Read the docs
Red Hat Security Advisory

RHSA-2026:27171

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-06-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 13 records

TI-2026-33473 CVE-2026-45736 · GHSA-58qx-3vcg-4xpx

ws: Uninitialized memory disclosure

Priority HIGH 66

ws is an open source WebSocket client and server for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-05-15 Partial fix · 8.20.1 CWE-908
Priority MEDIUM 43

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04017 Published 2026-07-14 Fixed in 8.0.29, 9.0.18 +8 CWE-502
Priority MEDIUM 43

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04017 Published 2026-07-14 Fixed in 8.0.29, 9.0.18 +10 CWE-502
TI-2026-37262 CVE-2026-50528 · GHSA-qvw7-jm5c-6hqw

.NET Security Feature Bypass Vulnerability

Priority MEDIUM 43

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00609 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-302
TI-2026-41095 CVE-2026-57108 · GHSA-rp2p-6cmp-jxj9

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +1 CWE-843
TI-2026-37340 CVE-2026-50651 · GHSA-wp74-jgxh-gv4q

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-770
Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-121
TI-2026-37259 CVE-2026-50525 · GHSA-8q5v-6pqq-x66h

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-770
Priority MEDIUM 41

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01232 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-1287
TI-2026-34879 CVE-2026-47302 · GHSA-cvvh-rhrc-wg4q

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority LOW 36

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00462 Published 2026-07-14 Fixed in 8.0.29, 9.0.18 +10 CWE-94
TI-2026-37260 CVE-2026-50526 · GHSA-55jh-fwmh-39m4

.NET Tampering Vulnerability

Priority LOW 32

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00224 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-345