Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream TUS (v.8.6)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-34003	Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access	7.8 High	Apr 23, 2026
CVE-2026-34001	Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption	7.8 High	Apr 23, 2026
CVE-2026-33999	Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling	7.8 High	Apr 23, 2026
CVE-2026-41651	PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a…	8.8 High	Apr 22, 2026
CVE-2026-34282	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-22016	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-6786	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6785	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and…	7.5 High	Apr 21, 2026
CVE-2026-6754	Use-after-free in the JavaScript Engine component	7.5 High	Apr 21, 2026
CVE-2026-6752	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6753	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6751	Uninitialized memory in the Audio/Video: Web Codecs component	7.3 High	Apr 21, 2026
CVE-2026-6750	Privilege escalation in the Graphics: WebRender component	8.8 High	Apr 21, 2026
CVE-2026-6749	Information disclosure due to uninitialized memory in the Graphics: Canvas2D component	7.5 High	Apr 21, 2026
CVE-2026-6747	Use-after-free in the WebRTC component	7.5 High	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6746	Use-after-free in the DOM: Core & HTML component	7.5 High	Apr 21, 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 High	Apr 13, 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Medium	Apr 13, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-4154	GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4153	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-4150	GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026

Other Red Hat products