Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 9)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2776	Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software	10.0 Critical	Feb 24, 2026
CVE-2026-2777	Privilege escalation in the Messaging System component	9.8 Critical	Feb 24, 2026
CVE-2026-2775	Mitigation bypass in the DOM: HTML Parser component	9.8 Critical	Feb 24, 2026
CVE-2026-2773	Incorrect boundary conditions in the Web Audio component	9.8 Critical	Feb 24, 2026
CVE-2026-2774	Integer overflow in the Audio/Video component	8.8 High	Feb 24, 2026
CVE-2026-2772	Use-after-free in the Audio/Video: Playback component	8.8 High	Feb 24, 2026
CVE-2026-2771	Undefined behavior in the DOM: Core & HTML component	9.8 Critical	Feb 24, 2026
CVE-2026-2770	Use-after-free in the DOM: Bindings (WebIDL) component	8.8 High	Feb 24, 2026
CVE-2026-2768	Sandbox escape in the Storage: IndexedDB component	10.0 Critical	Feb 24, 2026
CVE-2026-2769	Use-after-free in the Storage: IndexedDB component	8.8 High	Feb 24, 2026
CVE-2026-2767	Use-after-free in the JavaScript: WebAssembly component	8.8 High	Feb 24, 2026
CVE-2026-2766	Use-after-free in the JavaScript Engine: JIT component	9.8 Critical	Feb 24, 2026
CVE-2026-2764	JIT miscompilation, use-after-free in the JavaScript Engine: JIT component	9.8 Critical	Feb 24, 2026
CVE-2026-2765	Use-after-free in the JavaScript Engine component	9.8 Critical	Feb 24, 2026
CVE-2026-2763	Use-after-free in the JavaScript Engine component	9.8 Critical	Feb 24, 2026
CVE-2026-2761	Sandbox escape in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026
CVE-2026-2762	Integer overflow in the JavaScript: Standard Library component	9.8 Critical	Feb 24, 2026
CVE-2026-2760	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026
CVE-2026-2759	Incorrect boundary conditions in the Graphics: ImageLib component	9.8 Critical	Feb 24, 2026
CVE-2026-2758	Use-after-free in the JavaScript: GC component	9.8 Critical	Feb 24, 2026
CVE-2026-2757	Incorrect boundary conditions in the WebRTC: Audio/Video component	9.8 Critical	Feb 24, 2026
CVE-2026-21863	Valkey is a distributed key-value database	7.5 High	Feb 23, 2026
CVE-2025-67733	Valkey is a distributed key-value database	8.5 High	Feb 23, 2026
CVE-2026-2048	GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026
CVE-2026-2047	GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Feb 20, 2026

Other Red Hat products