Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-16524	Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection	7.8 High	Jul 30, 2026
CVE-2026-18220	An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils	7.8 High	Jul 29, 2026
CVE-2026-18107	Criu: criu: container escape via rseq critical section hijack during checkpoint/restore	7.8 High	Jul 28, 2026
CVE-2026-16313	Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export	7.6 High	Jul 28, 2026
CVE-2026-18047	Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash	6.5 Medium	Jul 28, 2026
CVE-2026-17072	Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers	3.3 Low	Jul 28, 2026
CVE-2026-66759	Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images	7.1 High	Jul 27, 2026
CVE-2026-66757	Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images	5.5 Medium	Jul 27, 2026
CVE-2026-66758	Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images	7.8 High	Jul 27, 2026
CVE-2026-15003	Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	5.6 Medium	Jul 27, 2026
CVE-2026-17523	In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and…	7.8 High	Jul 27, 2026
CVE-2026-66337	Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()	6.5 Medium	Jul 24, 2026
CVE-2026-66338	Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()	5.4 Medium	Jul 24, 2026
CVE-2026-66339	Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels	6.5 Medium	Jul 24, 2026
CVE-2026-17039	Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path	3.1 Low	Jul 24, 2026
CVE-2026-16743	A flaw was found in accountsservice	5.5 Medium	Jul 24, 2026
CVE-2026-12353	Rhcs: memory leak during https connection leads to denial of service	5.3 Medium	Jul 23, 2026
CVE-2026-16768	Gdk-pixbuf: out-of-bounds read in ico parser	5.3 Medium	Jul 23, 2026
CVE-2026-64611	Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()	7.5 High	Jul 23, 2026
CVE-2026-6390	Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.	6.8 Medium	Jul 23, 2026
CVE-2026-16552	A flaw was found in systemd-tmpfiles	6.3 Medium	Jul 22, 2026
CVE-2026-16560	389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn	5.3 Medium	Jul 22, 2026
CVE-2026-16473	Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame	4.3 Medium	Jul 22, 2026
CVE-2026-16517	Libarchive: libarchive: signed integer overflow in archive_write_zip_header	2.9 Low	Jul 21, 2026
CVE-2026-16493	Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)	7.8 High	Jul 21, 2026

Other Red Hat products