Known vulnerabilities in Red Hat Enterprise Linux AppStream (v. 9)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-31488	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode…	7.8 High	Apr 22, 2026
CVE-2026-31474	In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in…	7.8 High	Apr 22, 2026
CVE-2026-41651	PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a…	8.8 High	Apr 22, 2026
CVE-2026-31431	Exploited Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	7.8 High	Apr 22, 2026
CVE-2026-34282	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-22016	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-6786	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6785	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and…	7.5 High	Apr 21, 2026
CVE-2026-6754	Use-after-free in the JavaScript Engine component	7.5 High	Apr 21, 2026
CVE-2026-6752	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6753	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6751	Uninitialized memory in the Audio/Video: Web Codecs component	7.3 High	Apr 21, 2026
CVE-2026-6750	Privilege escalation in the Graphics: WebRender component	8.8 High	Apr 21, 2026
CVE-2026-6749	Information disclosure due to uninitialized memory in the Graphics: Canvas2D component	7.5 High	Apr 21, 2026
CVE-2026-6747	Use-after-free in the WebRTC component	7.5 High	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6746	Use-after-free in the DOM: Core & HTML component	7.5 High	Apr 21, 2026
CVE-2026-40170	ngtcp2 is a C implementation of the IETF QUIC protocol	7.5 High	Apr 16, 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 High	Apr 16, 2026
CVE-2026-32203	Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-26171	Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-33116	Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized…	7.5 High	Apr 14, 2026
CVE-2026-32178	Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network	7.5 High	Apr 14, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026

Other Red Hat products