Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 10)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-8947	Use-after-free in the DOM: Bindings (WebIDL) component	7.3 High	May 19, 2026
CVE-2026-8946	Incorrect boundary conditions in the Audio/Video: Web Codecs component	7.5 High	May 19, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-46333	In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The…	7.1 High	May 15, 2026
CVE-2026-44673	libyang is a YANG data modeling language library	7.5 High	May 14, 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Medium	May 14, 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 High	May 14, 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 High	May 14, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-42945	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42899	Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service…	7.5 High	May 12, 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critical	May 12, 2026
CVE-2026-8391	Other issue in the JavaScript Engine component	5.3 Medium	May 12, 2026
CVE-2026-8388	Incorrect boundary conditions in the JavaScript Engine: JIT component	6.5 Medium	May 12, 2026
CVE-2026-5172	A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read…	7.3 High	May 11, 2026
CVE-2026-4892	A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute…	8.4 High	May 11, 2026
CVE-2026-4891	A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a…	5.3 Medium	May 11, 2026
CVE-2026-4890	A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of…	7.5 High	May 11, 2026
CVE-2026-4802	Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui	8.0 High	May 11, 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Low	May 10, 2026
CVE-2026-7263	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly,…	6.3 Medium	May 10, 2026
CVE-2026-6104	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is…	6.3 Medium	May 10, 2026
CVE-2026-7262	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP…	2.9 Low	May 10, 2026
CVE-2026-7568	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone()…	6.3 Medium	May 10, 2026

Other Red Hat products