Vulnérabilités connues pour Red Hat Enterprise Linux AppStream (v. 9)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 Élevée	1 avr. 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 Élevée	31 mars 2026
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 Élevée	30 mars 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Moyenne	30 mars 2026
CVE-2026-21710	A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named…	7.5 Élevée	30 mars 2026
CVE-2026-27877	When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being…	6.5 Moyenne	27 mars 2026
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 Élevée	27 mars 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Moyenne	27 mars 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 Élevée	27 mars 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 Élevée	26 mars 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critique	26 mars 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 Élevée	26 mars 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 Élevée	25 mars 2026
CVE-2026-20664	The issue was addressed with improved memory handling	4.3 Moyenne	25 mars 2026
CVE-2026-28859	The issue was addressed with improved memory handling	4.3 Moyenne	25 mars 2026
CVE-2026-28857	The issue was addressed with improved memory handling	6.5 Moyenne	25 mars 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-4371	A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside…	7.4 Élevée	24 mars 2026
CVE-2026-33412	Vim is an open source, command line text editor	5.6 Moyenne	24 mars 2026
CVE-2026-4775	Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing	7.8 Élevée	24 mars 2026
CVE-2026-27651	When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can…	7.5 Élevée	24 mars 2026
CVE-2026-27654	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker…	8.2 Élevée	24 mars 2026
CVE-2026-27784	The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might…	7.8 Élevée	24 mars 2026
CVE-2026-32647	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker…	7.8 Élevée	24 mars 2026
CVE-2026-4721	Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…	9.8 Critique	24 mars 2026

Autres produits Red Hat