Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream TUS (v.8.6)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-4720 | Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4699 | Incorrect boundary conditions in the Layout: Text and Fonts component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4700 | Mitigation bypass in the Networking: HTTP component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4697 | Incorrect boundary conditions in the Audio/Video: Web Codecs component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4698 | JIT miscompilation in the JavaScript Engine: JIT component | 8.8 High | Mar 24, 2026 |
| CVE-2026-4695 | Incorrect boundary conditions in the Audio/Video: Web Codecs component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4696 | Use-after-free in the Layout: Text and Fonts component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4693 | Incorrect boundary conditions in the Audio/Video: Playback component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4694 | Incorrect boundary conditions, integer overflow in the Graphics component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4691 | Use-after-free in the CSS Parsing and Computation component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4692 | Sandbox escape in the Responsive Design Mode component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4689 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 10.0 Critical | Mar 24, 2026 |
| CVE-2026-4690 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4687 | Sandbox escape due to incorrect boundary conditions in the Telemetry component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4688 | Sandbox escape due to use-after-free in the Disability Access APIs component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4685 | Incorrect boundary conditions in the Graphics: Canvas2D component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4686 | Incorrect boundary conditions in the Graphics: Canvas2D component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4684 | Race condition, use-after-free in the Graphics: WebRender component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4519 | The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for… | 7.0 High | Mar 20, 2026 |
| CVE-2006-10003 | XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack | 9.8 Critical | Mar 19, 2026 |
| CVE-2026-2921 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Mar 13, 2026 |
| CVE-2026-3083 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability | 8.8 High | Mar 13, 2026 |
| CVE-2026-3085 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability | 8.8 High | Mar 13, 2026 |
| CVE-2026-3082 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Mar 13, 2026 |
| CVE-2026-31806 | FreeRDP is a free implementation of the Remote Desktop Protocol | 9.3 Critical | Mar 13, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433