Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream TUS (v.8.6)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-21945 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… | 7.5 High | Jan 20, 2026 |
| CVE-2026-23884 | FreeRDP is a free implementation of the Remote Desktop Protocol | 7.7 High | Jan 19, 2026 |
| CVE-2026-23533 | FreeRDP is a free implementation of the Remote Desktop Protocol | 7.7 High | Jan 19, 2026 |
| CVE-2026-23532 | FreeRDP is a free implementation of the Remote Desktop Protocol | 7.7 High | Jan 19, 2026 |
| CVE-2026-23531 | FreeRDP is a free implementation of the Remote Desktop Protocol | 7.7 High | Jan 19, 2026 |
| CVE-2026-23530 | FreeRDP is a free implementation of the Remote Desktop Protocol | 7.7 High | Jan 19, 2026 |
| CVE-2026-23490 | pyasn1 is a generic ASN.1 library for Python | 7.5 High | Jan 16, 2026 |
| CVE-2026-22859 | FreeRDP is a free implementation of the Remote Desktop Protocol | 5.6 Medium | Jan 14, 2026 |
| CVE-2026-22858 | FreeRDP is a free implementation of the Remote Desktop Protocol | 5.6 Medium | Jan 14, 2026 |
| CVE-2026-22855 | FreeRDP is a free implementation of the Remote Desktop Protocol | 5.6 Medium | Jan 14, 2026 |
| CVE-2026-0891 | Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 | 8.1 High | Jan 13, 2026 |
| CVE-2026-0882 | Use-after-free in the IPC component | 8.8 High | Jan 13, 2026 |
| CVE-2026-0879 | Sandbox escape due to incorrect boundary conditions in the Graphics component | 9.8 Critical | Jan 13, 2026 |
| CVE-2026-0880 | Sandbox escape due to integer overflow in the Graphics component | 8.8 High | Jan 13, 2026 |
| CVE-2026-0878 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | 8.0 High | Jan 13, 2026 |
| CVE-2026-0877 | Mitigation bypass in the DOM: Security component | 8.1 High | Jan 13, 2026 |
| CVE-2026-0719 | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication | 8.6 High | Jan 8, 2026 |
| CVE-2026-21441 | urllib3 is an HTTP client library for Python | 8.9 High | Jan 7, 2026 |
| CVE-2025-43511 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | Dec 12, 2025 |
| CVE-2025-43457 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | Nov 4, 2025 |
| CVE-2025-43441 | The issue was addressed with improved memory handling | 4.3 Medium | Nov 4, 2025 |
| CVE-2025-43438 | A use-after-free issue was addressed with improved memory management | 4.3 Medium | Nov 4, 2025 |
| CVE-2025-43433 | The issue was addressed with improved memory handling | 8.8 High | Nov 4, 2025 |
| CVE-2025-43214 | The issue was addressed with improved memory handling | 6.5 Medium | Jul 29, 2025 |
| CVE-2025-31277 | Exploited Apple Multiple Products Buffer Overflow Vulnerability | 8.8 High | Jul 29, 2025 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433