Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 9)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-49261	MariaDB server is a community developed fork of MySQL server	10.0 Critical	Jun 11, 2026
CVE-2026-46316	In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache…	9.3 Critical	Jun 9, 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critical	Jun 9, 2026
CVE-2026-46244	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In…	9.1 Critical	Jun 3, 2026
CVE-2026-46195	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building…	9.8 Critical	May 28, 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critical	May 28, 2026
CVE-2026-45898	In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing…	9.8 Critical	May 27, 2026
CVE-2026-4480	Samba: samba: remote code execution in printing subsystem via unescaped job description	9.0 Critical	May 26, 2026
CVE-2026-42496	Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction…	9.1 Critical	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critical	May 22, 2026
CVE-2026-43501	In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when…	9.8 Critical	May 21, 2026
CVE-2026-8631	A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software	9.3 Critical	May 20, 2026
CVE-2026-33278	NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables…	9.1 Critical	May 20, 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critical	May 12, 2026
CVE-2026-6722	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP…	9.5 Critical	May 10, 2026
CVE-2026-8094	Other issue in the WebRTC component	9.8 Critical	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43125	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The…	9.8 Critical	May 6, 2026

Other Red Hat products