Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 8)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-11774	389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow	7.6 High	Jun 11, 2026
CVE-2026-49261	MariaDB server is a community developed fork of MySQL server	10.0 Critical	Jun 11, 2026
CVE-2026-46529	Atril Document Viewer is the default document reader of the MATE desktop environment for Linux	8.4 High	Jun 10, 2026
CVE-2026-45591	Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network	7.5 High	Jun 9, 2026
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-9698	DBI versions before 1.648 for Perl saved errors in a limited-sized buffer	7.5 High	Jun 9, 2026
CVE-2026-49975	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service…	Not rated	Jun 8, 2026
CVE-2026-50264	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat	7.8 High	Jun 5, 2026
CVE-2026-50261	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()	7.8 High	Jun 5, 2026
CVE-2026-50260	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()	7.8 High	Jun 5, 2026
CVE-2026-50258	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels	7.8 High	Jun 5, 2026
CVE-2026-50259	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing	7.8 High	Jun 5, 2026
CVE-2026-50256	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch	7.8 High	Jun 5, 2026
CVE-2026-50257	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()	7.8 High	Jun 5, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-10118	Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication	7.8 High	Jun 1, 2026
CVE-2026-45700	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	May 29, 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critical	May 28, 2026
CVE-2026-1933	Samba: missing access check on reparse point operations	7.1 High	May 27, 2026
CVE-2026-3012	Samba: group policy certificate enrollment uses http:// without validation	8.0 High	May 27, 2026
CVE-2026-48962	IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled…	7.3 High	May 27, 2026
CVE-2026-4480	Samba: samba: remote code execution in printing subsystem via unescaped job description	9.0 Critical	May 26, 2026
CVE-2026-42496	Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction…	9.1 Critical	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-9256	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 High	May 22, 2026

Other Red Hat products