Skip to content

Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream EUS (v.9.6)

Is your version affected?

CVE Summary Score Published
CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component 7.5 High Mar 24, 2026
CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC 9.1 Critical Mar 20, 2026
CVE-2026-4519 The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for… 7.0 High Mar 20, 2026
CVE-2026-4424 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 7.5 High Mar 19, 2026
CVE-2006-10003 XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack 9.8 Critical Mar 19, 2026
CVE-2026-27135 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C 7.5 High Mar 18, 2026
CVE-2026-26740 Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the… 8.2 High Mar 18, 2026
CVE-2026-2921 GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability 7.8 High Mar 13, 2026
CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability 8.8 High Mar 13, 2026
CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability 8.8 High Mar 13, 2026
CVE-2026-3082 GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High Mar 13, 2026
CVE-2026-2923 GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High Mar 13, 2026
CVE-2026-2922 GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High Mar 13, 2026
CVE-2026-2920 GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High Mar 13, 2026
CVE-2026-31806 FreeRDP is a free implementation of the Remote Desktop Protocol 9.3 Critical Mar 13, 2026
CVE-2026-4111 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 7.5 High Mar 13, 2026
CVE-2026-32597 PyJWT is a JSON Web Token implementation in Python 7.5 High Mar 12, 2026
CVE-2026-2229 ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of… 7.5 High Mar 12, 2026
CVE-2026-1528 ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length 7.5 High Mar 12, 2026
CVE-2026-1526 The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during… 7.5 High Mar 12, 2026
CVE-2026-3497 Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions 2.7 Low Mar 12, 2026
CVE-2026-23868 Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect… 5.1 Medium Mar 10, 2026
CVE-2026-26130 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 High Mar 10, 2026
CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs 7.5 High Mar 6, 2026
CVE-2026-27137 When verifying a certificate chain which contains a certificate containing multiple email address constraints which… 7.5 High Mar 6, 2026

Other Red Hat products