Buffer overflow in Compositing
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-122
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125347
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570737
Bugzilla Description: chromium-browser: Incorrect authorization in FileSystem
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125345
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570109
Bugzilla Description: chromium-browser: Uninitialized resource in WebGL
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-109478
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99146, RHSA-2026:99147, RHSA-2026:99052,
Bugzilla: 2568440
Bugzilla Description: dotnet8.0: ASP.NET Core Denial of Service Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-407
Affected Packages: dotnet8.0-0:8.0.134-1.el10_3,dotnet8.0-0:8.0.134-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109476
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99144, RHSA-2026:99143, RHSA-2026:99146, RHSA-2026:99145, RHSA-2026:99147, RHSA-2026:99052, RHSA-2026:99051, RHSA-2026:99142, RHSA-2026:99053,
Bugzilla: 2568441
Bugzilla Description: dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-116
Affected Packages: dotnet10.0-0:10.0.115-1.el10_3,dotnet9.0-0:9.0.124-1.el10_3,dotnet8.0-0:8.0.134-1.el10_3,dotnet9.0-0:9.0.124-1.el9_9,dotnet8.0-0:8.0.134-1.el8_10,dotnet10.0-0:10.0.115-1.el8_10,dotnet9.0-0:9.0.124-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,dotnet10.0-0:10.0.115-1.el9_9,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-105544
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99144, RHSA-2026:99143, RHSA-2026:99146, RHSA-2026:99145, RHSA-2026:99147, RHSA-2026:99052, RHSA-2026:99051, RHSA-2026:99142, RHSA-2026:99053,
Bugzilla: 2568442
Bugzilla Description: dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-284
Affected Packages: dotnet10.0-0:10.0.115-1.el10_3,dotnet9.0-0:9.0.124-1.el10_3,dotnet8.0-0:8.0.134-1.el10_3,dotnet9.0-0:9.0.124-1.el9_9,dotnet8.0-0:8.0.134-1.el8_10,dotnet10.0-0:10.0.115-1.el8_10,dotnet9.0-0:9.0.124-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,dotnet10.0-0:10.0.115-1.el9_9,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109475
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99144, RHSA-2026:99143, RHSA-2026:99146, RHSA-2026:99145, RHSA-2026:99147, RHSA-2026:99052, RHSA-2026:99051, RHSA-2026:99142, RHSA-2026:99053,
Bugzilla: 2568443
Bugzilla Description: dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-121
Affected Packages: dotnet10.0-0:10.0.115-1.el10_3,dotnet9.0-0:9.0.124-1.el10_3,dotnet8.0-0:8.0.134-1.el10_3,dotnet9.0-0:9.0.124-1.el9_9,dotnet8.0-0:8.0.134-1.el8_10,dotnet10.0-0:10.0.115-1.el8_10,dotnet9.0-0:9.0.124-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,dotnet10.0-0:10.0.115-1.el9_9,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109481
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2568445
Bugzilla Description: dotnet11.0: ASP.NET Core Elevation of Privilege Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-352
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-114146
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99144, RHSA-2026:99143, RHSA-2026:99146, RHSA-2026:99145, RHSA-2026:99885, RHSA-2026:99147, RHSA-2026:99598, RHSA-2026:99052, RHSA-2026:99051, RHSA-2026:99142, RHSA-2026:99053,
Bugzilla: 2568446
Bugzilla Description: dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability
CVSS Score:
CVSSv3 Score: 9.0
Vector:
CWE: CWE-863
Affected Packages: dotnet10.0-0:10.0.115-1.el10_3,dotnet9.0-0:9.0.124-1.el10_3,dotnet8.0-0:8.0.134-1.el10_3,dotnet9-0-main-9.0.124-0.1.hum1,dotnet9-0-main-9.0.23-0.1.hum1,dotnet9.0-0:9.0.124-1.el9_9,dotnet8.0-0:8.0.134-1.el8_10,dotnet10-0-main-10.0.115-1.hum1,dotnet10.0-0:10.0.115-1.el8_10,dotnet9.0-0:9.0.124-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,dotnet10.0-0:10.0.115-1.el9_9,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-114147
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99144, RHSA-2026:99143, RHSA-2026:99146, RHSA-2026:99145, RHSA-2026:99147, RHSA-2026:99052, RHSA-2026:99051, RHSA-2026:99142, RHSA-2026:99053,
Bugzilla: 2568449
Bugzilla Description: dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-401
Affected Packages: dotnet10.0-0:10.0.115-1.el10_3,dotnet9.0-0:9.0.124-1.el10_3,dotnet8.0-0:8.0.134-1.el10_3,dotnet9.0-0:9.0.124-1.el9_9,dotnet8.0-0:8.0.134-1.el8_10,dotnet10.0-0:10.0.115-1.el8_10,dotnet9.0-0:9.0.124-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,dotnet10.0-0:10.0.115-1.el9_9,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-114149
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99144, RHSA-2026:99143, RHSA-2026:99146, RHSA-2026:99145, RHSA-2026:99885, RHSA-2026:99147, RHSA-2026:99598, RHSA-2026:99052, RHSA-2026:99051, RHSA-2026:99142, RHSA-2026:99053,
Bugzilla: 2568450
Bugzilla Description: dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: dotnet10.0-0:10.0.115-1.el10_3,dotnet9.0-0:9.0.124-1.el10_3,dotnet8.0-0:8.0.134-1.el10_3,dotnet9-0-main-9.0.124-0.1.hum1,dotnet9-0-main-9.0.23-0.1.hum1,dotnet9.0-0:9.0.124-1.el9_9,dotnet8.0-0:8.0.134-1.el8_10,dotnet10-0-main-10.0.115-1.hum1,dotnet10.0-0:10.0.115-1.el8_10,dotnet9.0-0:9.0.124-1.el8_10,dotnet8.0-0:8.0.134-1.el9_9,dotnet10.0-0:10.0.115-1.el9_9,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-114150
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2568451
Bugzilla Description: dotnet11.0: ASP.NET Core Information Disclosure Vulnerability
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-114156
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2568452
Bugzilla Description: dotnet11.0: ASP.NET Core Security Feature Bypass Vulnerability
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-118746
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2568453
Bugzilla Description: dotnet11.0: .NET Security Feature Bypass Vulnerability
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-636
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-118748
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2568454
Bugzilla Description: dotnet11.0: ASP.NET Core Denial of Service Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-118749
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2568455
Bugzilla Description: dotnet11.0: ASP.NET Core Denial of Service Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-407
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-114155
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2569206
Bugzilla Description: dotnet10.0: dotnet11.0: .NET Elevation of Privilege Vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-50177
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571156
Bugzilla Description: neural-compressor: neural-compressor: Denial of Service via untrusted data deserialization
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-502
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-42966
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2569969
Bugzilla Description: neural-compressor: neural-compressor: Privilege escalation via uncaught exception
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-42917
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571026
Bugzilla Description: neural-compressor: neural-compressor: Denial of Service via untrusted data deserialization
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-502
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-41214
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570679
Bugzilla Description: neural-compressor: neural-compressor: Denial of Service via improper input validation
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-1287
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-40704
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570547
Bugzilla Description: neural-compressor: neural-compressor: Privilege escalation via protection mechanism failure
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-266
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-61547
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570572
Bugzilla Description: librabbitmq: rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-121885
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:98992,
Bugzilla: 2566844
Bugzilla Description: podman: Untrusted image labels allow auto-update to restart arbitrary systemd units
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-807
Affected Packages: podman-main-6.1.4-1.4.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-124952
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2571115
Bugzilla Description: firefox: Use-after-free in the Audio/Video component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124950
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570373
Bugzilla Description: firefox: thunderbird: Same-origin policy bypass in the CSS Parsing and Computation component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124949
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570320
Bugzilla Description: firefox: thunderbird: Other issue in the SVG component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124947
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571085
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Graphics component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124946
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570118
Bugzilla Description: firefox: thunderbird: Invalid pointer in the JavaScript Engine: JIT component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-466
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124945
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571082
Bugzilla Description: firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124943
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570174
Bugzilla Description: firefox: thunderbird: Use-after-free in the Layout component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124944
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570997
Bugzilla Description: firefox: thunderbird: Information disclosure in the Marionette component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124937
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2571012
Bugzilla Description: firefox: Other issue in the Media component in Firefox for Android
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124936
Severity: low
Released on: 10/11/2026
Advisory:
Bugzilla: 2570151
Bugzilla Description: firefox: thunderbird: Spoofing issue in the Address Bar component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-290
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124928
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570930
Bugzilla Description: firefox: thunderbird: Mitigation bypass in the SVG component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124923
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570779
Bugzilla Description: firefox: thunderbird: Sandbox escape in the Agent component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124925
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571066
Bugzilla Description: firefox: thunderbird: Information disclosure in the Layout component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124920
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570839
Bugzilla Description: firefox: thunderbird: Uninitialized memory in the Graphics: WebGPU component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124921
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2571087
Bugzilla Description: firefox: thunderbird: Sandbox escape in the Graphics: WebGPU component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124908
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570122
Bugzilla Description: firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124911
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2570444
Bugzilla Description: firefox: Clickjacking issue in the Autofill component in Firefox for Android
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-1021
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124904
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2571185
Bugzilla Description: firefox: thunderbird: Use-after-free in the SVG component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124900
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570098
Bugzilla Description: firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124878
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570464
Bugzilla Description: firefox: thunderbird: Use-after-free in the Layout: Positioned component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124871
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2570692
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124867
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2571183
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Editor component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124852
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2569968
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124951
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570241
Bugzilla Description: firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-266
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124948
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570255
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124941
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569982
Bugzilla Description: firefox: thunderbird: Information disclosure in the Security: RLBox component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124942
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570726
Bugzilla Description: firefox: thunderbird: Invalid pointer in the DOM: Streams component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-763
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124940
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570896
Bugzilla Description: firefox: thunderbird: Mitigation bypass in the File Handling component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-807
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124939
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571162
Bugzilla Description: firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-843
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124935
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570306
Bugzilla Description: firefox: thunderbird: Undefined behavior in the WebRTC: Networking component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-475
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124938
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571146
Bugzilla Description: firefox: thunderbird: Mitigation bypass in the Add-ons Manager component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-497
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124934
Severity: low
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569994
Bugzilla Description: firefox: thunderbird: Spoofing issue in the Security component
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-290
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124933
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570521
Bugzilla Description: firefox: thunderbird: Sandbox escape in the Console component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124932
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570876
Bugzilla Description: firefox: thunderbird: Use-after-free in the Graphics component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124931
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570942
Bugzilla Description: firefox: thunderbird: Same-origin policy bypass in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-346
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124929
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570589
Bugzilla Description: firefox: thunderbird: Information disclosure in the Layout: Form Controls component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-359
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124930
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570655
Bugzilla Description: firefox: thunderbird: Information disclosure in the Address Bar component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-359
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124927
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570629
Bugzilla Description: firefox: thunderbird: Site isolation issue in the Graphics: WebRender component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124926
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570955
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the WebRTC component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124924
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570811
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124922
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570740
Bugzilla Description: firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124918
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570753
Bugzilla Description: firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124919
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570787
Bugzilla Description: firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124917
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569957
Bugzilla Description: firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124914
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569846
Bugzilla Description: firefox: thunderbird: Site isolation issue in the DOM: Navigation component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124915
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570636
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124912
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570704
Bugzilla Description: firefox: thunderbird: Spoofing issue in the DOM: Security component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-346
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124913
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571052
Bugzilla Description: firefox: thunderbird: Site isolation issue in the Networking component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124910
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570208
Bugzilla Description: firefox: thunderbird: Mitigation bypass in the WebExtensions component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124909
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570137
Bugzilla Description: firefox: thunderbird: Information disclosure in the Private Browsing component
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-359
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124907
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570664
Bugzilla Description: firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124905
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570014
Bugzilla Description: firefox: thunderbird: Sandbox escape in the DOM: Navigation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124906
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570165
Bugzilla Description: firefox: thunderbird: Use-after-free in the Graphics: WebRender component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124903
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570365
Bugzilla Description: firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124902
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570824
Bugzilla Description: firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-346
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124901
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571125
Bugzilla Description: firefox: thunderbird: Other issue in the Networking: JAR component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-939
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124899
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570514
Bugzilla Description: firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124898
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571158
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Editor component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124897
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571076
Bugzilla Description: firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124895
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570440
Bugzilla Description: firefox: thunderbird: Use-after-free in the Storage: localStorage & sessionStorage component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124896
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571117
Bugzilla Description: firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-763
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124893
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570149
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Workers component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124894
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570433
Bugzilla Description: firefox: thunderbird: Use-after-free in the Networking: Cookies component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124891
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569970
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-193
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124892
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570717
Bugzilla Description: firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124890
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570644
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124889
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571031
Bugzilla Description: firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124888
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571126
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124887
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570172
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-193
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124886
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570660
Bugzilla Description: firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-763
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124885
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570491
Bugzilla Description: firefox: thunderbird: Use-after-free in the Graphics: Text component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124884
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570755
Bugzilla Description: firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124882
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570127
Bugzilla Description: firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124883
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570574
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124881
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570107
Bugzilla Description: firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124879
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570865
Bugzilla Description: firefox: thunderbird: Invalid pointer in the Networking: Cache component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-763
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124880
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571112
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124877
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569955
Bugzilla Description: firefox: thunderbird: Use-after-free in the Layout: Positioned component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124876
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570140
Bugzilla Description: firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124875
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570334
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124874
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570705
Bugzilla Description: firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-346
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124873
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570686
Bugzilla Description: firefox: thunderbird: Invalid pointer in the DOM: Editor component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124870
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570601
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-193
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124872
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571104
Bugzilla Description: firefox: thunderbird: Use-after-free in the Cycle Collector component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124869
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569877
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124868
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570770
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-193
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124866
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570548
Bugzilla Description: firefox: thunderbird: Use-after-free in the Layout component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124865
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570248
Bugzilla Description: firefox: thunderbird: Use-after-free in the Audio/Video component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124864
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571102
Bugzilla Description: firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124862
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570116
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124863
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571008
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124860
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569830
Bugzilla Description: firefox: thunderbird: Use-after-free in the Audio/Video component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124861
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2571152
Bugzilla Description: firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124859
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570100
Bugzilla Description: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124857
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569978
Bugzilla Description: firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124858
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570662
Bugzilla Description: firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-825
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124855
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569985
Bugzilla Description: firefox: thunderbird: Sandbox escape in the DOM: Navigation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-653
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124856
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570417
Bugzilla Description: firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124854
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2569907
Bugzilla Description: firefox: thunderbird: Privilege escalation in the DOM: Navigation component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-270
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124853
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99111, RHSA-2026:99572, RHSA-2026:99110, RHSA-2026:99112, RHSA-2026:99571,
Bugzilla: 2570012
Bugzilla Description: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: firefox-0:153.7.0-1.el10_3,firefox-0:153.7.0-1.el10_2,firefox-0:153.7.0-1.el8_10,firefox-0:153.7.0-1.el9_9,firefox-0:153.7.0-1.el9_8,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-124747
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2569520
Bugzilla Description: busybox: Heap buffer overflow in wget FTP resume when the resume offset exceeds the reported file size
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-104619
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2569677
Bugzilla Description: PackageKit: PackageKit: Privilege escalation via security update rollback in Zypp backend
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-267
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-125672
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2569357
Bugzilla Description: cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-88
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107364
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:99625, RHSA-2026:99624, RHSA-2026:99715, RHSA-2026:97811, RHSA-2026:99716,
Bugzilla: 2569161
Bugzilla Description: krb5: Unauthenticated KDC DoS based on ASN.1 decoder read overrun
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages: krb5-0:1.21.3-10.el10_2.2,krb5-main-1.22.3-0.1.hum1,krb5-0:1.21.1-10.el9_9.2,krb5-0:1.21.1-10.el9_8.3,krb5-0:1.21.3-11.el10_3.2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2026-112201
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2555463
Bugzilla Description: keycloak-services: keycloak-services: Login-failure upsert trusts MySQL/MariaDB affected-row count
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-120399
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2564888
Bugzilla Description: flightctl-api: flightctl-remote-access: flightctl: Unbounded TLS handshake in ConnContext can block accepting connections
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1322
Affected Packages:
Package States: Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,
Full Details
CVE document

CVE-2026-110289
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:100117, RHSA-2026:93601,
Bugzilla: 2565158
Bugzilla Description: grafana: GIT SYNC CONNECTIONS COULD SEND CREDENTIALS TO INTERNAL ADDRESSES
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-918
Affected Packages: grafana13-1-main-13.1.10-0.1.hum1,grafana12-4-main-12.4.13-0.6.hum1,
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-106475
Severity: important
Released on: 10/11/2026
Advisory: RHSA-2026:95953, RHSA-2026:99114,
Bugzilla: 2565159
Bugzilla Description: grafana: ELASTICSEARCH DATA SOURCE COULD BE USED TO SEND ARBITRARY REQUESTS TO ELASTICSEARCH
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-267
Affected Packages: grafana13-2-main-13.2.5-0.1.hum1,grafana13-1-main-13.1.9-0.1.hum1,
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-107365
Severity: moderate
Released on: 10/11/2026
Advisory: RHSA-2026:100117, RHSA-2026:99114,
Bugzilla: 2565163
Bugzilla Description: grafana: GOOGLE CLOUD MONITORING DATA SOURCE COULD REACH OTHER CLOUD MONITORING API PATHS
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-918
Affected Packages: grafana13-1-main-13.1.10-0.1.hum1,grafana13-2-main-13.2.5-0.1.hum1,
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-12933
Severity: moderate
Released on: 10/11/2026
Advisory:
Bugzilla: 2565236
Bugzilla Description: grafana: RECORDED QUERIES REMOTE-WRITE VALIDATION COULD USE DATA SOURCE CREDENTIALS BEFORE CHECKING PERMISSIONS
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-125637
Severity: important
Released on: 10/11/2026
Advisory:
Bugzilla: 2569294
Bugzilla Description: konflux-ci: Unvalidated hostname fields enable Caddyfile config injection in the Konflux UI proxy generator, allowing an unauthenticated route to be spliced ahead of the forward_auth/impersonate authorization chain
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-94
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125394
Severity: moderate
Released on: 09/11/2026
Advisory:
Bugzilla: 2570612
Bugzilla Description: freerdp: FreeRDP: Information disclosure via stale brush cache use-after-free
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-125371
Severity: moderate
Released on: 09/11/2026
Advisory:
Bugzilla: 2570318
Bugzilla Description: tinyproxy: Tinyproxy: Access control bypass via improper hostname matching
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-1025
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-125110
Severity: moderate
Released on: 09/11/2026
Advisory:
Bugzilla: 2570166
Bugzilla Description: rack: rack: Security header bypass via unnormalized dot segments in request paths
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-41
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2026-125109
Severity: moderate
Released on: 09/11/2026
Advisory:
Bugzilla: 2570213
Bugzilla Description: rack: Rack: Security bypass and URL manipulation via invalid HTTP host headers
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-1286
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2026-125108
Severity: low
Released on: 09/11/2026
Advisory:
Bugzilla: 2570275
Bugzilla Description: rack: rack: Security inspection bypass via multipart boundary parsing differential
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-444
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document