Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream E4S (v.9.4)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-53016	In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG…	7.8 High	Jun 24, 2026
CVE-2026-56208	Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	7.6 High	Jun 19, 2026
CVE-2026-12329	Memory safety bug fixed in Thunderbird ESR 140.12	5.3 Medium	Jun 16, 2026
CVE-2026-12328	Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…	8.1 High	Jun 16, 2026
CVE-2026-12299	JIT miscompilation in the DOM: Core & HTML component	5.4 Medium	Jun 16, 2026
CVE-2026-12298	Memory safety bug fixed in Thunderbird 152	5.4 Medium	Jun 16, 2026
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-12292	Incorrect boundary conditions in the Web Audio component	8.1 High	Jun 16, 2026
CVE-2026-12291	Use-after-free in the Networking: HTTP component	8.8 High	Jun 16, 2026
CVE-2026-12290	Memory safety bug fixed in Thunderbird 152	8.1 High	Jun 16, 2026
CVE-2026-12289	Privilege escalation in the Graphics: WebRender component	8.8 High	Jun 16, 2026
CVE-2026-46331	In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page…	7.8 High	Jun 16, 2026
CVE-2026-11774	389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow	7.6 High	Jun 11, 2026
CVE-2026-46529	Atril Document Viewer is the default document reader of the MATE desktop environment for Linux	8.4 High	Jun 10, 2026
CVE-2026-45591	Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network	7.5 High	Jun 9, 2026
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-46323	In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()…	7.8 High	Jun 9, 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critical	Jun 9, 2026
CVE-2026-50264	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat	7.8 High	Jun 5, 2026
CVE-2026-50261	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()	7.8 High	Jun 5, 2026
CVE-2026-50260	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()	7.8 High	Jun 5, 2026
CVE-2026-50258	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels	7.8 High	Jun 5, 2026

Other Red Hat products