Red Hat Enterprise Linux Ai 3.3 vulnerabilities

6 CVEs affecting Red Hat Enterprise Linux Ai 3.3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-56211, published 2026-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-56211, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control…
CVE-2026-6100, published 2026-04-13. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is…
CVE-2026-56209, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an…
CVE-2026-56210, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows…
CVE-2026-4786, published 2026-04-13. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the…
CVE-2026-56208, published 2026-06-19. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer…