Skip to content

Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream EUS (v. 10.0)

Is your version affected?

CVE Summary Score Published
CVE-2026-53016 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG… 7.8 High Jun 24, 2026
CVE-2026-56208 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode 7.6 High Jun 19, 2026
CVE-2026-12329 Memory safety bug fixed in Thunderbird ESR 140.12 5.3 Medium Jun 16, 2026
CVE-2026-12328 Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… 8.1 High Jun 16, 2026
CVE-2026-12299 JIT miscompilation in the DOM: Core & HTML component 5.4 Medium Jun 16, 2026
CVE-2026-12298 Memory safety bug fixed in Thunderbird 152 5.4 Medium Jun 16, 2026
CVE-2026-12297 Sandbox escape due to incorrect boundary conditions in the Networking component 9.6 Critical Jun 16, 2026
CVE-2026-12296 Sandbox escape in the Security: Process Sandboxing component 9.6 Critical Jun 16, 2026
CVE-2026-12295 Sandbox escape in the DOM: Navigation component 9.6 Critical Jun 16, 2026
CVE-2026-12294 Sandbox escape in the DOM: Workers component 9.6 Critical Jun 16, 2026
CVE-2026-12292 Incorrect boundary conditions in the Web Audio component 8.1 High Jun 16, 2026
CVE-2026-12291 Use-after-free in the Networking: HTTP component 8.8 High Jun 16, 2026
CVE-2026-12290 Memory safety bug fixed in Thunderbird 152 8.1 High Jun 16, 2026
CVE-2026-12289 Privilege escalation in the Graphics: WebRender component 8.8 High Jun 16, 2026
CVE-2026-46331 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page… 7.8 High Jun 16, 2026
CVE-2026-48165 MariaDB server is a community developed fork of MySQL server 8.0 High Jun 12, 2026
CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow 7.6 High Jun 11, 2026
CVE-2026-45591 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 High Jun 9, 2026
CVE-2026-46323 In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()… 7.8 High Jun 9, 2026
CVE-2025-10263 Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,… 9.1 Critical Jun 9, 2026
CVE-2026-50264 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat 7.8 High Jun 5, 2026
CVE-2026-50261 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() 7.8 High Jun 5, 2026
CVE-2026-50260 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() 7.8 High Jun 5, 2026
CVE-2026-50258 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels 7.8 High Jun 5, 2026
CVE-2026-50259 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing 7.8 High Jun 5, 2026

Other Red Hat products