Read the docs
Red Hat Security Advisory

RHSA-2026:84693

Red Hat Hardened Images RPMs Security Update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 19 records

TI-2026-72719 CVE-2026-85363 · GHSA-f63g-mx39-3r38

Integer overflow in .NET Framework enables privilege elevation

Priority MEDIUM 42

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-10-13 Fixed in 10.0.13, 11.0.0-rc.2 +12 CWE-190
TI-2026-72674 CVE-2026-84008 · GHSA-846f-f764-76mx

Inefficient algorithm in .NET allows denial of service

Priority MEDIUM 41

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00991 Published 2026-10-13 Fixed in 2.0.50727.9188 AND 3.0.30729.9171, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 +11 CWE-407
TI-2026-72018 CVE-2026-58280 · GHSA-mc4q-93x5-f6hj

Uncontrolled recursion in .NET lets attackers deny service

Priority MEDIUM 41

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0125 Published 2026-10-13 Fixed in 10.0.13, 11.0.0-rc.2 +12 CWE-674
TI-2026-72269 CVE-2026-70197 · GHSA-4mpw-cpwj-hxxj

Out-of-bounds write in .NET allows remote code execution

Priority LOW 39

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00788 Published 2026-10-13 Fixed in 10.0.403, 10.0.13 +16 CWE-787
TI-2026-73026 CVE-2026-96237

Untrusted code inclusion in .NET allows remote code execution

Priority LOW 36

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00638 Published 2026-10-13 Fixed in 10.0.113, 8.0.132 +3 CWE-829
TI-2026-73020 CVE-2026-96231 · GHSA-2j93-m82w-73j2

Link following in .NET lets local attackers gain privileges

Priority LOW 36

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00411 Published 2026-10-13 Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-59
TI-2026-73017 CVE-2026-96225 · GHSA-w6wh-p4g7-mpj2

Link following in .NET lets local users escalate privileges

Priority LOW 36

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00411 Published 2026-10-13 Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-59
TI-2026-73014 CVE-2026-96222 · GHSA-vrv5-2jg9-4mmr

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Priority LOW 35

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00586 Published 2026-10-13 Fixed in 2.0.50727.9188 AND 3.0.30729.9171, 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 +14 CWE-295
TI-2026-72242 CVE-2026-70162 · GHSA-2fmv-rv2c-59x7

Denial of service in .NET web applications from crafted requests

Priority LOW 28

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00895 Published 2026-10-13 Fixed in 17.14.42, 18.10.4 +4 CWE-405
TI-2026-72023 CVE-2026-66822 · GHSA-wxxw-5cvc-53j7

Sensitive data leak in .NET runtime lets remote attackers read data

Priority LOW 28

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00785 Published 2026-10-13 Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-201