Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 8)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-6753	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6751	Uninitialized memory in the Audio/Video: Web Codecs component	7.3 High	Apr 21, 2026
CVE-2026-6750	Privilege escalation in the Graphics: WebRender component	8.8 High	Apr 21, 2026
CVE-2026-6749	Information disclosure due to uninitialized memory in the Graphics: Canvas2D component	7.5 High	Apr 21, 2026
CVE-2026-6747	Use-after-free in the WebRTC component	7.5 High	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6746	Use-after-free in the DOM: Core & HTML component	7.5 High	Apr 21, 2026
CVE-2026-32203	Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-26171	Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-33116	Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized…	7.5 High	Apr 14, 2026
CVE-2026-32178	Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network	7.5 High	Apr 14, 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 High	Apr 13, 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Medium	Apr 13, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-4154	GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4153	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4150	GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-34486	Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	Not rated	Apr 9, 2026
CVE-2026-29146	Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration	Not rated	Apr 9, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-27140	SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution…	8.8 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critical	Apr 7, 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026

Other Red Hat products