Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 6

Vulnerabilities 4

• High 7.8
  CVE-2026-62909

  .NET Elevation of Privilege Vulnerability

  Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026
• High 7.5
  CVE-2026-62901

  .NET Denial of Service Vulnerability

  Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026
• Medium 5.9
  CVE-2026-62899

  .NET Security Feature Bypass Vulnerability

  Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026
• Medium 5.9
  CVE-2026-62900

  .NET Information Disclosure Vulnerability

  Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-62909
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-62899
• report
  https://access.redhat.com/security/cve/CVE-2026-62900
• report
  https://access.redhat.com/security/cve/CVE-2026-62901
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55142.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2512175
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-62899
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-62899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2512179
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-62900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-62900
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2512180
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-62901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-62901
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2512185
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-62909
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-62909