Red Hat Enterprise Linux 7 Extended Lifecycle Support vulnerabilities

Product

Red Hat Enterprise Linux 7 Extended Lifecycle Support

by Red Hat · last CVE Oct 21, 2026

On CISA KEVExploited in the wild

318

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities318 In the news12 Timeline

Severity mix

Critical 75High 202Medium 40Low 1

Severity

All severities318 Critical75 High202 Medium40 Low1

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Red Hat Enterprise Linux 7 Extended Lifecycle Support to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-50262	5.5	0%	Jun 5	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes Affected: All versions, or not specified
CVE-2026-20608	5.5	0%	Feb 11	This issue was addressed through improved state management Affected: All versions, or not specified
CVE-2026-12299	5.4	0%	Jun 16	JIT miscompilation in the DOM: Core & HTML component Affected: All versions, or not specified
CVE-2026-12298	5.4	0%	Jun 16	Memory safety bug fixed in Thunderbird 152 Affected: All versions, or not specified
CVE-2026-15588	5.3	0%	Jul 20	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Affected: All versions, or not specified
CVE-2026-12329	5.3	0%	Jun 16	Memory safety bug fixed in Thunderbird ESR 140.12 Affected: All versions, or not specified
CVE-2026-45664	5.3	0%	Jun 10	ImageMagick: Policy Bypass in MNG coder could Affected: All versions, or not specified
CVE-2026-45031	5.3	0%	Jun 10	ImageMagick: Policy Bypass in PSD decoder Affected: All versions, or not specified
CVE-2026-42015	5.3	1%	May 26	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling Affected: All versions, or not specified
CVE-2026-8391	5.3	0%	May 12	Other issue in the JavaScript Engine component Affected: All versions, or not specified
CVE-2026-42258	5.3	1%	May 9	net-imap: Command Injection via unvalidated Symbol inputs Affected: All versions, or not specified
CVE-2026-23868	5.1	0%	Mar 10	Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling Affected: All versions, or not specified
CVE-2026-42006	4.3	1%	May 12	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP Affected: All versions, or not specified
CVE-2026-28901	4.3	0%	May 11	The issue was addressed with improved memory handling Affected: All versions, or not specified
CVE-2026-20664	4.3	1%	Mar 25	The issue was addressed with improved memory handling Affected: All versions, or not specified
CVE-2026-28859	4.3	1%	Mar 25	The issue was addressed with improved memory handling Affected: All versions, or not specified
CVE-2026-20635	4.3	0%	Feb 11	The issue was addressed with improved memory handling Affected: All versions, or not specified
CVE-2026-4519	3.3	0%	Mar 20	webbrowser.open() allows leading dashes in URLs Affected: All versions, or not specified