RH
Product
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
193
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 27High 133Medium 32Low 1
Watch
Add Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114406 New | 6.8 | Oct 21 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns Affected: All versions, or not specified |
| CVE-2026-53196 | 6.8 | Jun 25 | USB: serial: io_ti: fix heap overflow in get_manuf_info() Affected: All versions, or not specified |
| CVE-2026-3012 | 6.8 | May 27 | Samba: group policy certificate enrollment uses http:// without validation Affected: All versions, or not specified |
| CVE-2026-10805 | 6.7 | Jun 4 | Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend Affected: All versions, or not specified |
| CVE-2026-73433 | 6.6 | Aug 12 | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write Affected: All versions, or not specified |
| CVE-2026-42014 | 6.6 | Jun 16 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin Affected: All versions, or not specified |
| CVE-2026-13601 | 6.5 | Jun 29 | Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications Affected: All versions, or not specified |
| CVE-2026-1933 | 6.5 | May 27 | Samba: missing access check on reparse point operations Affected: All versions, or not specified |
| CVE-2026-2340 | 6.5 | May 27 | Samba: vfs_worm does not block directory modification Affected: All versions, or not specified |
| CVE-2026-6478 | 6.5 | May 14 | PostgreSQL discloses MD5-hashed passwords via covert timing channel Affected: All versions, or not specified |
| CVE-2026-8388 | 6.5 | May 12 | Incorrect boundary conditions in the JavaScript Engine: JIT component Affected: All versions, or not specified |
| CVE-2026-28946 | 6.5 | May 11 | A use-after-free issue was addressed with improved memory management Affected: All versions, or not specified |
| CVE-2026-28903 | 6.5 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28942 | 6.5 | May 11 | A use-after-free issue was addressed with improved memory management Affected: All versions, or not specified |
| CVE-2026-28902 | 6.5 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2024-9355 | 6.5 | Oct 1 | Golang-fips: golang fips zeroed buffer Affected: All versions, or not specified |
| CVE-2026-73434 | 6.1 | Aug 12 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing Affected: All versions, or not specified |
| CVE-2026-54231 | 5.5 | Jun 13 | Abrt: unsanitized systemd journal content written to dump directory files enables content injection Affected: All versions, or not specified |
| CVE-2026-50263 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() Affected: All versions, or not specified |
| CVE-2026-50262 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes Affected: All versions, or not specified |
| CVE-2025-10911 | 5.5 | Sep 25 | Libxslt: use-after-free with key data stored cross-rvt Affected: All versions, or not specified |
| CVE-2026-12299 | 5.4 | Jun 16 | JIT miscompilation in the DOM: Core & HTML component Affected: All versions, or not specified |
| CVE-2026-12298 | 5.4 | Jun 16 | Memory safety bug fixed in Thunderbird 152 Affected: All versions, or not specified |
| CVE-2026-15588 | 5.3 | Jul 20 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Affected: All versions, or not specified |
| CVE-2026-12329 | 5.3 | Jun 16 | Memory safety bug fixed in Thunderbird ESR 140.12 Affected: All versions, or not specified |
| CVE-2026-42015 | 5.3 | May 26 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling Affected: All versions, or not specified |
| CVE-2026-8391 | 5.3 | May 12 | Other issue in the JavaScript Engine component Affected: All versions, or not specified |
| CVE-2026-42258 | 5.3 | May 9 | net-imap: Command Injection via unvalidated Symbol inputs Affected: All versions, or not specified |
| CVE-2025-14831 | 5.3 | Feb 9 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification Affected: All versions, or not specified |
| CVE-2024-12133 | 5.3 | Feb 10 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos Affected: All versions, or not specified |
| CVE-2026-42006 | 4.3 | May 12 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP Affected: All versions, or not specified |
| CVE-2026-28901 | 4.3 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
Showing 32