Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 10)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-27622	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Mar 3, 2026
CVE-2026-26965	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026
CVE-2026-26955	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026
CVE-2026-26103	Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api	7.1 High	Feb 25, 2026
CVE-2026-2793	Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and…	9.8 Critical	Feb 24, 2026
CVE-2026-2792	Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147	9.8 Critical	Feb 24, 2026
CVE-2026-2778	Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component	10.0 Critical	Feb 24, 2026
CVE-2026-2776	Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software	10.0 Critical	Feb 24, 2026
CVE-2026-2777	Privilege escalation in the Messaging System component	9.8 Critical	Feb 24, 2026
CVE-2026-2775	Mitigation bypass in the DOM: HTML Parser component	9.8 Critical	Feb 24, 2026
CVE-2026-2773	Incorrect boundary conditions in the Web Audio component	9.8 Critical	Feb 24, 2026
CVE-2026-2774	Integer overflow in the Audio/Video component	8.8 High	Feb 24, 2026
CVE-2026-2772	Use-after-free in the Audio/Video: Playback component	8.8 High	Feb 24, 2026
CVE-2026-2771	Undefined behavior in the DOM: Core & HTML component	9.8 Critical	Feb 24, 2026
CVE-2026-2770	Use-after-free in the DOM: Bindings (WebIDL) component	8.8 High	Feb 24, 2026
CVE-2026-2768	Sandbox escape in the Storage: IndexedDB component	10.0 Critical	Feb 24, 2026
CVE-2026-2769	Use-after-free in the Storage: IndexedDB component	8.8 High	Feb 24, 2026
CVE-2026-2767	Use-after-free in the JavaScript: WebAssembly component	8.8 High	Feb 24, 2026
CVE-2026-2766	Use-after-free in the JavaScript Engine: JIT component	9.8 Critical	Feb 24, 2026
CVE-2026-2764	JIT miscompilation, use-after-free in the JavaScript Engine: JIT component	9.8 Critical	Feb 24, 2026
CVE-2026-2765	Use-after-free in the JavaScript Engine component	9.8 Critical	Feb 24, 2026
CVE-2026-2763	Use-after-free in the JavaScript Engine component	9.8 Critical	Feb 24, 2026
CVE-2026-2761	Sandbox escape in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026

Other Red Hat products