Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-72693	Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login	7.8 High	Aug 11, 2026
CVE-2026-72694	Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation	7.1 High	Aug 11, 2026
CVE-2026-6426	Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access	4.4 Medium	Aug 10, 2026
CVE-2026-19411	Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null	3.9 Low	Aug 10, 2026
CVE-2026-63622	Libvirt: swtpm privilege escalation via symlink following	7.8 High	Aug 10, 2026
CVE-2026-59091	Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file	7.3 High	Aug 10, 2026
CVE-2026-63623	Libvirt: information disclosure via world-readable storage volume images during clone/convert	5.5 Medium	Aug 10, 2026
CVE-2026-59090	Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow	8.4 High	Aug 10, 2026
CVE-2026-59088	Gimp: gimp: denial of service via signed integer overflow in fli file processing	5.5 Medium	Aug 10, 2026
CVE-2026-59087	Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation	7.8 High	Aug 10, 2026
CVE-2026-19404	389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance	6.5 Medium	Aug 10, 2026
CVE-2026-19389	Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read	7.1 High	Aug 10, 2026
CVE-2026-19387	A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding…	7.6 High	Aug 10, 2026
CVE-2026-42170	Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)	7.8 High	Aug 8, 2026
CVE-2026-61477	Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection	2.3 Low	Aug 7, 2026
CVE-2026-15816	A flaw was found in dracut	7.5 High	Aug 7, 2026
CVE-2026-18938	A flaw was found in p11-kit	6.2 Medium	Aug 7, 2026
CVE-2026-19079	Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation	4.4 Medium	Aug 7, 2026
CVE-2026-7867	Udisks2: udisks2: local privilege escalation via as-user option spoofing	7.8 High	Aug 6, 2026
CVE-2026-18649	A flaw was found in the GStreamer gst-plugins-good package	7.5 High	Aug 6, 2026
CVE-2026-18839	Popt-devel: popt-static: size_t underflow in singleoptionhelp	2.2 Low	Aug 5, 2026
CVE-2026-44605	Rpm: heap buffer overflow in ndb slot table parsing	5.5 Medium	Aug 5, 2026
CVE-2026-71227	A flaw was found in libkcapi	5.1 Medium	Aug 5, 2026
CVE-2026-71226	Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	7.3 High	Aug 5, 2026
CVE-2026-71225	A flaw was found in libkcapi	6.5 Medium	Aug 5, 2026

Other Red Hat products