Enterprise Linux Server EUS vulnerabilities

9 known vulnerabilities in Enterprise Linux Server EUS from Red Hat. 8 are rated high or critical, and 9 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Red Hat Polkit Out-of-Bounds Read and Write Exploited

  CVE-2021-4034Jan 28, 2022PolkitEPSS 94.9%

  A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn

• 9.8 Critical severity

  VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Exploited

  CVE-2019-5544Dec 6, 2019ESXi and Horizon DaaSEPSS 98.1%

  OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

• 7.8 High severity

  Linux Kernel Integer Overflow Exploited

  CVE-2018-14634Sep 25, 2018Linux FoundationEPSS 14.7%

  An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x

• 7.5 High severity

  Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Exploited

  CVE-2016-9079Jun 11, 2018MozillaEPSS 87.4%

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, a

• 9.8 Critical severity

  Oracle Java SE and JRockit Unspecified Exploited

  CVE-2016-3427Apr 21, 2016OracleEPSS 92.3%

  Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

• 9.8 Critical severity

  Adobe Flash Player Use-After-Free Exploited

  CVE-2015-5123Jul 14, 2015Red HatEPSS 18.8%

  Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through

• 9.8 Critical severity

  Adobe Flash Player Use-After-Free Exploited

  CVE-2015-5122Jul 14, 2015AdobeEPSS 87%

  Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x thro

• 6.9 Medium severity

  Linux Kernel Race Condition Exploited

  CVE-2014-0196May 7, 2014LinuxEPSS 20.3%

  The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privi

• 7.5 High severity

  OpenSSL Information Disclosure Exploited

  CVE-2014-0160Apr 7, 2014OpenSSLEPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, a