Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream EUS (v. 10.0)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 High	Mar 20, 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 High	Mar 19, 2026
CVE-2006-10003	XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack	9.8 Critical	Mar 19, 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 High	Mar 18, 2026
CVE-2026-26740	Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the…	8.2 High	Mar 18, 2026
CVE-2026-2921	GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-3083	GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3085	GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3082	GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2923	GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2922	GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2920	GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-31806	FreeRDP is a free implementation of the Remote Desktop Protocol	9.3 Critical	Mar 13, 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 High	Mar 13, 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 High	Mar 12, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-23868	Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect…	5.1 Medium	Mar 10, 2026
CVE-2026-26130	Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…	7.5 High	Mar 10, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-27622	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Mar 3, 2026
CVE-2026-26965	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026

Other Red Hat products