Red Hat Enterprise Linux Els vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Red Hat Enterprise Linux Els: 4 record(s), with affected versions and fixes.
cpe:2.3:o:redhat:enterprise_linux_els

CVE-2026-34486 High · 7.5 KEV High · 68 Public exploit CWE-311 Apr 9, 2026

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

CVE-2025-62230 High · 7.3 CWE-416 Oct 30, 2025

Xorg: xwayland: use-after-free in xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

CVE-2025-62231 High · 7.3 CWE-190 Oct 30, 2025

Xorg: xmayland: value overflow in xkbsetcompatmap()

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

CVE-2025-31277 High · 8.8 KEV High · 58 Public exploit CWE-119 Jul 29, 2025

Apple Multiple Products Buffer Overflow Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.