Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 10)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-48933 | A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of… | 7.5 High | Jun 26, 2026 |
| CVE-2026-53016 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG… | 7.8 High | Jun 24, 2026 |
| CVE-2026-12505 | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | 7.8 High | Jun 18, 2026 |
| CVE-2026-9697 | Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or… | 7.4 High | Jun 17, 2026 |
| CVE-2026-6734 | Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying… | 7.5 High | Jun 17, 2026 |
| CVE-2026-12151 | Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but… | 7.5 High | Jun 17, 2026 |
| CVE-2026-42055 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules | 8.1 High | Jun 17, 2026 |
| CVE-2026-12329 | Memory safety bug fixed in Thunderbird ESR 140.12 | 5.3 Medium | Jun 16, 2026 |
| CVE-2026-12328 | Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… | 8.1 High | Jun 16, 2026 |
| CVE-2026-12299 | JIT miscompilation in the DOM: Core & HTML component | 5.4 Medium | Jun 16, 2026 |
| CVE-2026-12298 | Memory safety bug fixed in Thunderbird 152 | 5.4 Medium | Jun 16, 2026 |
| CVE-2026-12297 | Sandbox escape due to incorrect boundary conditions in the Networking component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12296 | Sandbox escape in the Security: Process Sandboxing component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12295 | Sandbox escape in the DOM: Navigation component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12294 | Sandbox escape in the DOM: Workers component | 9.6 Critical | Jun 16, 2026 |
| CVE-2026-12292 | Incorrect boundary conditions in the Web Audio component | 8.1 High | Jun 16, 2026 |
| CVE-2026-12291 | Use-after-free in the Networking: HTTP component | 8.8 High | Jun 16, 2026 |
| CVE-2026-12290 | Memory safety bug fixed in Thunderbird 152 | 8.1 High | Jun 16, 2026 |
| CVE-2026-12289 | Privilege escalation in the Graphics: WebRender component | 8.8 High | Jun 16, 2026 |
| CVE-2026-46331 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page… | 7.8 High | Jun 16, 2026 |
| CVE-2026-52722 | Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling | 7.1 High | Jun 15, 2026 |
| CVE-2026-52720 | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb | 8.8 High | Jun 15, 2026 |
| CVE-2026-53705 | A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good | 7.6 High | Jun 15, 2026 |
| CVE-2026-52719 | Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder | 7.1 High | Jun 15, 2026 |
| CVE-2026-48165 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 503
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 460
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 450
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433