Skip to contentRed Hat Enterprise Linux 8.4 Extended Update Support Long-life Add-on vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4695Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions, integer overflow in the Graphics componentCVE-2026-4694Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-4693Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Responsive Design Mode componentCVE-2026-4692Public exploitFix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the CSS Parsing and Computation componentCVE-2026-4691Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4690Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4689Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-4688Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry componentCVE-2026-4687Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4686Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4685Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreRace condition, use-after-free in the Graphics: WebRender componentCVE-2026-4684Fix available7.5 High
- vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 moreVim affected by Command injection via newline in glob()CVE-2026-33412Fix available5.6 Medium
- python, python software foundation cpython, red hat ai inference server 3.2 +24 more +26 morewebbrowser.open() allows leading dashes in URLsCVE-2026-4519Fix available7.0 High
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 moreLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCVE-2026-4424Fix available7.5 High
- toddr xml::parser, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreXML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stackCVE-2006-10003Fix available9.8 Critical
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2026-27135Fix available7.5 High
- giflib project giflib, red hat ai inference server 3.2, build of openjdk 1.8 +24 more +26 moreBuffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of...CVE-2026-26740Fix available8.2 High
- pyasn1, red hat migration toolkit for containers, migration toolkit for virtualization +40 more +42 morepyasn1 Vulnerable to Denial of Service via Unbounded RecursionCVE-2026-30922Fix available7.5 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer RIFF Palette Integer Overflow Remote Code Execution VulnerabilityCVE-2026-2921Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-3083Fix available8.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-3085Fix available8.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-3082Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap DimensionsCVE-2026-31806Fix available9.3 Critical
- debian linux, openbsd openssh, canonical ubuntu linux +39 more +41 moreVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...CVE-2026-3497Fix available2.7 Low
- giflib, red hat ai inference server 3.2, ai inference server 3.3 +18 more +20 moreGiflib contains a double-free vulnerability that is the result of a shallow copy in...CVE-2026-23868Fix available5.1 Medium
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +143 more +145 moreIncorrect parsing of IPv6 host literals in net/urlCVE-2026-25679Fix available7.5 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 moreOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeCVE-2026-27622Fix available8.4 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has Out-of-bounds WriteCVE-2026-26965Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has Out-of-bounds WriteCVE-2026-26955Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2793Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2792Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the DOM: Core & HTML componentCVE-2026-2778Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 morePrivilege escalation in the Messaging System componentCVE-2026-2777Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry component in External SoftwareCVE-2026-2776Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: HTML Parser componentCVE-2026-2775Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the Audio/Video componentCVE-2026-2774Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-2773Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Audio/Video: Playback componentCVE-2026-2772Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUndefined behavior in the DOM: Core & HTML componentCVE-2026-2771Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-2770Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Storage: IndexedDB componentCVE-2026-2769Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Storage: IndexedDB componentCVE-2026-2768Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-2767Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-2766Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2765Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT componentCVE-2026-2764Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2763Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library componentCVE-2026-2762Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender componentCVE-2026-2761Fix available10.0 Critical
- Show moreLoading…