Vulnérabilités de Red Hat Red Hat Enterprise Linux AppStream (v. 10)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-5734	Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1	8.1 Élevée	7 avr. 2026
CVE-2026-5732	Incorrect boundary conditions, integer overflow in the Graphics: Text component	8.8 Élevée	7 avr. 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critique	7 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-34588	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.6 Élevée	6 avr. 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 Élevée	6 avr. 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critique	3 avr. 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 Élevée	3 avr. 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 Élevée	2 avr. 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 Élevée	1 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 Élevée	31 mars 2026
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 Élevée	30 mars 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Moyenne	30 mars 2026
CVE-2026-21710	A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named…	7.5 Élevée	30 mars 2026
CVE-2026-27877	When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being…	6.5 Moyenne	27 mars 2026
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 Élevée	27 mars 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Moyenne	27 mars 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 Élevée	27 mars 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 Élevée	26 mars 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critique	26 mars 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 Élevée	26 mars 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 Élevée	25 mars 2026
CVE-2026-3608	Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any…	7.5 Élevée	25 mars 2026

Autres produits Red Hat