Skip to contentRed Hat Enterprise Linux 8.8 Telecommunications Update Service vulnerabilities
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()CVE-2026-50263Fix available5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesCVE-2026-50262Fix available5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformatCVE-2026-50264Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()CVE-2026-50261Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()CVE-2026-50260Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexingCVE-2026-50259Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levelsCVE-2026-50258Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()CVE-2026-50257Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatchCVE-2026-50256Fix available7.8 High
- red hat multicluster engine for kubernetes, enterprise linux 10, enterprise linux 6 +16 more +18 moreNetworkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendCVE-2026-10805Fix available6.7 Medium
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Public exploitFix availableEPSS 33.0%7.5 High
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moresmb: client: reject userspace cifs.spnego descriptionsCVE-2026-46243Public exploitFix available7.1 High
- red hat ai inference server 3.3, enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePoppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationCVE-2026-10118Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreHeap-buffer-overflow write in planar bitmap decoderCVE-2026-45700Fix available7.7 High
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALLCVE-2026-46227Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pathCVE-2026-46189Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()CVE-2026-46181Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morewifi: mac80211: remove station if connection prep failsCVE-2026-46125Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteCVE-2026-46116Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreALSA: aloop: Fix peer runtime UAF during format-change stopCVE-2026-46090Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreselinux: fix overlayfs mmap() and mprotect() access checksCVE-2026-46054Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moregfs2: Fix use-after-free in iomap inline data write pathCVE-2026-45984Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreRDMA/rxe: Fix double free in rxe_srq_from_initCVE-2026-45852Fix available7.8 High
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globCVE-2026-48962Public exploitFix available7.3 High
- opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreLibsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataCVE-2026-48864Fix available7.8 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreSamba: samba: remote code execution in printing subsystem via unescaped job descriptionCVE-2026-4480Public exploitFix availableEPSS 28.7%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: remote code execution in samrCVE-2026-4408Public exploitFix availableEPSS 46.9%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 moreSamba: group policy certificate enrollment uses http:// without validationCVE-2026-3012Fix available8.0 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreSamba: vfs_worm does not block directory modificationCVE-2026-2340Fix available6.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: missing access check on reparse point operationsCVE-2026-1933Fix available7.1 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts, red hat assisted installer for red hat openshift container platform 2 +53 more +55 moreInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCVE-2026-42508Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 moreInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agentCVE-2026-39832Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 moreInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCVE-2026-39830Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 moreInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/sshCVE-2026-39829Fix available7.5 High
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionCVE-2026-8632Fix available8.5 High
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionCVE-2026-8631Fix available9.3 Critical
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)CVE-2026-9064Fix available7.5 High
- mate-desktop atril, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 morePDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopenCVE-2026-46529Public exploitFix available8.4 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8975Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-8947Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-8946Fix available7.5 High
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 moreImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...CVE-2025-54518Fix available7.3 High
- cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 morelibyang: lyb_read_string() integer overflow → heap buffer overflowCVE-2026-44673Fix available7.5 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePostgreSQL discloses MD5-hashed passwords via covert timing channelCVE-2026-6478Fix available6.5 Medium
- postgresql, red hat discovery 2, enterprise linux 10 +17 more +19 morePostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryCVE-2026-6477Fix available8.8 High
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparoundCVE-2026-6473Fix available8.8 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Profile Backup componentCVE-2026-8401Fix available9.8 Critical
- Show moreLoading…