Aller au contenu

Vulnérabilités de Red Hat Red Hat Enterprise Linux AppStream (v. 10)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-8947 Use-after-free in the DOM: Bindings (WebIDL) component 7.3 Élevée 19 mai 2026
CVE-2026-8946 Incorrect boundary conditions in the Audio/Video: Web Codecs component 7.5 Élevée 19 mai 2026
CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 Élevée 18 mai 2026
CVE-2026-46333 In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The… 7.1 Élevée 15 mai 2026
CVE-2026-44673 libyang is a YANG data modeling language library 7.5 Élevée 14 mai 2026
CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover… 6.5 Moyenne 14 mai 2026
CVE-2026-6477 Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),… 8.8 Élevée 14 mai 2026
CVE-2026-6473 Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to… 8.8 Élevée 14 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-42945 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module 8.1 Élevée 13 mai 2026
CVE-2026-42338 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript 5.3 Moyenne 12 mai 2026
CVE-2026-42899 Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 12 mai 2026
CVE-2026-8401 Sandbox escape in the Profile Backup component 9.8 Critique 12 mai 2026
CVE-2026-8391 Other issue in the JavaScript Engine component 5.3 Moyenne 12 mai 2026
CVE-2026-8388 Incorrect boundary conditions in the JavaScript Engine: JIT component 6.5 Moyenne 12 mai 2026
CVE-2026-5172 A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read… 7.3 Élevée 11 mai 2026
CVE-2026-4892 A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute… 8.4 Élevée 11 mai 2026
CVE-2026-4891 A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a… 5.3 Moyenne 11 mai 2026
CVE-2026-4890 A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of… 7.5 Élevée 11 mai 2026
CVE-2026-4802 Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 Élevée 11 mai 2026
CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via… 2.9 Faible 10 mai 2026
CVE-2026-7263 In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly,… 6.3 Moyenne 10 mai 2026
CVE-2026-6104 In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is… 6.3 Moyenne 10 mai 2026
CVE-2026-7262 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP… 2.9 Faible 10 mai 2026
CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone()… 6.3 Moyenne 10 mai 2026

Autres produits Red Hat