Known vulnerabilities in Red Hat Enterprise Linux AppStream E4S (v.9.0)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-6747	Use-after-free in the WebRTC component	7.5 High	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6746	Use-after-free in the DOM: Core & HTML component	7.5 High	Apr 21, 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 High	Apr 16, 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 High	Apr 13, 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Medium	Apr 13, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-4154	GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4153	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4152	GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4150	GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-27140	SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution…	8.8 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026
CVE-2026-5734	Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1	8.1 High	Apr 7, 2026
CVE-2026-5732	Incorrect boundary conditions, integer overflow in the Graphics: Text component	8.8 High	Apr 7, 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critical	Apr 7, 2026
CVE-2026-34588	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.6 High	Apr 6, 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critical	Apr 3, 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 High	Apr 3, 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 High	Apr 1, 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 High	Mar 31, 2026
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Medium	Mar 30, 2026

Other Red Hat products