What’s Vulnerable › Products
Red Hat Hardened Images vulnerabilities
124 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 119 published in the last 12 months.
Check whether your Red Hat Hardened Images version is affected
Latest Red Hat Hardened Images vulnerabilities
- CVE-2026-115456 — Gcc: out-of-bounds read in std::from_chars (CVSS 3.7)
- CVE-2026-115455 — Gcc: stack overflow in std::bitset on libstdc++ (CVSS 6.5)
- CVE-2026-114691 — Gcc: integer wrap in `std (CVSS 5.9)
- CVE-2026-114690 — Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std (CVSS 6.2)
- CVE-2026-85498 — Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow (CVSS 3.5)
- CVE-2026-115207 — Patch: filename validation bypass in reversal fallback allows file creation outside the working directory (CVSS 5.5)
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
- CVE-2026-85518 — Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition (CVSS 6.1)
- CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
- CVE-2026-92824 — Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts (CVSS 6.2)
- CVE-2026-92823 — Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml (CVSS 6.2)
- CVE-2026-92822 — Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml (CVSS 6.2)
- CVE-2026-16460 — Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization (CVSS 7.4)
- CVE-2026-17591 — Libarchive: libarchive: use-after-free via aliased mac metadata copy (CVSS 3.6)
- CVE-2026-85977 — Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding (CVSS 5.3)
- CVE-2026-85231 — Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding (CVSS 6.5)
- CVE-2026-88842 — Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption (CVSS 3.3)
- CVE-2026-90954 — Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush (CVSS 7.8)
- CVE-2026-88829 — Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy (CVSS 7.2)
- CVE-2026-88838 — Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions (CVSS 5.5)
- CVE-2026-88834 — Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds (CVSS 3.7)
- CVE-2026-88833 — Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service (CVSS 6.5)
- CVE-2026-108119 — Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix (CVSS 6.3)
- CVE-2026-107655 — Cups: null pointer dereference via embedded job ticket comments allows remote denial of service (CVSS 4.0)
- CVE-2026-107161 — Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients (CVSS 7.5)