The spice-client-win MSI installers for Windows clients included in Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Update Support contain two security vulnerabilities in the libsoup library. CVE-2026-0719 is a stack-based buffer overflow caused by a signed to unsigned conversion error in libsoup NTLM authentication. CVE-2026-1761 is another stack-based buffer overflow occurring during multipart HTTP response parsing in libsoup. These vulnerabilities could potentially lead to memory corruption. Red Hat has issued security updates (spice-client-win-8.10-7.el8_4.1) to address these issues.

Successful exploitation of these vulnerabilities could result in stack-based buffer overflows, potentially leading to memory corruption and impacting the security of the affected systems. The advisory rates the security impact as Important (high severity). There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated spice-client-win packages for Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Update Support that fix these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2026:2514 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation actions are indicated by the vendor.