Skip to main content

GLib CVE-2025-14087

CRITICAL
Integer Overflow or Wraparound (CWE-190)
2025-12-10 secalert@redhat.com
RCE Denial Of Service Integer Overflow Red Hat Enterprise Linux Glib Gnome
Critical
Disputed · 9.8 NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Reach GLib-linked parsing endpoint
  2. Delivery
    Deliver crafted GVariant input
  3. Exploit
    Trigger heap buffer-underflow in parser
  4. Execution
    Corrupt adjacent heap memory
  5. Persist
    Crash service or hijack execution
  6. Impact
    Denial of service or code execution

Vulnerability Assessment

Weakness
CWE
CWE-190
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK

1 technique across 1 tactic: Execution

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Exploitation requires that a GLib-linked application or service parse attacker-controlled GVariant input (crafted serialized/text data fed into the GVariant parser) - that data path is the concrete prerequisite. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication and no user interaction once such a parsing endpoint is reachable, so against an exposed component this is unauthenticated and remotely triggerable with low complexity. The practical limiting factor is reachability: GLib does not by itself listen on the network, so exploitability hinges on whether a deployed application exposes the GVariant parser to untrusted/remote input - many installations only ever process trusted local data, which sharply narrows real-world remote attack surface. Code execution (as opposed to a crash/DoS) further depends on heap layout and platform-specific exploitation, which is not demonstrated by any provided POC.
Impact

Signals conflict and should be weighed carefully. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H = 9.8) describes a trivially exploitable, unauthenticated, network-reachable flaw with full confidentiality/integrity/availability impact - however, network reachability in practice depends entirely on whether a GLib-linked service parses attacker-controlled GVariant data over the network, which is application-specific rather than a property of GLib itself. EPSS is low at 0.26% (49th percentile) and the CVE is NOT in CISA KEV, so there is no evidence of active or imminent mass exploitation. The CWE/description mismatch (CWE-190 integer overflow vs. a stated buffer-underflow) should be verified against the upstream GNOME issue and Red Hat Bugzilla before drawing firm root-cause conclusions. No SSVC decision data and no POC were provided. Net assessment: a genuinely serious memory-safety bug in a ubiquitous library warranting prompt patching, but current real-world exploitation risk is moderate, not the emergency the raw 9.8 implies - DoS is the most realistic outcome, with code execution being plausible-but-unproven.
Exploit ScenarioDerived

An attacker crafts a malformed GVariant-serialized payload and delivers it to a service or application that links GLib and parses the data (for example a network-facing daemon that unmarshals attacker-supplied serialized data). The malformed length/offset triggers a heap buffer-underflow, corrupting adjacent heap memory and crashing the process (DoS) or, with careful heap grooming, steering execution toward attacker-controlled code. No public POC was identified at time of analysis, so weaponized code execution remains unproven.
Act Now Prioritize within 24-48h. Why: CRITICAL severity.
Patch available 0.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv3 – Jun 24, 2026

Heap corruption in GLib (GNOME's core C utility library) lets remote attackers trigger a buffer-underflow in the GVariant parser by supplying maliciously crafted serialized/text input, resulting in denial of service and potentially arbitrary code execution. Any application linking GLib that deserializes untrusted GVariant data is exposed, which spans broad swaths of the Linux desktop and system stack across Red Hat Enterprise Linux 7-10 and SUSE. There is no public exploit identified at time of analysis, and EPSS exploitation probability is low (0.26%, 49th percentile) despite the 9.8 CVSS, indicating the headline severity is not yet matched by observed exploitation interest.

Earlier versions of this analysis (2)
v2 Jun 24, 2026 - 17:31 cvss changed CVSS 9.8

Heap corruption in GNOME GLib's GVariant text parser allows remote attackers to crash applications (denial of service) and potentially achieve code execution by supplying maliciously crafted GVariant input strings that trigger a buffer-underflow. Any application linking GLib and parsing attacker-influenced GVariant data is exposed, which on Red Hat Enterprise Linux 7-10, SUSE, and other distributions covers a broad swath of desktop and service components. No public exploit identified at time of analysis, and the EPSS exploitation probability is low (0.26%, 49th percentile).

v1 Mar 18, 2026 - 17:37 CVSS 5.6

A buffer-underflow vulnerability exists in GLib's GVariant parser that allows remote attackers to trigger heap corruption through maliciously crafted input strings. This affects GNOME GLib and all versions of Red Hat Enterprise Linux (7.0 through 10.0), potentially enabling denial of service or remote code execution. The vulnerability has an EPSS score of 0.26% (percentile 49%) indicating low exploitation probability despite the moderate CVSS score of 5.6.

RemediationAI

Apply your distribution's patched GLib package: on Red Hat Enterprise Linux install the updates from RHSA-2026:7461, RHSA-2026:15953, RHSA-2026:15969, or RHSA-2026:15971 as applicable to your major version (https://access.redhat.com/security/cve/CVE-2025-14087), and on SUSE apply the corresponding SUSE-SU-2025:4441/4442/4504 or 2026-series advisories (e.g. https://www.suse.com/support/update/SUSE-SU-2025:4441/). A vendor patch is available, but the exact fixed upstream GLib version was not supplied in the input and should be read from the errata. After upgrading the shared library, restart or reboot affected services since long-running daemons keep the old GLib mapped in memory until restarted. Where immediate patching is impossible, the only meaningful compensating control is to restrict exposure of services that deserialize untrusted GVariant/D-Bus/GSettings input from the network - block or firewall network endpoints that pass external data into GLib parsers and avoid feeding untrusted serialized GVariant blobs to applications; note this may break legitimate IPC or remote functionality and is a stopgap, not a fix.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

GLib is the foundational C library underpinning GNOME, GTK, GIO, D-Bus client tooling, and countless Linux applications and daemons. The defect resides in the GVariant parser - GVariant is GLib's strongly-typed serialization format used heavily by GSettings/dconf, D-Bus message marshalling, and IPC. The CWE is recorded as CWE-190 (Integer Overflow or Wraparound), while the description characterizes the concrete fault as a buffer-underflow during processing of crafted input strings; the typical mechanism is an arithmetic miscalculation of an offset or length that underflows, causing reads/writes before the intended buffer and corrupting the heap. Affected CPEs identify gnome:glib (all versions until patched) as the upstream component, with downstream exposure tracked against Red Hat Enterprise Linux 7.0, 8.0, 9.0, and 10.0.

Know when Glib gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Sources disagree (Medium–Critical)
NVD PRIMARY 9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today AI 8.6 HIGH

Network-reachable parser flaw with no auth/UI, but DoS is the proven impact (A:H) while code execution is unproven, so C/I lowered to L pending evidence.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
SUSE 5.6 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Red Hat 5.6 MEDIUM

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
Analysis Updated
Jun 24, 2026 - 17:31 vuln.today
v3 - CVSS changed
Analysis Updated
Jun 24, 2026 - 17:31 vuln.today
v2 - CVSS changed
Severity Changed
Jun 24, 2026 - 17:22 NVD
MEDIUM CRITICAL
CVSS changed
Jun 24, 2026 - 17:22 NVD
5.6 (MEDIUM) 9.8 (CRITICAL)
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Dec 10, 2025 - 09:15 nvd
MEDIUM 5.6

DescriptionNVD

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

Executive ViewAI

Why It Matters

GLib, the foundational library for Linux desktop environments and system services, contains a critical remote heap corruption vulnerability (CVE-2025-14087) affecting Red Hat Enterprise Linux 7-10, SUSE, and derivative distributions. Any application deserializing untrusted GVariant data is at risk of service disruption or arbitrary code execution, creating potential operational and data security impacts across enterprise infrastructure. While exploitation probability remains low (0.26% EPSS), the ubiquity of GLib-dependent applications necessitates rapid remediation.

Business Impact: High
Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score
0.3%
Top 51% exploitable
Prevalence
Ubiquitous
core GNOME/GTK C library present across virtually all Linux desktop and server systems
Data Quality
5 sources
Confidence: Medium
NVD CVE.org EPSS Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity CRITICAL
CISA KEV No
Public POC No
EPSS 0.3%
Patch available Yes
Active threat No
Deciding rule
CRITICAL severity
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
High

Priority Score

49
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +49
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Integer Overflow MEDIUM

Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Affected Products (CPE)NVD

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

More in Glib

View all
CVE-2024-52533 CRITICAL POC
9.8 Nov 11

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CON
CVE-2018-16428 CRITICAL POC
9.8 Sep 04

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference. Rated critical sev
CVE-2025-13601 HIGH POC
7.7 Nov 26

Heap-based buffer overflow in GLib's g_escape_uri_string() function allows local attackers to achieve high-integrity and
CVE-2021-27219 HIGH POC
7.5 Feb 15

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. Rated high severity (CVSS 7.5), this vulne
CVE-2020-35457 HIGH POC
7.8 Dec 14

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entri
CVE-2018-16429 HIGH POC
7.5 Sep 04

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf
CVE-2020-6750 MEDIUM POC
5.9 Jan 09

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting v
CVE-2021-28153 MEDIUM POC
5.3 Mar 11

An issue was discovered in GNOME GLib before 2.66.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely ex
CVE-2019-12450 CRITICAL
9.8 May 29

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while

CVE-2024-34397 MEDIUM POC
5.2 May 07

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Rated medium severity (CVSS 5.
CVE-2026-58016 CRITICAL
9.1 Jun 30

Denial of service in GNOME GLib (versions before 2.88.1) arises when g_dbus_node_info_new_for_xml() parses malformed D-B
CVE-2026-58014 HIGH
8.6 Jun 30

Denial of service (and a 1-byte out-of-bounds read) in GNOME GLib before 2.88.1 arises from an off-by-one error in g_key

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2023-3519 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
Container suse/manager/4.3/proxy-httpd:4.3.16.2.9.73.4 Container suse/sle-micro/base-5.5:2.0.4-5.8.230 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.441 Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-EC2 Affected
Container suse/manager/4.3/proxy-salt-broker:4.3.16.2.9.63.4 Affected
Container suse/manager/5.0/x86_64/proxy-httpd:latest Container suse/manager/5.0/x86_64/server:latest Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.2.8.15.2 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.2.9.13.2 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.2.8.13.2 Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image proxy-httpd-image Image server-image Affected
Container suse/manager/5.0/x86_64/proxy-salt-broker:latest Container suse/manager/5.0/x86_64/server-attestation:latest Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:5.1.2.8.13.1 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Image proxy-salt-broker-image Image server-hub-xmlrpc-api-image Image server-saline-image Affected
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.115 Container suse/sl-micro/6.0/base-os-container:2.1.3-7.81 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.102 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.117 Image SL-Micro Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Affected

References

Advisories & patches
ADVISORY https://vuldb.com/vuln/334645 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:4441/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:4442/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:4504/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:0018/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20032/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20045/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20074/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20493/ REF https://access.redhat.com/errata/RHSA-2026:15953 REF https://access.redhat.com/errata/RHSA-2026:15969 REF https://access.redhat.com/errata/RHSA-2026:15971 REF https://access.redhat.com/errata/RHSA-2026:19148 REF https://access.redhat.com/errata/RHSA-2026:19361 REF https://access.redhat.com/errata/RHSA-2026:19452 REF https://access.redhat.com/errata/RHSA-2026:19457 REF https://access.redhat.com/errata/RHSA-2026:19459 REF https://access.redhat.com/errata/RHSA-2026:19460 REF https://access.redhat.com/errata/RHSA-2026:19523 REF https://access.redhat.com/errata/RHSA-2026:19524 REF https://access.redhat.com/errata/RHSA-2026:19565 REF https://access.redhat.com/errata/RHSA-2026:19566 REF https://access.redhat.com/errata/RHSA-2026:19567 REF https://access.redhat.com/errata/RHSA-2026:21275 REF https://access.redhat.com/errata/RHSA-2026:22634 REF https://access.redhat.com/errata/RHSA-2026:25096 REF https://access.redhat.com/errata/RHSA-2026:29197 REF https://access.redhat.com/errata/RHSA-2026:49512 REF https://access.redhat.com/errata/RHSA-2026:58981 REF https://access.redhat.com/errata/RHSA-2026:72502 REF https://access.redhat.com/errata/RHSA-2026:7461 REF https://access.redhat.com/errata/RHSA-2026:74674 REF https://access.redhat.com/errata/RHSA-2026:82304 REF https://access.redhat.com/errata/RHSA-2026:82322 REF https://access.redhat.com/errata/RHSA-2026:82347 REF https://access.redhat.com/errata/RHSA-2026:82354 REF https://access.redhat.com/errata/RHSA-2026:82372 REF https://access.redhat.com/errata/RHSA-2026:82857 REF https://access.redhat.com/errata/RHSA-2026:82888 REF https://access.redhat.com/security/cve/CVE-2025-14087 REF https://bugzilla.redhat.com/show_bug.cgi?id=2419093 REF https://gitlab.gnome.org/GNOME/glib/-/issues/3834

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy