Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream AUS (v.8.6)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-6752 | Incorrect boundary conditions in the WebRTC component | 7.3 High | Apr 21, 2026 |
| CVE-2026-6753 | Incorrect boundary conditions in the WebRTC component | 7.3 High | Apr 21, 2026 |
| CVE-2026-6751 | Uninitialized memory in the Audio/Video: Web Codecs component | 7.3 High | Apr 21, 2026 |
| CVE-2026-6750 | Privilege escalation in the Graphics: WebRender component | 8.8 High | Apr 21, 2026 |
| CVE-2026-6749 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6747 | Use-after-free in the WebRTC component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6748 | Uninitialized memory in the Audio/Video: Web Codecs component | 9.8 Critical | Apr 21, 2026 |
| CVE-2026-6746 | Use-after-free in the DOM: Core & HTML component | 7.5 High | Apr 21, 2026 |
| CVE-2026-40164 | jq is a command-line JSON processor | 7.5 High | Apr 13, 2026 |
| CVE-2026-39979 | jq is a command-line JSON processor | 6.9 Medium | Apr 13, 2026 |
| CVE-2026-4786 | Mitgation of CVE-2026-4519 was incomplete | 7.0 High | Apr 13, 2026 |
| CVE-2026-6100 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a… | 9.1 Critical | Apr 13, 2026 |
| CVE-2026-4154 | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4153 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4150 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-32280 | During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… | 7.5 High | Apr 8, 2026 |
| CVE-2026-27140 | SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution… | 8.8 High | Apr 8, 2026 |
| CVE-2026-32283 | If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… | 7.5 High | Apr 8, 2026 |
| CVE-2026-34078 | Flatpak is a Linux application sandboxing and distribution framework | 9.3 Critical | Apr 7, 2026 |
| CVE-2026-21413 | A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545… | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-20889 | A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-24660 | A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b | 8.1 High | Apr 7, 2026 |
| CVE-2026-5734 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1 | 8.1 High | Apr 7, 2026 |
| CVE-2026-5732 | Incorrect boundary conditions, integer overflow in the Graphics: Text component | 8.8 High | Apr 7, 2026 |
| CVE-2026-5731 | Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and… | 9.8 Critical | Apr 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433