Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream TUS (v.8.6)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026
CVE-2026-20889	A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b	9.8 Critical	Apr 7, 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critical	Apr 7, 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critical	Mar 26, 2026
CVE-2026-4721	Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…	9.8 Critical	Mar 24, 2026
CVE-2026-4720	Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148	9.8 Critical	Mar 24, 2026
CVE-2026-4700	Mitigation bypass in the Networking: HTTP component	9.8 Critical	Mar 24, 2026
CVE-2026-4696	Use-after-free in the Layout: Text and Fonts component	9.8 Critical	Mar 24, 2026
CVE-2026-4691	Use-after-free in the CSS Parsing and Computation component	9.8 Critical	Mar 24, 2026
CVE-2026-4692	Sandbox escape in the Responsive Design Mode component	9.6 Critical	Mar 24, 2026
CVE-2026-4689	Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component	10.0 Critical	Mar 24, 2026
CVE-2026-4690	Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component	9.6 Critical	Mar 24, 2026
CVE-2026-4687	Sandbox escape due to incorrect boundary conditions in the Telemetry component	9.6 Critical	Mar 24, 2026
CVE-2026-4688	Sandbox escape due to use-after-free in the Disability Access APIs component	9.6 Critical	Mar 24, 2026
CVE-2006-10003	XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack	9.8 Critical	Mar 19, 2026
CVE-2026-31806	FreeRDP is a free implementation of the Remote Desktop Protocol	9.3 Critical	Mar 13, 2026
CVE-2026-2793	Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and…	9.8 Critical	Feb 24, 2026
CVE-2026-2792	Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147	9.8 Critical	Feb 24, 2026
CVE-2026-2778	Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component	10.0 Critical	Feb 24, 2026
CVE-2026-2776	Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software	10.0 Critical	Feb 24, 2026
CVE-2026-2777	Privilege escalation in the Messaging System component	9.8 Critical	Feb 24, 2026
CVE-2026-2775	Mitigation bypass in the DOM: HTML Parser component	9.8 Critical	Feb 24, 2026
CVE-2026-2773	Incorrect boundary conditions in the Web Audio component	9.8 Critical	Feb 24, 2026

Other Red Hat products