Skip to contentRed Hat Enterprise Linux 8 vulnerabilities
- rack, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +4 more +6 moreRack has a Directory Traversal via Rack:DirectoryCVE-2026-22860Fix available7.5 High
- ocaml, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIn OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization ...CVE-2026-28364Public exploitFix available7.9 High
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreLibsoup: libsoup: buffer overread due to integer underflow when handling zero-length resourcesCVE-2026-2369Fix available6.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewifi: iwlwifi: mld: cancel mlo_scan_start_wkCVE-2026-23185Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()CVE-2026-23111Public exploitFix available7.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosureCVE-2026-2443Fix available5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: memory corruption due to integer overflow in ico file handlingCVE-2026-2272Fix available4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via crafted psp image fileCVE-2026-2271Fix available3.3 Low
- gimp, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflowCVE-2026-2239Fix available2.8 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service due to malformed sftp messageCVE-2026-0968Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processingCVE-2026-0967Fix available2.2 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handlingCVE-2026-0965Fix available3.3 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp serversCVE-2026-0964Fix available5.0 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary codeCVE-2026-2006Fix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary codeCVE-2026-2005Public exploitFix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20644Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20652Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...CVE-2026-20608Fix available5.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS...CVE-2026-20635Fix available4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS...CVE-2026-20636Fix available6.5 Medium
- google libjxl, red hat enterprise linux 10, enterprise linux 7 +2 more +4 morelibjxl: Out-of-bounds write in grayscale color transformation when using LCMS2CVE-2026-1837Fix available8.7 High
- python pillow, red hat openshift lightspeed, ai inference server +24 more +26 morePillow has an out-of-bounds write when loading PSD imagesCVE-2026-25990Fix available8.6 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-0797Fix available7.8 High
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` optionCVE-2025-69873Fix available2.9 Low
- cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 morecryptography Subgroup Attack Due to Missing Subgroup Validation for SECT CurvesCVE-2026-26007Fix available8.2 High
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantizeCVE-2026-25646Fix available8.3 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +3 more +5 moreMissing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist...CVE-2025-35998Fix available7.0 High
- dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 moreMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgeryCVE-2026-25506Fix available7.7 High
- gnu gnutls, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binderCVE-2026-1584Fix available7.5 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios affected by Denial of Service via __proto__ Key in mergeConfigCVE-2026-25639Fix available7.5 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreGnutls: gnutls: denial of service via excessive resource consumption during certificate verificationCVE-2025-14831Fix available5.3 Medium
- microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: null dereference via c_derivekey with specific null parametersCVE-2026-2100Fix available5.3 Medium
- go toolchain cmd/cgo, golang go, red hat enterprise linux 10 +31 more +33 morePotential code smuggling via doc comments in cmd/cgoCVE-2025-61732Fix available8.6 High
- apache tomcat, tomcat native, red hat enterprise linux 10 +10 more +12 moreApache Tomcat Native, Apache Tomcat: OCSP revocation bypassCVE-2026-24734Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 morenet/sched: Enforce that teql can only be used as root qdiscCVE-2026-23074Fix available7.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via malformed chunk headersCVE-2026-1801Public exploitFix available5.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreFreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_threadCVE-2026-24678Fix available8.7 High
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tagsCVE-2026-1767Fix available5.6 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.CVE-2026-1766Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 filesCVE-2026-1765Fix available5.6 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 filesCVE-2026-1764Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupserver: denial of service via http request smugglingCVE-2026-1760Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreLibsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responseCVE-2026-1761Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibxml2: memory leak leading to local denial of service in xmllint interactive shellCVE-2026-1757Fix available6.2 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service via connection exhaustion in applications using Cache ComponentsCVE-2026-44579Public exploitFix available7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Server-side request forgery in applications using WebSocket upgradesCVE-2026-44578Public exploitFix availableEPSS 35.5%8.6 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service in the Image Optimization APICVE-2026-44577Fix available5.9 Medium
- Show moreLoading…