Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream TUS (v.8.8)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-12297 | Sandbox escape due to incorrect boundary conditions in the Networking component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12296 | Sandbox escape in the Security: Process Sandboxing component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12295 | Sandbox escape in the DOM: Navigation component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12294 | Sandbox escape in the DOM: Workers component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-4408 | Samba: remote code execution in samr | 9.0 Critical | May 28, 2026 |
| CVE-2026-4480 | Samba: samba: remote code execution in printing subsystem via unescaped job description | 9.0 Critical | May 26, 2026 |
| CVE-2026-42508 | Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation | 9.1 Critical | May 22, 2026 |
| CVE-2026-8401 | Sandbox escape in the Profile Backup component | 9.8 Critical | May 12, 2026 |
| CVE-2026-8094 | Other issue in the WebRTC component | 9.8 Critical | May 7, 2026 |
| CVE-2026-6748 | Uninitialized memory in the Audio/Video: Web Codecs component | 9.8 Critical | Apr 21, 2026 |
| CVE-2026-6100 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a… | 9.1 Critical | Apr 13, 2026 |
| CVE-2026-34078 | Flatpak is a Linux application sandboxing and distribution framework | 9.3 Critical | Apr 7, 2026 |
| CVE-2026-21413 | A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545… | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-20889 | A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-5731 | Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and… | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-33526 | Squid is a caching proxy for the Web | 9.2 Critical | Mar 26, 2026 |
| CVE-2026-4721 | Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and… | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4720 | Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4700 | Mitigation bypass in the Networking: HTTP component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4696 | Use-after-free in the Layout: Text and Fonts component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4691 | Use-after-free in the CSS Parsing and Computation component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4692 | Sandbox escape in the Responsive Design Mode component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4689 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 10.0 Critical | Mar 24, 2026 |
| CVE-2026-4690 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4687 | Sandbox escape due to incorrect boundary conditions in the Telemetry component | 9.6 Critical | Mar 24, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433