enterprise linux eus kayıtları
enterprise linux eus üreticisine ait 31 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-190 Integer Overflow or Wraparound6
- CWE-122 Heap-based Buffer Overflow3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-121 Stack-based Buffer Overflow2
- CWE-125 Out-of-bounds Read2
- CWE-130 Improper Handling of Length Parameter Inconsistency1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
31 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
44Planlayın | CVE-2026-4631Kavram kanıtı | Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injectionred hat · red hat enterprise linux 10 · CWE-78 | Kritik9,8 | %15,47 Nis 2026 |
36İzleyin | CVE-2026-6100İstismar yok | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressurepython software foundation · cpython · CWE-416 | Kritik9,1 | %0,513 Nis 2026 |
36İzleyin | CVE-2025-10263Kavram kanıtı | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-arm · c1-ultra · CWE-362 | Kritik9,1 | %0,59 Haz 2026 |
35İzleyin | CVE-2026-52720İstismar yok | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbred hat · red hat enterprise linux 10 · CWE-122 | Yüksek8,8 | %0,615 Haz 2026 |
34İzleyin | CVE-2026-1761İstismar yok | Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responsered hat · red hat enterprise linux 10 · CWE-121 | Yüksek8,6 | %1,02 Şub 2026 |
34İzleyin | CVE-2026-0719İstismar yok | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationred hat · red hat enterprise linux 10 · CWE-121 | Yüksek8,6 | %0,68 Oca 2026 |
34İzleyin | CVE-2026-10649İstismar yok | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompressionred hat · red hat enterprise linux 10 · CWE-190 | Yüksek8,6 | %0,516 Haz 2026 |
33İzleyin | CVE-2026-54369İstismar yok | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functionsacl project · acl · CWE-59 | Yüksek8,4 | %0,129 Haz 2026 |
32İzleyin | CVE-2026-41316İstismar yok | ERB has an @_init deserialization guard bypass via def_module / def_method / def_classruby · erb · CWE-693 | Yüksek8,1 | %1,124 Nis 2026 |
32İzleyin | CVE-2026-4802Kavram kanıtı | Cockpit: cockpit: arbitrary command execution via crafted links in system logs uired hat · red hat enterprise linux 10 · CWE-78 | Yüksek8,0 | %1,011 May 2026 |
31İzleyin | CVE-2026-33999İstismar yok | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handlingred hat · red hat enterprise linux 10 · CWE-191 | Yüksek7,8 | %0,323 Nis 2026 |
31İzleyin | CVE-2026-34001İstismar yok | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionred hat · red hat enterprise linux 10 · CWE-825 | Yüksek7,8 | %0,223 Nis 2026 |
31İzleyin | CVE-2026-10118İstismar yok | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationred hat · red hat enterprise linux 10 · CWE-190 | Yüksek7,8 | %0,21 Haz 2026 |
31İzleyin | CVE-2026-34003İstismar yok | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory accessred hat · red hat enterprise linux 10 · CWE-125 | Yüksek7,8 | %0,223 Nis 2026 |
30İzleyin | CVE-2026-3608İstismar yok | Stack overflow in Kea daemonsisc · kea · CWE-617 | Yüksek7,5 | %1,425 Mar 2026 |
30İzleyin | CVE-2026-6893İstismar yok | Dracut: dracut: root code execution via dhcp options command injectionred hat · red hat enterprise linux 10 · CWE-78 | Yüksek7,5 | %1,210 Haz 2026 |
30İzleyin | CVE-2026-33846İstismar yok | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyred hat · red hat enterprise linux 10 · CWE-130 | Yüksek7,5 | %1,24 May 2026 |
30İzleyin | CVE-2026-4111İstismar yok | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivered hat · red hat enterprise linux 10 · CWE-835 | Yüksek7,5 | %0,713 Mar 2026 |
30İzleyin | CVE-2026-11774İstismar yok | 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowred hat · red hat directory server 11.5 e4s for rhel 8 · CWE-190 | Yüksek7,6 | %0,611 Haz 2026 |
30İzleyin | CVE-2026-8177İstismar yok | XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequencesshlomif · xml::libxml · CWE-125 | Yüksek7,5 | %0,610 May 2026 |
30İzleyin | CVE-2026-44673İstismar yok | libyang: lyb_read_string() integer overflow → heap buffer overflowcesnet · libyang · CWE-190 | Yüksek7,5 | %0,614 May 2026 |
30İzleyin | CVE-2026-56208İstismar yok | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modered hat · red hat enterprise linux 10.0 extended update support · CWE-122 | Yüksek7,6 | %0,419 Haz 2026 |
30İzleyin | CVE-2026-40164İstismar yok | jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedjqlang · jq · CWE-328 | Yüksek7,5 | %0,314 Nis 2026 |
30İzleyin | CVE-2026-53705İstismar yok | Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflowred hat · red hat enterprise linux 10 · CWE-190 | Yüksek7,6 | %0,315 Haz 2026 |
29İzleyin | CVE-2025-55131İstismar yok | A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module witnodejs · node · CWE-120 | Yüksek7,1 | %3,420 Oca 2026 |
- CVE-2026-463144Planlayın
Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
KritikCVSS 9,8Kavram kanıtıEPSS %15red hat · red hat enterprise linux 107 Nis 2026
- CVE-2026-610036İzleyin
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
KritikCVSS 9,1İstismar yokEPSS %0python software foundation · cpython13 Nis 2026
- CVE-2025-1026336İzleyin
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-
KritikCVSS 9,1Kavram kanıtıEPSS %0arm · c1-ultra9 Haz 2026
- CVE-2026-5272035İzleyin
Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb
YüksekCVSS 8,8İstismar yokEPSS %0red hat · red hat enterprise linux 1015 Haz 2026
- CVE-2026-176134İzleyin
Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response
YüksekCVSS 8,6İstismar yokEPSS %1red hat · red hat enterprise linux 102 Şub 2026
- CVE-2026-071934İzleyin
Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
YüksekCVSS 8,6İstismar yokEPSS %0red hat · red hat enterprise linux 108 Oca 2026
- CVE-2026-1064934İzleyin
Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression
YüksekCVSS 8,6İstismar yokEPSS %0red hat · red hat enterprise linux 1016 Haz 2026
- CVE-2026-5436933İzleyin
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
YüksekCVSS 8,4İstismar yokEPSS %0acl project · acl29 Haz 2026
- CVE-2026-4131632İzleyin
ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
YüksekCVSS 8,1İstismar yokEPSS %1ruby · erb24 Nis 2026
- CVE-2026-480232İzleyin
Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui
YüksekCVSS 8,0Kavram kanıtıEPSS %1red hat · red hat enterprise linux 1011 May 2026
- CVE-2026-3399931İzleyin
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 1023 Nis 2026
- CVE-2026-3400131İzleyin
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 1023 Nis 2026
- CVE-2026-1011831İzleyin
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 101 Haz 2026
- CVE-2026-3400331İzleyin
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 1023 Nis 2026
- CVE-2026-360830İzleyin
Stack overflow in Kea daemons
YüksekCVSS 7,5İstismar yokEPSS %1isc · kea25 Mar 2026
- CVE-2026-689330İzleyin
Dracut: dracut: root code execution via dhcp options command injection
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat enterprise linux 1010 Haz 2026
- CVE-2026-3384630İzleyin
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat enterprise linux 104 May 2026
- CVE-2026-411130İzleyin
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 1013 Mar 2026
- CVE-2026-1177430İzleyin
389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow
YüksekCVSS 7,6İstismar yokEPSS %0red hat · red hat directory server 11.5 e4s for rhel 811 Haz 2026
- CVE-2026-817730İzleyin
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
YüksekCVSS 7,5İstismar yokEPSS %0shlomif · xml::libxml10 May 2026
- CVE-2026-4467330İzleyin
libyang: lyb_read_string() integer overflow → heap buffer overflow
YüksekCVSS 7,5İstismar yokEPSS %0cesnet · libyang14 May 2026
- CVE-2026-5620830İzleyin
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
YüksekCVSS 7,6İstismar yokEPSS %0red hat · red hat enterprise linux 10.0 extended update support19 Haz 2026
- CVE-2026-4016430İzleyin
jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed
YüksekCVSS 7,5İstismar yokEPSS %0jqlang · jq14 Nis 2026
- CVE-2026-5370530İzleyin
Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow
YüksekCVSS 7,6İstismar yokEPSS %0red hat · red hat enterprise linux 1015 Haz 2026
- CVE-2025-5513129İzleyin
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module wit
YüksekCVSS 7,1İstismar yokEPSS %3nodejs · node20 Oca 2026