Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-12293	Use-after-free in the Graphics: WebGPU component	9.8 Critical	Jun 16, 2026
CVE-2026-12292	Incorrect boundary conditions in the Web Audio component	8.1 High	Jun 16, 2026
CVE-2026-12291	Use-after-free in the Networking: HTTP component	8.8 High	Jun 16, 2026
CVE-2026-12290	Memory safety bug fixed in Thunderbird 152	8.1 High	Jun 16, 2026
CVE-2026-12289	Privilege escalation in the Graphics: WebRender component	8.8 High	Jun 16, 2026
CVE-2026-46331	In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page…	7.8 High	Jun 16, 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Medium	Jun 16, 2026
CVE-2026-1767	A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3`…	5.6 Medium	Jun 16, 2026
CVE-2026-1766	A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the…	5.6 Medium	Jun 16, 2026
CVE-2026-1765	A flaw was found in the `tracker-extract-mp3` component of GNOME localsearch (previously known as tracker-miners)	5.6 Medium	Jun 16, 2026
CVE-2026-1764	A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor	5.6 Medium	Jun 16, 2026
CVE-2026-52718	Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion	6.5 Medium	Jun 15, 2026
CVE-2026-52722	Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling	7.1 High	Jun 15, 2026
CVE-2026-52720	Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb	8.8 High	Jun 15, 2026
CVE-2026-53704	Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser	7.1 High	Jun 15, 2026
CVE-2026-53703	Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser	7.1 High	Jun 15, 2026
CVE-2026-52721	Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing	5.3 Medium	Jun 15, 2026
CVE-2026-53705	A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good	7.6 High	Jun 15, 2026
CVE-2026-52719	Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder	7.1 High	Jun 15, 2026
CVE-2026-8357	LibreOffice Calc compiles cell formulas when opening a spreadsheet	5.4 Medium	Jun 15, 2026
CVE-2026-6040	A heap use-after-free existed when importing the blank-width characters of an ODF number format	5.4 Medium	Jun 15, 2026
CVE-2026-54231	Abrt: unsanitized systemd journal content written to dump directory files enables content injection	5.5 Medium	Jun 13, 2026
CVE-2026-54230	Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites	7.0 High	Jun 13, 2026
CVE-2026-54229	Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking	7.0 High	Jun 13, 2026

Other Red Hat products