RH
Product
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
On CISA KEVExploited in the wild
250
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 58High 158Medium 32Low 2
Watch
Add Red Hat Enterprise Linux 8.6 Telecommunications Update Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49176 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension Affected: All versions, or not specified |
| CVE-2025-48798 | 7.3 | May 27 | Gimp: multiple use after free in xcf parser Affected: All versions, or not specified |
| CVE-2025-48797 | 7.3 | May 27 | Gimp: multiple heap buffer overflows in tga parser Affected: All versions, or not specified |
| CVE-2025-14905 | 7.2 | Feb 23 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow Affected: All versions, or not specified |
| CVE-2026-46333 | 7.1 | May 15 | ptrace: slightly saner 'get_dumpable()' logic Affected: All versions, or not specified |
| CVE-2026-4786 | 7.1 | Apr 13 | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() Affected: All versions, or not specified |
| CVE-2026-4887 | 7.1 | Mar 26 | Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image Affected: All versions, or not specified |
| CVE-2025-6019 | 7.0 | Jun 19 | Libblockdev: lpe from allow_active to root in libblockdev via udisks Affected: All versions, or not specified |