# Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support. Every CVE that names Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image](https://agentprime.io/advisories/CVE-2026-12912.md) `CVE-2026-12912` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications](https://agentprime.io/advisories/CVE-2026-13601.md) `CVE-2026-13601` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-693 - [Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode](https://agentprime.io/advisories/CVE-2026-56208.md) `CVE-2026-56208` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression](https://agentprime.io/advisories/CVE-2026-10649.md) `CVE-2026-10649` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin](https://agentprime.io/advisories/CVE-2026-42014.md) `CVE-2026-42014` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling](https://agentprime.io/advisories/CVE-2026-52722.md) `CVE-2026-52722` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb](https://agentprime.io/advisories/CVE-2026-52720.md) `CVE-2026-52720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow](https://agentprime.io/advisories/CVE-2026-53705.md) `CVE-2026-53705` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Abrt: unsanitized systemd journal content written to dump directory files enables content injection](https://agentprime.io/advisories/CVE-2026-54231.md) `CVE-2026-54231` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jun 2026 · Tags: Other injection - [Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites](https://agentprime.io/advisories/CVE-2026-54230.md) `CVE-2026-54230` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jun 2026 · Tags: Path traversal - [Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking](https://agentprime.io/advisories/CVE-2026-54229.md) `CVE-2026-54229` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jun 2026 · Tags: Race condition - [Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories](https://agentprime.io/advisories/CVE-2026-54228.md) `CVE-2026-54228` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jun 2026 · Tags: Race condition - [389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow](https://agentprime.io/advisories/CVE-2026-11774.md) `CVE-2026-11774` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.6 High · Not analysed yet · Published 11 Jun 2026 · Tags: Memory corruption - [Dracut: dracut: root code execution via dhcp options command injection](https://agentprime.io/advisories/CVE-2026-6893.md) `CVE-2026-6893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown](https://agentprime.io/advisories/CVE-2026-11837.md) `CVE-2026-11837` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2026 · Tags: Path traversal - [389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser](https://agentprime.io/advisories/CVE-2026-11788.md) `CVE-2026-11788` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()](https://agentprime.io/advisories/CVE-2026-50263.md) `CVE-2026-50263` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes](https://agentprime.io/advisories/CVE-2026-50262.md) `CVE-2026-50262` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat](https://agentprime.io/advisories/CVE-2026-50264.md) `CVE-2026-50264` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()](https://agentprime.io/advisories/CVE-2026-50261.md) `CVE-2026-50261` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()](https://agentprime.io/advisories/CVE-2026-50260.md) `CVE-2026-50260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels](https://agentprime.io/advisories/CVE-2026-50258.md) `CVE-2026-50258` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing](https://agentprime.io/advisories/CVE-2026-50259.md) `CVE-2026-50259` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch](https://agentprime.io/advisories/CVE-2026-50256.md) `CVE-2026-50256` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()](https://agentprime.io/advisories/CVE-2026-50257.md) `CVE-2026-50257` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend](https://agentprime.io/advisories/CVE-2026-10805.md) `CVE-2026-10805` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection - [Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication](https://agentprime.io/advisories/CVE-2026-10118.md) `CVE-2026-10118` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption - [Samba: remote code execution in samr](https://agentprime.io/advisories/CVE-2026-4408.md) `CVE-2026-4408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2026 · Tags: Command injection - [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md) `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control - [Samba: vfs_worm does not block directory modification](https://agentprime.io/advisories/CVE-2026-2340.md) `CVE-2026-2340` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-280 - [Samba: group policy certificate enrollment uses http\:// without validation](https://agentprime.io/advisories/CVE-2026-3012.md) `CVE-2026-3012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-345 - [Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling](https://agentprime.io/advisories/CVE-2026-42015.md) `CVE-2026-42015` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-193 - [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md) `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans](https://agentprime.io/advisories/CVE-2026-42012.md) `CVE-2026-42012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: information disclosure via heap overread in rsa key exchange](https://agentprime.io/advisories/CVE-2026-5260.md) `CVE-2026-5260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-126 - [Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data](https://agentprime.io/advisories/CVE-2026-48864.md) `CVE-2026-48864` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 May 2026 · Tags: Memory corruption - [Samba: samba: remote code execution in printing subsystem via unescaped job description](https://agentprime.io/advisories/CVE-2026-4480.md) `CVE-2026-4480` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 26 May 2026 · Tags: Command injection - [389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)](https://agentprime.io/advisories/CVE-2026-9064.md) `CVE-2026-9064` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2026 · Tags: Denial of service - [Gnutls: gnutls: denial of service via dtls packet reordering vulnerability](https://agentprime.io/advisories/CVE-2026-42009.md) `CVE-2026-42009` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-475 - [Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui](https://agentprime.io/advisories/CVE-2026-4802.md) `CVE-2026-4802` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection - [Gnutls: gnutls: security bypass due to incorrect name constraint handling](https://agentprime.io/advisories/CVE-2026-42011.md) `CVE-2026-42011` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: authentication bypass via nul character in username](https://agentprime.io/advisories/CVE-2026-42010.md) `CVE-2026-42010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-170, CWE-626 - [Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling](https://agentprime.io/advisories/CVE-2026-34002.md) `CVE-2026-34002` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.](https://agentprime.io/advisories/CVE-2026-34000.md) `CVE-2026-34000` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly](https://agentprime.io/advisories/CVE-2026-33846.md) `CVE-2026-33846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-130 - [Gnutls: gnutls: denial of service via dtls zero-length fragment](https://agentprime.io/advisories/CVE-2026-33845.md) `CVE-2026-33845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption - [Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison](https://agentprime.io/advisories/CVE-2026-3833.md) `CVE-2026-3833` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-178 - [Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access](https://agentprime.io/advisories/CVE-2026-34003.md) `CVE-2026-34003` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption](https://agentprime.io/advisories/CVE-2026-34001.md) `CVE-2026-34001` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling](https://agentprime.io/advisories/CVE-2026-33999.md) `CVE-2026-33999` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md) `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition - [Corosync: corosync: denial of service via integer overflow in join message validation](https://agentprime.io/advisories/CVE-2026-35092.md) `CVE-2026-35092` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Corosync: corosync: denial of service and information disclosure via crafted udp packet](https://agentprime.io/advisories/CVE-2026-35091.md) `CVE-2026-35091` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-253 - [Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image](https://agentprime.io/advisories/CVE-2026-5201.md) `CVE-2026-5201` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing](https://agentprime.io/advisories/CVE-2026-5121.md) `CVE-2026-5121` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment](https://agentprime.io/advisories/CVE-2026-5119.md) `CVE-2026-5119` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS - [Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image](https://agentprime.io/advisories/CVE-2026-4887.md) `CVE-2026-4887` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-193 - [Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing](https://agentprime.io/advisories/CVE-2026-4775.md) `CVE-2026-4775` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing](https://agentprime.io/advisories/CVE-2026-4424.md) `CVE-2026-4424` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow](https://agentprime.io/advisories/CVE-2025-14905.md) `CVE-2025-14905` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.2 High · Not analysed yet · Published 23 Feb 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .