Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream TUS (v.8.6)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2761	Sandbox escape in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026
CVE-2026-2762	Integer overflow in the JavaScript: Standard Library component	9.8 Critical	Feb 24, 2026
CVE-2026-2760	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026
CVE-2026-2759	Incorrect boundary conditions in the Graphics: ImageLib component	9.8 Critical	Feb 24, 2026
CVE-2026-2758	Use-after-free in the JavaScript: GC component	9.8 Critical	Feb 24, 2026
CVE-2026-2757	Incorrect boundary conditions in the WebRTC: Audio/Video component	9.8 Critical	Feb 24, 2026
CVE-2026-2048	GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2045	GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2044	GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-0797	GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2447	Heap buffer overflow in libvpx	8.8 High	Feb 16, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2026-20644	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-20652	The issue was addressed with improved memory handling	7.5 High	Feb 11, 2026
CVE-2026-20608	This issue was addressed through improved state management	5.5 Medium	Feb 11, 2026
CVE-2026-20635	The issue was addressed with improved memory handling	4.3 Medium	Feb 11, 2026
CVE-2026-20636	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-25506	MUNGE is an authentication service for creating and validating user credentials	7.7 High	Feb 10, 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 High	Feb 10, 2026
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 High	Feb 5, 2026
CVE-2026-1761	Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response	8.6 High	Feb 2, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 High	Jan 28, 2026

Other Red Hat products