Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 8)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-8391 | Other issue in the JavaScript Engine component | 5.3 Medium | May 12, 2026 |
| CVE-2026-8388 | Incorrect boundary conditions in the JavaScript Engine: JIT component | 6.5 Medium | May 12, 2026 |
| CVE-2026-28901 | The issue was addressed with improved memory handling | 4.3 Medium | May 11, 2026 |
| CVE-2026-28946 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | May 11, 2026 |
| CVE-2026-28947 | A use-after-free issue was addressed with improved memory management | 8.8 High | May 11, 2026 |
| CVE-2026-43658 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28905 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28883 | A use-after-free issue was addressed with improved memory management | 7.5 High | May 11, 2026 |
| CVE-2026-28904 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28953 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28903 | The issue was addressed with improved memory handling | 6.5 Medium | May 11, 2026 |
| CVE-2026-28942 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | May 11, 2026 |
| CVE-2026-28902 | The issue was addressed with improved memory handling | 6.5 Medium | May 11, 2026 |
| CVE-2026-28847 | The issue was addressed with improved memory handling | 8.8 High | May 11, 2026 |
| CVE-2026-28955 | The issue was addressed with improved memory handling | 8.8 High | May 11, 2026 |
| CVE-2026-4892 | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute… | 8.4 High | May 11, 2026 |
| CVE-2026-4891 | A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a… | 5.3 Medium | May 11, 2026 |
| CVE-2026-4890 | A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of… | 7.5 High | May 11, 2026 |
| CVE-2026-6722 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP… | 9.5 Critical | May 10, 2026 |
| CVE-2026-7262 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP… | 2.9 Low | May 10, 2026 |
| CVE-2026-7568 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone()… | 6.3 Medium | May 10, 2026 |
| CVE-2026-42258 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby | 5.8 Medium | May 9, 2026 |
| CVE-2026-42246 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby | 7.6 High | May 9, 2026 |
| CVE-2026-33811 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… | 7.5 High | May 7, 2026 |
| CVE-2026-8094 | Other issue in the WebRTC component | 9.8 Critical | May 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433