Red Hat Cost Management On-Premise 1 vulnerabilities

6 known vulnerabilities in Red Hat Cost Management On-Premise 1 from Red Hat. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Red Hat Ansible Automation Platform 2.6 for…: Improper Verification of Cryptographic Signature

  CVE-2026-42784Sep 16, 2026Red Hat

  A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the ba

• 8.5 High severity

  Red Hat Enterprise Linux 10: Release of Invalid Pointer or Reference

  CVE-2026-74860Sep 8, 2026Red Hat

  A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free

• 7.8 High severity

  Red Hat Enterprise Linux 10: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-78410Sep 2, 2026Red Hat

  A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to

• 7.9 High severity

  Red Hat Enterprise Linux 10: Missing Release of File Descriptor or Handle after Effective Lifetime

  CVE-2026-78408Sep 2, 2026Red Hat

  The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the

• 7.0 High severity

  Red Hat Enterprise Linux 10: Out-of-bounds Write

  CVE-2026-13732Aug 31, 2026Red Hat

  A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destruc

• 7.1 High severity

  xdgmime: Heap-based Buffer Overflow

  CVE-2026-16118Jul 17, 2026Xdg

  A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the