Known vulnerabilities in Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-31431 | Exploited Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 7.8 High | Apr 22, 2026 |
| CVE-2026-34282 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… | 7.5 High | Apr 21, 2026 |
| CVE-2026-22016 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… | 7.5 High | Apr 21, 2026 |
| CVE-2026-6786 | Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 | 7.5 High | Apr 21, 2026 |
| CVE-2026-6785 | Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and… | 7.5 High | Apr 21, 2026 |
| CVE-2026-6754 | Use-after-free in the JavaScript Engine component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6752 | Incorrect boundary conditions in the WebRTC component | 7.3 High | Apr 21, 2026 |
| CVE-2026-6753 | Incorrect boundary conditions in the WebRTC component | 7.3 High | Apr 21, 2026 |
| CVE-2026-6751 | Uninitialized memory in the Audio/Video: Web Codecs component | 7.3 High | Apr 21, 2026 |
| CVE-2026-6750 | Privilege escalation in the Graphics: WebRender component | 8.8 High | Apr 21, 2026 |
| CVE-2026-6749 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6747 | Use-after-free in the WebRTC component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6748 | Uninitialized memory in the Audio/Video: Web Codecs component | 9.8 Critical | Apr 21, 2026 |
| CVE-2026-6746 | Use-after-free in the DOM: Core & HTML component | 7.5 High | Apr 21, 2026 |
| CVE-2026-41035 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a… | 7.4 High | Apr 16, 2026 |
| CVE-2026-40164 | jq is a command-line JSON processor | 7.5 High | Apr 13, 2026 |
| CVE-2026-39979 | jq is a command-line JSON processor | 6.9 Medium | Apr 13, 2026 |
| CVE-2026-4786 | Mitgation of CVE-2026-4519 was incomplete | 7.0 High | Apr 13, 2026 |
| CVE-2026-6100 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a… | 9.1 Critical | Apr 13, 2026 |
| CVE-2026-4154 | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4153 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4150 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4878 | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | 6.7 Medium | Apr 9, 2026 |
| CVE-2026-32280 | During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… | 7.5 High | Apr 8, 2026 |
| CVE-2026-27140 | SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution… | 8.8 High | Apr 8, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430